security-review/checkers/fixtures/doc-drift/clean-repo/template.yaml at 565e41ec2b8a3d1d90b2f909fbcbde852ecf4d1b - adam/security-review - Sea Haven Git

adam/security-review

mirror of https://github.com/Sea-Haven-Industries/security-review.git synced 2026-10-04 21:52:14 +00:00

Adam Moussa 4c88c01f7b

chore: import security-review gate, sweep, and Plane-1 checkers into standalone repo

Fresh-init copy of the security-review/ subsystem extracted from
Sea-Haven-Industries/orchestrator (being deprecated). Adds org-standard scaffold:
CI reusable-workflow callers (ruff + collect), dependency-review, labeler,
dependabot, .gitignore, requirements.txt. Scheduled execution is migrating to
Claude Code web routines (ALARM-only to #repo-scanner); the systemd units and
nightly_sweep.sh/checker_coordinator.sh remain the source of truth.

Committed with --no-verify: the canary fixtures (checkers/fixtures/**) carry
intentional secret-shaped test data that trips the deterministic gate (the
documented detector-fixture false positive); no new logic is introduced.

2026-06-29 11:41:41 -04:00

11 lines

301 B

YAML

Raw Blame History

 AWSTemplateFormatVersion: '2010-09-09'
 Transform: AWS::Serverless-2016-10-31
 Resources:
   IngestFn:
     Type: AWS::Serverless::Function
     Properties:
       Handler: app.handler
       Runtime: python3.12
       InlineCode: |
         def handler(event, context):
             return {"statusCode": 200}