https://code-workspace.top/ 面向防守者的应用安全、供应链、授权与网络遥测笔记。 zh-CN Thu, 01 Oct 2026 00:00:00 GMT https://code-workspace.top/articles/http-security-headers.htmlhttps://code-workspace.top/articles/http-security-headers.htmlThu, 18 Jun 2026 00:00:00 GMT用 GET/HEAD 证据、CSP 报告模式、HSTS 回滚和会话缓存边界，把安全头变成可复核的工程变更。 https://code-workspace.top/articles/authorization-boundaries.htmlhttps://code-workspace.top/articles/authorization-boundaries.htmlTue, 07 Jul 2026 00:00:00 GMT把主体、动作、对象和租户写成服务端规则，用本地双账号矩阵覆盖授权边界。 https://code-workspace.top/articles/dependency-lockwatch.htmlhttps://code-workspace.top/articles/dependency-lockwatch.htmlSat, 25 Jul 2026 00:00:00 GMT从 lockfile 解析、版本归一化到 OSV 查询，区分版本匹配、可达性和隐私边界。 https://code-workspace.top/articles/github-actions-hardening.htmlhttps://code-workspace.top/articles/github-actions-hardening.htmlSat, 15 Aug 2026 00:00:00 GMT从 job 权限、第三方 Action SHA、pull_request_target 到 OIDC 信任条件，建立可审查的 CI 基线。 https://code-workspace.top/articles/zeek-dns-triage.htmlhttps://code-workspace.top/articles/zeek-dns-triage.htmlWed, 02 Sep 2026 00:00:00 GMT理解字段和传感器覆盖，识别 DoH 盲区，把 DNS 弱信号组合后复验。 https://code-workspace.top/articles/src-report-workflow.htmlhttps://code-workspace.top/articles/src-report-workflow.htmlSun, 20 Sep 2026 00:00:00 GMT围绕范围确认、最小证据、敏感信息脱敏、CVSS 辅助和协调披露，写出可安全复现的报告。