security: 보안 강제 시스템 구축 + 하드코딩 비밀번호 제거

Browse Source

보안 감사 결과 CRITICAL 2건, HIGH 5건 발견 → 수정 완료 + 자동화 구축.

[보안 수정]
- issue-view.js: 하드코딩 비밀번호 → crypto.getRandomValues() 랜덤 생성
- pushSubscriptionController.js: ntfy 비밀번호 → process.env.NTFY_SUB_PASSWORD
- DEPLOY-GUIDE.md/PROGRESS.md/migration SQL: 평문 비밀번호 → placeholder
- docker-compose.yml/.env.example: NTFY_SUB_PASSWORD 환경변수 추가

[보안 강제 시스템 - 신규]
- scripts/security-scan.sh: 8개 규칙 (CRITICAL 2, HIGH 4, MEDIUM 2)
  3모드(staged/all/diff), severity, .securityignore, MEDIUM 임계값
- .githooks/pre-commit: 로컬 빠른 피드백
- .githooks/pre-receive-server.sh: Gitea 서버 최종 차단
  bypass 거버넌스([SECURITY-BYPASS: 사유] + 사용자 제한 + 로그)
- SECURITY-CHECKLIST.md: 10개 카테고리 자동/수동 구분
- docs/SECURITY-GUIDE.md: 운영자 가이드 (워크플로우, bypass, FAQ)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

...

This commit is contained in:

Hyungi Ahn

2026-04-10 09:44:21 +09:00

parent bbffa47a9d

commit ba9ef32808

257 changed files with 786 additions and 18 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

BIN

system1-factory/web/public/img/favicon.png Normal file

Binary file not shown.

Side by Side After Width:  |  Height:  |  Size: 15 KiB

BIN

system1-factory/web/public/img/icon-192x192.png Normal file

Binary file not shown.

Side by Side After Width:  |  Height:  |  Size: 6.7 KiB

BIN

system1-factory/web/public/img/icon-512x512.png Normal file

Binary file not shown.

Side by Side After Width:  |  Height:  |  Size: 31 KiB

BIN

system1-factory/web/public/img/login-bg.jpeg Normal file

Binary file not shown.

Side by Side After Width:  |  Height:  |  Size: 2.6 MiB

BIN

system1-factory/web/public/img/logo.png Normal file

Binary file not shown.

Side by Side After Width:  |  Height:  |  Size: 15 KiB

BIN

system1-factory/web/public/img/technicalkorea Logo.jpg Normal file

Binary file not shown.

Side by Side After Width:  |  Height:  |  Size: 83 KiB

28071

system1-factory/web/public/img/technicalkorea_Logo.ai Normal file

File diff suppressed because it is too large Load Diff

28071

system1-factory/web/public/img/technicalkorea_Logo.eps Normal file

File diff suppressed because it is too large Load Diff

3390

system1-factory/web/public/img/technicalkorea_Logo.svg Normal file

File diff suppressed because it is too large Load Diff

Side by Side After Width:  |  Height:  |  Size: 369 KiB