[business_analysis] Security audit of development keys and container artifacts

Task 11133 · Done · Business analysis · created · updated

_Automatically composed from the parent epic at dispatch time._

Outcome

PRD settled with 9 requirements, each with an oracle. Build: deny-list the fixture keys on cloud and CE (reproduced as accepted), fix 4 Known gaps, prune aws/, Slack, Telegram and headscale from CE (S3 and KMS refused at boot), cosign CE images, pin by digest, SHA256SUMS installers. Cloud APP_ENV is verify-only. Memory: none applied.

Artifacts

Activity

  • Ready
  • Runner started
  • Awaiting response
  • Awaiting response
  • Awaiting response
  • Awaiting response
  • Awaiting response
  • Runner resumed
  • Awaiting response
  • Awaiting response
  • Awaiting response
  • Awaiting response
  • Awaiting response
  • Runner resumed
  • Runner ended (done)