Repository navigation
SecurityKnowledgeIndex
Paulo Gomes da Cruz Junior edited this page Oct 9, 2026
·
1 revision
Reusable security investigation, implementation, and validation guidance.
| Entry | Description |
|---|---|
| Security Finding Evidence and Disposition | Separate source concerns, runtime evidence, deployment reachability, and finding status. |
| Scoped Authorization and Nested Resources | Bind requests to caller scope and authorize parents before child-resource access. |
| JWT Filter-Chain Validation | Test token validation through the configured HTTP security chain. |
| Security Configuration Deployment Chain | Trace security settings from deployment templates to effective runtime values. |
| Security Event Logging | Verify security-event status, filter reachability, data minimization, and exactly-once behavior. |
| Security CI, Test, and Supply-Chain Gates | Confirm which tests and artifact-integrity controls CI actually enforces. |
This wiki documents NR Waste Plus for users and developers. Verify security and deployment guidance against the current application configuration before applying it elsewhere.
- Report an issue or ask a question in the GitHub repository.
- Follow the Contributing Guidelines to propose an update.
- Read the Code of Conduct.
Collection indexes support human browsing and machine retrieval. Keep both current when adding or moving wiki pages.
NR Waste Plus Wiki | GitHub Repository