安全与权限
jwt-session-ci-cd
更新于 2026-08-02
JWT & Sessions · 持续交付规则
CI/CD rules for JWT & Sessions: fail-fast stages, digest pinning and one promoted artifact.
- 技术栈
- JWT & Sessions
- 主题
- 持续交付
- 条目
- 9 条
- 版本
- v0.2.0
✓ 应当这么做
- ✓ Fail fast: format, lint, typecheck, test, build — in that order
- ✓ Pin actions and base images by digest for anything touching credentials
- ✓ Keep one artifact promoted through environments instead of rebuilds
✕ 常见反模式
- ✕ Secrets echoed into logs
- ✕ Pipelines only running on the default branch
- ✕ Deploy steps with no rollback button
◎ 交付前验证
- ◎ Injection cases added to the adversarial test corpus
- ◎ Tool allow-lists reviewed; new tools default to deny
- ◎ Secrets scanned in output before responding
同分类条目
6 篇安全与权限
RBAC Authorisation 工程规则
Authorisation rules: server-side checks on every route and deny-by-default resources
安全与权限
JWT & Sessions 工程规则
Token rules: short-lived access tokens, rotating refresh and revocation lists
安全与权限
Secrets Management 工程规则
Secret rules: runtime injection, rotation ownership and zero plaintext in git
安全与权限
Prompt Injection Defense 工程规则
Injection defence rules: delimiter isolation and tool-output sanitisation