Cross-product queue
Action Center
Work that requires a person, ordered by consequence and deadline.
Your queue
4 unresolved actions
APPROVAL REQUEST
Open remediation pull request for SEC-1427
Exact consequence
Create one pull requestNo direct production write
Creates a pull request replacing the exposed key reference. No direct production write.
Bound subject
- Subject hash
sha256:8e9ac77…1d6f- Evidence set
sha256:4bd210…75a8- Policy
- secure-defaults@4.8
- Scope
- core-platform/services/auth
- Environment
- production
- Requested by
- Atlas Agent · run_01J8Z6
- Expires
- Today at 11:14 · 3h 12m remaining
Proposed change
Open finding workspace3 files changed+18 additions · −9 deletions
8 checks passed Policy compliant
- const key = `-----BEGIN PRIVATE KEY-----...`
+ const key = await secrets.get("JWT_SIGNING_KEY")
return sign(payload, key, { algorithm: "RS256" })