alliance-boreale/SECURITY.md
Dan Allaire 5cee1f145e
Some checks are pending
CI / yaml-lint (push) Waiting to run
CI / ssot-export (push) Waiting to run
CI / tests (push) Waiting to run
CI / docs (push) Waiting to run
gov/docs: constitution + règles de contribution/sécurité + CODEOWNERS + CI
2025-10-18 22:32:55 -04:00

5 lines
290 B
Markdown
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

# Sécurité
- Signaler une vulnérabilité: ouvrir un ticket privé ou contacter léquipe sécurité.
- Secrets: jamais dans le dépôt; utiliser un coffre (ex: Vault).
- Certificats: autorité PKI fédérative + ACME si public.
- Rotation clés/certificats: semestrielle (au minimum).