mirror of
https://github.com/Sea-Haven-Industries/security-review.git
synced 2026-09-30 03:23:13 +00:00
Adam Moussa
4c88c01f7b
Fresh-init copy of the security-review/ subsystem extracted from Sea-Haven-Industries/orchestrator (being deprecated). Adds org-standard scaffold: CI reusable-workflow callers (ruff + collect), dependency-review, labeler, dependabot, .gitignore, requirements.txt. Scheduled execution is migrating to Claude Code web routines (ALARM-only to #repo-scanner); the systemd units and nightly_sweep.sh/checker_coordinator.sh remain the source of truth. Committed with --no-verify: the canary fixtures (checkers/fixtures/**) carry intentional secret-shaped test data that trips the deterministic gate (the documented detector-fixture false positive); no new logic is introduced.
19 lines
467 B
JSON
19 lines
467 B
JSON
{
|
|
"NatGateways": [
|
|
{
|
|
"NatGatewayId": "nat-idle-6001",
|
|
"State": "available",
|
|
"SubnetId": "subnet-abc123",
|
|
"VpcId": "vpc-def456",
|
|
"Tags": [ { "Key": "Name", "Value": "unused-private-subnet-nat" } ],
|
|
"_FixtureBytesOutLast14d": 0
|
|
},
|
|
{
|
|
"NatGatewayId": "nat-active-6002",
|
|
"State": "available",
|
|
"SubnetId": "subnet-xyz789",
|
|
"VpcId": "vpc-def456",
|
|
"_FixtureBytesOutLast14d": 9842113
|
|
}
|
|
]
|
|
}
|