Review SSH credential and secrets handling #90

Open
opened 2026-05-28 22:32:51 +02:00 by parkel · 0 comments
Owner

Audit how private keys, known_hosts, webhook URLs, and other secrets are stored and displayed.

Acceptance criteria:

  • Sensitive values are hidden from read-only users and minimized for staff views.
  • Documentation explains filesystem permissions and backup implications.
  • Any needed model/UI hardening issues are split out.
Audit how private keys, known_hosts, webhook URLs, and other secrets are stored and displayed. Acceptance criteria: - Sensitive values are hidden from read-only users and minimized for staff views. - Documentation explains filesystem permissions and backup implications. - Any needed model/UI hardening issues are split out.
parkel added this to the 1.6 milestone 2026-05-28 22:32:51 +02:00
parkel added the area: securitysecurity labels 2026-05-28 22:32:51 +02:00
Sign in to join this conversation.