5 Commits

Author	SHA1	Message	Date
DevITWay | Pavel Volkov	432e8d35af	security: migrate token hashing from SHA256 to Argon2id (#55) ... * docs: add DCO, governance model, roles, vulnerability credit policy * security: migrate token hashing from SHA256 to Argon2id - Replace unsalted SHA256 with Argon2id (salted) for API token hashing - Fix TOCTOU race: replace exists()+read() with read()+match on error - Set chmod 600 on token files and 700 on token storage directory - Auto-migrate legacy SHA256 tokens to Argon2id on first verification - Add regression tests: argon2 format, legacy migration, file permissions	2026-03-24 22:56:43 +00:00
devitway	a36287a627	community: add issue/PR templates, code of conduct, update contributing guide	2026-03-18 12:22:10 +00:00
DevITWay	7326f9b0e2	chore: add pre-commit hook to prevent sensitive file commits ... - Whitelist approach: only known safe extensions allowed (.rs, .toml, .yml, etc.) - Block sensitive patterns (.env, .key, .pem, secrets, credentials) - Warn but allow .md files - Check only NEW files, modifications to tracked files always allowed - Block large files (>5MB) with warning - Run cargo fmt check on Rust files - Update CONTRIBUTING.md with hook setup instructions	2026-01-31 16:39:04 +00:00
DevITWay	f82e252e39	docs: add CONTRIBUTING.md and SECURITY.md	2026-01-31 12:39:41 +00:00
DevITWay	586420a476	feat: initialize NORA artifact registry ... Cloud-native multi-protocol artifact registry in Rust. - Docker Registry v2 - Maven (+ proxy) - npm (+ proxy) - Cargo, PyPI - Web UI, Swagger, Prometheus - Local & S3 storage - 32MB Docker image Created by DevITWay https://getnora.io	2026-01-25 17:33:15 +00:00