docs: update task tracking after CI enhancement
Some checks failed
CI / Lint & Format (push) Failing after 16s
CI / Unit Tests (push) Has been skipped
CI / Memory Leak Check (push) Has been skipped
CI / SBOM Generation (push) Has been skipped
CI / Security Scan (push) Failing after 22s
CI / Security Tests (push) Has been skipped
Some checks failed
CI / Lint & Format (push) Failing after 16s
CI / Unit Tests (push) Has been skipped
CI / Memory Leak Check (push) Has been skipped
CI / SBOM Generation (push) Has been skipped
CI / Security Scan (push) Failing after 22s
CI / Security Tests (push) Has been skipped
This commit is contained in:
1
TODO.md
1
TODO.md
@@ -17,6 +17,7 @@ Unstructured intake buffer for ideas, issues, and observations. Items here are r
|
||||
|
||||
## Observations
|
||||
|
||||
- CI enhanced: security-tests job, SBOM generation (CycloneDX), memory leak checks
|
||||
- Comprehensive pentest plan completed (PENTEST_PLAN.md) - all remediations implemented
|
||||
- PKI uses AES-256-GCM for CA private key encryption (PBKDF2 key derivation)
|
||||
- SHA1 fingerprints are X.509 standard, not security-relevant (usedforsecurity=False)
|
||||
|
||||
Reference in New Issue
Block a user