Skip to content

Feature/lab11 - #1872

Closed
Shnupel wants to merge 24 commits into
inno-devops-labs:mainfrom
Shnupel:feature/lab11
Closed

Shnupel wants to merge 24 commits into
inno-devops-labs:mainfrom
Shnupel:feature/lab11

Conversation

@Shnupel

@Shnupel Shnupel commented Oct 15, 2026

Copy link
Copy Markdown

No description provided.

pavelbalandin897-alt and others added 24 commits September 14, 2026 02:54
feat(lab5): zap baseline and authenticated, semgrep, correlation
feat(lab6): checkov and kics findings, custom policy
feat(lab7): trivy scans and restricted deployment
feat(lab8): cosign signing and attestations
- Configured Nginx reverse proxy with TLS 1.2/1.3
- Restricted TLS 1.3 to AES-GCM cipher suites only
- Added 6 security headers (HSTS, X-Frame-Options, CSP, etc.)
- Implemented rate limiting (10 req/min) for /rest/user/login
- Configured connection limits and proxy timeouts
- Deployed OWASP ModSecurity CRS WAF
- All controls verified with commands in submissions/lab11.md
@Shnupel Shnupel closed this Oct 15, 2026
@Shnupel
Shnupel deleted the feature/lab11 branch October 16, 2026 14:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants