hyungi/tk-factory-services
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

security: 보안 강제 시스템 구축 + 하드코딩 비밀번호 제거

Browse Source 
보안 감사 결과 CRITICAL 2건, HIGH 5건 발견 → 수정 완료 + 자동화 구축.

[보안 수정]
- issue-view.js: 하드코딩 비밀번호 → crypto.getRandomValues() 랜덤 생성
- pushSubscriptionController.js: ntfy 비밀번호 → process.env.NTFY_SUB_PASSWORD
- DEPLOY-GUIDE.md/PROGRESS.md/migration SQL: 평문 비밀번호 → placeholder
- docker-compose.yml/.env.example: NTFY_SUB_PASSWORD 환경변수 추가

[보안 강제 시스템 - 신규]
- scripts/security-scan.sh: 8개 규칙 (CRITICAL 2, HIGH 4, MEDIUM 2)
  3모드(staged/all/diff), severity, .securityignore, MEDIUM 임계값
- .githooks/pre-commit: 로컬 빠른 피드백
- .githooks/pre-receive-server.sh: Gitea 서버 최종 차단
  bypass 거버넌스([SECURITY-BYPASS: 사유] + 사용자 제한 + 로그)
- SECURITY-CHECKLIST.md: 10개 카테고리 자동/수동 구분
- docs/SECURITY-GUIDE.md: 운영자 가이드 (워크플로우, bypass, FAQ)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Hyungi Ahn
2026-04-10 09:44:21 +09:00
parent bbffa47a9d
commit ba9ef32808
257 changed files with 786 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files

55
system1-factory/web/pages/dashboard-new.html
View File

@@ -1,55 +0,0 @@
<!DOCTYPE html>
<html lang="ko">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no">
<title>대시보드 - TK 공장관리</title>
<script src="https://cdn.tailwindcss.com"></script>
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css">
<link rel="stylesheet" href="/static/css/tkfb.css?v=2026040103">
<link rel="stylesheet" href="/css/production-dashboard.css?v=2026040102">
<link rel="stylesheet" href="/css/tbm-mobile.css?v=2026033108">
<style>.pd-container { padding-bottom: calc(80px + env(safe-area-inset-bottom, 0px)); }</style>
</head>
<body class="bg-gray-50">
<span id="headerUserName" class="hidden">-</span>
<span id="headerUserAvatar" class="hidden">-</span>
<nav id="sideNav"></nav>
<div id="mobileOverlay" class="mobile-overlay hidden" onclick="toggleSideNav()"></div>
<main class="pd-main">
<section class="pd-profile-card" id="profileCard"></section>
<section class="pd-section" id="deptPagesSection">
<h2 class="pd-section-title">내 메뉴</h2>
<div class="pd-grid" id="deptPagesGrid"></div>
</section>
<section class="pd-section hidden" id="personalPagesSection">
<h2 class="pd-section-title">추가 메뉴</h2>
<div class="pd-grid" id="personalPagesGrid"></div>
</section>
<section class="pd-section hidden" id="adminPagesSection">
<h2 class="pd-section-title">관리 도구</h2>
<div class="pd-grid" id="adminPagesGrid"></div>
</section>
</main>
<!-- 연차 상세 모달 -->
<div class="pd-detail-modal" id="vacDetailModal" onclick="if(event.target===this)closeVacDetail()">
<div class="pd-detail-sheet">
<div class="pd-detail-header">
<span class="pd-detail-title"><i class="fas fa-umbrella-beach"></i> 연차 상세</span>
<button class="pd-detail-close" onclick="closeVacDetail()"><i class="fas fa-times"></i></button>
</div>
<div id="vacDetailContent"></div>
</div>
</div>
<script src="/js/sso-relay.js?v=20260401"></script>
<script src="/static/js/tkfb-core.js?v=2026040105"></script>
<script src="/js/production-dashboard.js?v=2026040103"></script>
<script src="/static/js/shared-bottom-nav.js?v=2026040103"></script>
</body>
</html>