trails/openspec/changes/archive/2026-03-26-security-hardening/specs
Ullrich Schäfer b6908fb288
Fix picomatch audit vulnerability and complete security hardening verification
Override picomatch to 4.0.4 to resolve high-severity ReDoS (GHSA-c2c7-rcm5-vvqj),
verify all security hardening tasks (gitleaks, pnpm audit, Docker non-root,
Caddy headers, scanner blocking), sync specs, and archive the change.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-26 00:31:27 +01:00
..
infrastructure Fix picomatch audit vulnerability and complete security hardening verification 2026-03-26 00:31:27 +01:00
security-hardening Fix picomatch audit vulnerability and complete security hardening verification 2026-03-26 00:31:27 +01:00