senior-secops

Tool passed security scan

Risky tool definition detected

""" withdrawal_record = { 'user_id': user_id, 'purpose': purpose, 'consent_given': False, 'timestamp': datetime.utcnow().isoformat(), 'action': 'withdrawal' } self.db.consents.insert(withdrawal_record) # Trigger data processing stop for this purpose self._stop_processing(user_id, purpose) return withdrawal_record ``` --- ## Compliance Automation ### Automated Compliance Checks ```yaml # compliance-checks.yml - GitHub Actions name: Compliance Checks on: push: branches: [main] pull_request: schedu

Destructive Action

Resource Abuse

Context Poisoning

Tool passed security scan

Destructive Action

Resource Abuse

Tool passed security scan

Risky tool definition detected

Security team approval required before production ### Testing Requirements - [ ] Unit tests pass - [ ] Integration tests pass - [ ] Security scan shows vulnerability resolved - [ ] No new vulnerabilities introduced ### Rollback Plan {rollback_steps} ### Acceptance Criteria - Vulnerability scan shows CVE resolved - No functional regression - Performance baseline maintained """ ``` ### Workflow 3: Risk Acceptance ```markdown ## Risk Acceptance Request **Vulnerability:** CVE-XXXX-XXXXX **Affected S

Tool passed security scan

Risky tool definition detected

Description: middleware) - speakeasy (TOTP/MFA) **Logging & Monitoring:** - Winston, Pino (Node.js logging) - Datadog, Splunk (SIEM) - PagerDuty (alerting) **Compliance:** - Vanta (SOC 2 automation) - Drata (compliance management) - AWS Config (configuration compliance)

Risky tool definition detected

**Prevention:** ```python # BAD - No authorization check @app.route('/admin/users/<user_id>') def get_user(user_id): return User.query.get(user_id).to_dict() # GOOD - Authorization enforced @app.route('/admin/users/<user_id>') @requires_role('admin') def get_user(user_id): user = User.query.get_or_404(user_id) if not current_user.can_access(user): abort(403) return user.to_dict() ``` **Checklist:** - [ ] Deny access by default (allowlist approach) - [ ] Implement RBAC or ABAC consistently - [ ]

Tool passed security scan