mirror of
https://github.com/Crosstalk-Solutions/project-nomad.git
synced 2026-10-17 05:14:19 +02:00
5ecec5137e
Adds a security policy so vulnerability reports are routed to the private advisory form instead of public issues, and defines scope so the intentional no-auth LAN design is not re-reported as a vulnerability. Also adds a security contact link to the issue template chooser (blank issues are disabled, so there was previously no route for a private report), and extends .gitignore to cover .env variants, key/cert files, .npmrc/.netrc and local copies of the deployed compose file. A local management compose with real generated DB passwords was committed to a branch once before; secret scanning push protection now covers that case too. No tracked file is affected by the new ignore rules. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
75 lines
1.2 KiB
Plaintext
75 lines
1.2 KiB
Plaintext
# Logs
|
|
logs
|
|
*.log
|
|
|
|
# Diagnostic reports (https://nodejs.org/api/report.html)
|
|
report.[0-9]*.[0-9]*.[0-9]*.[0-9]*.json
|
|
|
|
# Compiled binary addons (https://nodejs.org/api/addons.html)
|
|
build/Release
|
|
|
|
# Dependency directories
|
|
node_modules/
|
|
|
|
# Optional npm cache directory
|
|
.npm
|
|
|
|
# dotenv environment variables file
|
|
.env
|
|
.env.*
|
|
!.env.example
|
|
|
|
# Credentials and keys. Never commit these — the installer generates every
|
|
# password and app key locally at install time, so nothing real belongs in the
|
|
# repo. See SECURITY.md.
|
|
*.pem
|
|
*.key
|
|
*.p12
|
|
*.pfx
|
|
*.ppk
|
|
id_rsa
|
|
id_ed25519
|
|
.npmrc
|
|
.netrc
|
|
.htpasswd
|
|
|
|
# Local copies of the deployed compose file, which contain the real generated
|
|
# DB passwords and APP_KEY. The tracked install/management_compose.yaml template
|
|
# is the only compose file that belongs in git.
|
|
compose.yml
|
|
compose.yaml
|
|
docker-compose.yml
|
|
docker-compose.yaml
|
|
management_compose.local.yaml
|
|
|
|
# Build / Dist
|
|
dist
|
|
build
|
|
tmp
|
|
|
|
# macOS Metafiles
|
|
.DS_Store
|
|
|
|
# Fonts
|
|
.ttf
|
|
|
|
# Runtime-generated Files
|
|
server/public
|
|
server/temp
|
|
|
|
# IDE Files
|
|
.vscode
|
|
.idea
|
|
|
|
# Agent Files
|
|
.agents
|
|
.claude
|
|
.codegraph
|
|
.mcp.json
|
|
|
|
# Frontend assets compiled code
|
|
admin/public/assets
|
|
|
|
# Admin specific development files
|
|
admin/storage
|