Repository navigation

fix(iam): close cross-team secret, security group and CI-identity holes - #134

Merged

Alexanderamiri merged 6 commits into

mainfrom

fix/team-isolation

Oct 23, 2026

Merged

fix(iam): close cross-team secret, security group and CI-identity holes#134
Alexanderamiri merged 6 commits into
mainfrom
fix/team-isolation

Commits on Oct 23, 2026
- fix(iam): per-team ECS execution roles and lock teams out of shared SGs
  
  Alexanderamiri
  and
  claude
  committed
  757af91
- fix(ci): identify callers of ci-broker and apply-gate by GitHub OIDC
  
  Alexanderamiri
  and
  claude
  committed
  8452701
- fix(ci): create team CI roles only for registry teams
  
  Alexanderamiri
  and
  claude
  committed
  c9f16de
- revert: keep syncing team roles from GitHub org teams in this PR
  
  Alexanderamiri
  and
  claude
  committed
  1fbc270
- docs: restore CLAUDE.md notes for this PR's changes
  
  Alexanderamiri
  and
  claude
  committed
  7c0cc78
- fix(iam): close exec-role takeover; verify OIDC tokens in plain Python
  
  Alexanderamiri
  and
  claude
  committed
  33f0d8c