28 lines
1.1 KiB
JSON
28 lines
1.1 KiB
JSON
{
|
|
"feature_id": "F-010",
|
|
"stage": "security_gate",
|
|
"agent": "security",
|
|
"verdict": "APPROVED",
|
|
"checked": [
|
|
"No new runtime or dev dependencies",
|
|
"Variant and rich data mutation routes are admin-only",
|
|
"SKU/EAN uniqueness enforced at database level",
|
|
"Nutrition provenance enforced by API validation and database check constraint",
|
|
"Manual nutrition overwrite protection lives in application use case",
|
|
"JSON payloads are bounded by validation",
|
|
"SQL queries use parameterized pg placeholders; dynamic UPDATE columns are whitelisted",
|
|
"Secret scan over F-010 files"
|
|
],
|
|
"findings": [],
|
|
"evidence": {
|
|
"npm_audit_runtime": "cd project && npm audit --audit-level=high --omit=dev — PASS: found 0 vulnerabilities",
|
|
"secret_scan": "grep over F-010 files found only a non-secret test password fixture",
|
|
"verify": "./scripts/verify.sh — PASS",
|
|
"tests": "cd project && npm test — PASS"
|
|
},
|
|
"notes": [
|
|
"No external OpenFoodFacts job or remote call was added.",
|
|
"No price, stock, or image behavior was introduced."
|
|
]
|
|
}
|