c9678fc04a
Addresses security concerns from OWASP audit and CodeQL by enforcing strict host key verification and TLS certificate verification. Security Changes: - Enforced strict SSH host key checking in pkg/container and devops. - Removed insecure SSH host key verification from pkg/ansible. - Added synchronous host key discovery during VM boot using ssh-keyscan. - Updated UniFi client to enforce TLS certificate verification by default. - Added --insecure flag and config option for UniFi to allow opt-in to skipping TLS verification for self-signed certificates. CI and Maintenance: - Fixed auto-merge workflow by providing repository context to 'gh' command. - Resolved merge conflicts in .github/workflows/auto-merge.yml. - Added unit tests for secured Ansible SSH client. - Fixed formatting issues identified by QA checks. |
||
|---|---|---|
| .. | ||
| cmd | ||
| examples | ||
| pkg | ||
| skill | ||
| configuration.md | ||
| getting-started.md | ||
| glossary.md | ||
| index.md | ||
| migration.md | ||
| troubleshooting.md | ||
| workflows.md | ||