forked from claw/flaskpaste
docs: update task tracking after CI enhancement
This commit is contained in:
1
TODO.md
1
TODO.md
@@ -17,6 +17,7 @@ Unstructured intake buffer for ideas, issues, and observations. Items here are r
|
||||
|
||||
## Observations
|
||||
|
||||
- CI enhanced: security-tests job, SBOM generation (CycloneDX), memory leak checks
|
||||
- Comprehensive pentest plan completed (PENTEST_PLAN.md) - all remediations implemented
|
||||
- PKI uses AES-256-GCM for CA private key encryption (PBKDF2 key derivation)
|
||||
- SHA1 fingerprints are X.509 standard, not security-relevant (usedforsecurity=False)
|
||||
|
||||
Reference in New Issue
Block a user