tasks and avoid manual interventions.
- Write modular, reusable CI/CD pipelines.
- Use containerized applications with secure registries.
- Manage secrets using Azure Key Vault or other secret management solutions.
- Build resilient systems
14617mo agoReviewMountCreate a free account to mount
MSTest.
- Use Moq or NSubstitute for mocking dependencies.
- Implement integration tests for API endpoints.
## Security
- Use Authentication and Authorization middleware.
- Implement JWT authentication for stateless API authentication.
- Use HTTPS
14617mo agoReviewMountCreate a free account to mount
processing with @Async for non-blocking operations.
- Implement proper database indexing and query optimization.
## Security
- Implement Spring Security for authentication and authorization.
- Use proper password encoding (e.g., BCrypt).
- Implement CORS
14617mo agoReviewMountCreate a free account to mount
Implementa indexación apropiada de base de datos y optimización de consultas.
## Seguridad
- Implementa Spring Security para autenticación y autorización.
- Usa codificación apropiada de contraseñas (ej., BCrypt).
- Implementa configuración CORS cuando
14617mo agoReviewMountCreate a free account to mount
indexation de base de données appropriée et l'optimisation des requêtes.
## Sécurité
- Implémentez Spring Security pour l'authentification et l'autorisation.
- Utilisez un encodage de mot de passe approprié
14617mo agoReviewMountCreate a free account to mount
Implemente indexação adequada de banco de dados e otimização de consultas.
## Segurança
- Implemente Spring Security para autenticação e autorização.
- Use codificação adequada de senha (ex: BCrypt).
- Implemente configuração CORS quando
14617mo agoReviewMountCreate a free account to mount
require **one approving review**.
- The only **required** status checks are `license/cla` and `GitGuardian Security Checks`.
Every other check is advisory and does not block merge — but do not merge past
14446d agoReviewMountCreate a free account to mount
GitHub Actions workflows. It defines the
review dimensions in priority order — correctness, reliability/SRE, security,
Azure/SAP domain rules, performance, testing coverage, maintainability — along
with the evidence bar and the known false
1442mo agoReviewMountCreate a free account to mount
distros using matrix strategy
- **Release**: [`.github/workflows/release.yml`](../.github/workflows/release.yml) publishes to Ansible Galaxy on GitHub release
- **Security**: Tests run with `pull_request_target` and require manual approval of the "PR Tests" environment
14222mo agoReviewMountCreate a free account to mount
reference dependencies via the `libs.*` version catalog.
- Check for security advisories before adding new libraries.
- Keep Jackson as `compileOnly` where it is already `compileOnly` — it must not become a transitive
14211mo agoReviewMountCreate a free account to mount
bn.js) — never JavaScript `number` for financial math
- `createInstruction` (v1) is deprecated — use `createV2Instruction`
## Security
- ONLY official Solana Labs crypto: `solana-sdk`, `@solana/web3.js`, `solana-keygen`
- Zeroize key material, set file permissions
1418mo agoReviewMountCreate a free account to mount
bubblewrap, paired with a local HTTP CONNECT proxy and `gh`/`git` command guards.
## Core security invariants
- **Hostile filesystem boundary.** `cplt` runs outside the sandbox. Treat every path the sandboxed agent
14018d agoReviewMountCreate a free account to mount
Wildbox Security Platform - AI Agent Instructions
**Version:** 1.0 | **Last Updated:** October 2025
## 🏗️ Architecture Overview
Wildbox is a microservices-based security operations platform: ten services and an optional
1344mo agoReviewMountCreate a free account to mount
root — it is the single source of truth for
architecture, commands, conventions, and the security rules that apply to AI agents in this
repository.
Subsystem detail lives in nested files
1333mo agoReviewMountCreate a free account to mount
singlesource of truth for agent behavior.
Default user-facing communication mode: `$caveman full` unless security, irreversible actions, or user confusion require normal clarity.
Client-state diagnosis from uploaded logs: `Resources/skills/diagnose-client-state/SKILL.md
1313d agoReviewMountCreate a free account to mount
regression tests for behavior that can be exercised deterministically.
Use these severities:
- `P0`: immediate security compromise, destructive data loss, or universally
broken release.
- `P1`: likely user-facing defect, hang, major
1314mo agoReviewMountCreate a free account to mount
JSON, but auth secrets must never be stored there; auth stays in encrypted storage.
- **Security checks are part of normal flow:** preserve SSRF validation, header filtering, DNS/redirect checks during import
1315mo agoReviewMountCreate a free account to mount