-
Notifications
You must be signed in to change notification settings - Fork 0
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
Review admin roles and least privilege across services
complianceCompliance remediation and governanceCompliance remediation and governancehigh-priorityHigh priority workHigh priority workneeds-reviewNeeds legal, security, product, or platform reviewNeeds legal, security, product, or platform reviewprivacyPrivacy rights, data handling, deletion, exportPrivacy rights, data handling, deletion, exportsecuritySecurity hardening or risk reductionSecurity hardening or risk reductionStatus: Open.#19 In Eddy-ZM/ChemVault;Restrict CORS and sanitize API errors
complianceCompliance remediation and governanceCompliance remediation and governancehigh-priorityHigh priority workHigh priority workneeds-reviewNeeds legal, security, product, or platform reviewNeeds legal, security, product, or platform reviewsecuritySecurity hardening or risk reductionSecurity hardening or risk reductionStatus: Open.#18 In Eddy-ZM/ChemVault;Remove secrets from URL paths and CI-generated config
complianceCompliance remediation and governanceCompliance remediation and governanceemailEmail delivery, abuse, sender controlsEmail delivery, abuse, sender controlshigh-priorityHigh priority workHigh priority workneeds-reviewNeeds legal, security, product, or platform reviewNeeds legal, security, product, or platform reviewsecuritySecurity hardening or risk reductionSecurity hardening or risk reductionStatus: Open.#17 In Eddy-ZM/ChemVault;Add legal review checklist before commercial launch
complianceCompliance remediation and governanceCompliance remediation and governancehigh-priorityHigh priority workHigh priority worklegalLegal documentation or review requiredLegal documentation or review requiredneeds-reviewNeeds legal, security, product, or platform reviewNeeds legal, security, product, or platform reviewStatus: Open.#16 In Eddy-ZM/ChemVault;Add user consent notice where needed
complianceCompliance remediation and governanceCompliance remediation and governancemedium-priorityMedium priority workMedium priority workneeds-reviewNeeds legal, security, product, or platform reviewNeeds legal, security, product, or platform reviewprivacyPrivacy rights, data handling, deletion, exportPrivacy rights, data handling, deletion, exportStatus: Open.#15 In Eddy-ZM/ChemVault;Add data retention policy
complianceCompliance remediation and governanceCompliance remediation and governancehigh-priorityHigh priority workHigh priority worklegalLegal documentation or review requiredLegal documentation or review requiredneeds-reviewNeeds legal, security, product, or platform reviewNeeds legal, security, product, or platform reviewprivacyPrivacy rights, data handling, deletion, exportPrivacy rights, data handling, deletion, exportStatus: Open.#14 In Eddy-ZM/ChemVault;Add environment variable documentation
complianceCompliance remediation and governanceCompliance remediation and governancemedium-priorityMedium priority workMedium priority workneeds-reviewNeeds legal, security, product, or platform reviewNeeds legal, security, product, or platform reviewsecuritySecurity hardening or risk reductionSecurity hardening or risk reductionStatus: Open.#13 In Eddy-ZM/ChemVault;Add rate limiting for sensitive APIs
complianceCompliance remediation and governanceCompliance remediation and governancehigh-priorityHigh priority workHigh priority workneeds-reviewNeeds legal, security, product, or platform reviewNeeds legal, security, product, or platform reviewsecuritySecurity hardening or risk reductionSecurity hardening or risk reductionStatus: Open.#12 In Eddy-ZM/ChemVault;Add security contact / abuse contact
complianceCompliance remediation and governanceCompliance remediation and governancehigh-priorityHigh priority workHigh priority worklegalLegal documentation or review requiredLegal documentation or review requiredneeds-reviewNeeds legal, security, product, or platform reviewNeeds legal, security, product, or platform reviewsecuritySecurity hardening or risk reductionSecurity hardening or risk reductionStatus: Open.#11 In Eddy-ZM/ChemVault;Add App Store privacy checklist
app-storeApple App Store or TestFlight readinessApple App Store or TestFlight readinesscomplianceCompliance remediation and governanceCompliance remediation and governancehigh-priorityHigh priority workHigh priority workneeds-reviewNeeds legal, security, product, or platform reviewNeeds legal, security, product, or platform reviewprivacyPrivacy rights, data handling, deletion, exportPrivacy rights, data handling, deletion, exportStatus: Open.#10 In Eddy-ZM/ChemVault;Add AI data handling notice
complianceCompliance remediation and governanceCompliance remediation and governancehigh-priorityHigh priority workHigh priority workneeds-reviewNeeds legal, security, product, or platform reviewNeeds legal, security, product, or platform reviewprivacyPrivacy rights, data handling, deletion, exportPrivacy rights, data handling, deletion, exportStatus: Open.#9 In Eddy-ZM/ChemVault;Add file upload restrictions
complianceCompliance remediation and governanceCompliance remediation and governancehigh-priorityHigh priority workHigh priority workneeds-reviewNeeds legal, security, product, or platform reviewNeeds legal, security, product, or platform reviewsecuritySecurity hardening or risk reductionSecurity hardening or risk reductionStatus: Open.#8 In Eddy-ZM/ChemVault;