saint-graves/sica-fondt
1
0
Fork 0
mirror of https://github.com/SHOGGOTH-SECTOR/sica-fondt.git synced 2026-08-01 08:30:20 +00:00
Code Issues Packages Projects Releases Wiki Activity
sica-fondt/knowledge/cyber-skills/skills/implementing-github-advanced-security-for-code-scanning/assets/template.md
Claude 24f816b6a3
Consolidate 22 sibling repos into layered organism structure 
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):

- brain/        LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
                dispatch, A51 channels, and the OSINT cluster
- knowledge/    LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
                MITRE ATT&CK data
- reference/    defensive threat-reference (C3, shhbruh doc) + AdaYaml parser

License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.

Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.

https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
2026-06-10 06:53:01 +00:00

2.4 KiB
Raw Blame History

GHAS Code Scanning Implementation Template

Organization Security Configuration

Setting Value Notes
Organization _______________
GHAS License Seats _______________ Active committers
Default Query Suite [ ] default [ ] security-extended [ ] security-and-quality
Branch Protection Enabled [ ] Yes [ ] No
Secret Scanning Enabled [ ] Yes [ ] No
Push Protection Enabled [ ] Yes [ ] No
Dependabot Enabled [ ] Yes [ ] No

Repository Enablement Tracker

Repository Languages Setup Type Scanning Active Open Alerts Date Enabled
[ ] Default [ ] Advanced [ ] Yes [ ] No
[ ] Default [ ] Advanced [ ] Yes [ ] No
[ ] Default [ ] Advanced [ ] Yes [ ] No

Custom Query Pack Registry

Pack Name Version Description Target Languages

Alert Severity Gate Configuration

Environment Block on Critical Block on High Block on Medium Block on Low
Production (main) [x] Yes [x] Yes [ ] Yes [ ] No
Staging (develop) [x] Yes [ ] Yes [ ] No [ ] No
Feature branches [x] Yes [ ] Yes [ ] No [ ] No

Secret Scanning Custom Patterns

Pattern Name Regex Description Alert Enabled Push Protection
[ ] Yes [ ] No [ ] Yes [ ] No

Weekly Security Review Checklist

  • Review new critical and high severity alerts
  • Check alert dismissal reasons for quality
  • Verify new repositories have scanning enabled
  • Review Dependabot alerts and merge security updates
  • Check secret scanning alerts for exposed credentials
  • Update security overview dashboard metrics
  • Review MTTR trends and identify bottlenecks

Escalation Matrix

Alert Severity Response SLA Escalation Contact Action Required
Critical 24 hours Security Lead Immediate remediation, potential incident
High 72 hours Team Lead Prioritize in current sprint
Medium 2 weeks Developer Schedule for next sprint
Low 30 days Developer Add to backlog