Debian
cdbb62ee1a
harden(api): Slowloris-Timeout + gosec-Security-Audit + waf-Purge-Bugfix — v1.3.2
Go-Quality-Baseline-Rollout, Security-Teil:
- api: http.Server bekommt ReadHeaderTimeout (15s) + IdleTimeout (120s)
gegen Slowloris-Header-Stalls (gosec G112). ReadTimeout/WriteTimeout
bewusst offen (lang laufende Rolling-Update-/Backup-Endpoints).
- fix(waf): PurgeAlerts nutzte NOW() - ($1 || ' days')::interval mit
olderThanDays int → pgx-Encode-Error zur Laufzeit → DELETE /waf/alerts
war kaputt. Auf make_interval(days => $1) umgestellt (gleiche Bug-
Klasse wie audit-Cleanup v1.3.0). Via Lint-Aufräumen entdeckt.
- .golangci.yml: 26 gosec-Findings line-by-line auditiert. Alle sind
bewusstes Appliance-Verhalten mit Compensating Controls (Subprocess-
Args intern/validiert, Config-File-Perms daemon-lesbar, SSH opt-in
Fingerprint-Pinning, UI-Server Clean+HasPrefix-Traversal-Guard) oder
FPs (G101 Konstanten-Namen, G702/G703/G706 Taint). Dokumentiert
exclude't. gosec-Rest = 0.
- .golangci.yml: rowserrcheck/sqlclosecheck raus — database/sql-Linter,
bei durchgängigem pgx nur FPs.
gosec=0, govulncheck=0, race=0. Rest-Backlog: errcheck/noctx/staticcheck
(Code-Quality, kein Security) — folgt.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-05 23:36:37 +02:00
..
2026-05-09 21:49:14 +02:00
2026-05-13 15:57:05 +02:00
2026-07-05 23:25:22 +02:00
2026-06-26 11:30:12 +02:00
2026-05-29 07:15:16 +02:00
2026-05-11 20:55:47 +02:00
2026-05-13 18:49:02 +02:00
2026-05-29 07:38:57 +02:00
2026-05-09 21:49:14 +02:00
2026-06-06 13:24:13 +02:00
2026-07-05 23:25:22 +02:00
2026-06-05 18:56:30 +02:00
2026-07-05 23:25:22 +02:00
2026-05-31 18:18:31 +02:00
2026-05-24 12:59:13 +02:00
2026-06-15 19:23:37 +02:00
2026-05-31 18:46:54 +02:00
2026-05-13 07:15:23 +02:00
2026-05-31 18:18:31 +02:00
2026-06-07 18:09:17 +02:00
2026-05-11 13:41:16 +02:00
2026-05-30 13:25:26 +02:00
2026-05-11 06:58:54 +02:00
2026-07-05 23:25:22 +02:00
2026-06-05 19:46:42 +02:00
2026-05-09 10:59:52 +02:00
2026-07-05 23:25:22 +02:00
2026-06-06 10:55:21 +02:00
2026-05-29 17:45:26 +02:00
2026-05-12 23:50:26 +02:00
2026-05-12 21:29:38 +02:00
2026-05-09 21:49:14 +02:00
2026-06-05 16:04:13 +02:00
2026-07-05 23:36:37 +02:00
2026-07-05 23:25:22 +02:00
2026-05-08 18:45:41 +02:00