MHSanaei eb498a3c13 chore(security): add OSS Scanner build image and threat model ...

Anthropic's OSS Scanner builds .oss-scanner/Dockerfile from this repository
and audits the image offline. The image keeps the source, the Go module and
npm caches, the debug panel binary, Xray-core and the sidecars, so tests,
the xray gRPC e2e suite, the master+node e2e and a live panel all run with
the network disabled. threat_model.md lists the trust boundaries, entry
points and the severity rubric the scanner should report against.

2026-10-11 22:29:36 +02:00

..

Dockerfile

chore(security): add OSS Scanner build image and threat model

2026-10-11 22:29:36 +02:00

threat_model.md

chore(security): add OSS Scanner build image and threat model

2026-10-11 22:29:36 +02:00