chore: checkpoint 第一版

2026-09-06 17:04:11 +08:00
parent a8cdec98d1
commit 0c2151ace9
659 changed files with 185855 additions and 554 deletions
@@ -0,0 +1,9 @@
+misconfigurations:
+  - id: KSV-0109
+    paths:
+      - "deploy/kubernetes/base/configmap.yaml"
+    statement: >-
+      RTC_TOKEN_ISSUER and the *_TTL values are public runtime metadata, not
+      credentials. All RTC signing keys, provider credentials, and token key
+      material are mounted from Kubernetes Secrets or the production CSI
+      secret store.