security(hardening): CSP, secrets untrack, DB loopback, non-root app, OAuth log redaction, image provenance#322

Merged

vedharish merged 3 commits into

mainfrom

security/chain-remediation-infra-hardening

Jul 15, 2026

Commits on Jul 15, 2026

security(hardening): CSP + headers, secrets untrack, DB/redis loopback, non-root app, OAuth log redaction, image provenance

KrishnaSuravarapu
and
claude
committed
security(auth): axes lockout by username+IP not username-only (F-032)

KrishnaSuravarapu
and
claude
committed
security(authz): gate accept_bulk with @user_any_approver (F-022)

KrishnaSuravarapu
and
claude
committed