Oleksandr Bezdieniezhnykh 1bdbe8c96d [AZ-529] [AZ-530] Cycle-2 security audit reports ...

Step 14 (Security Audit) output for cycle 2. Verdict: FAIL — 2 Critical
(F-INFRA-1, F-INFRA-2) + 4 High (F-INFRA-3, F-INFRA-4, F-AUTH-1,
F-AUTH-2) block deploy. 13 cycle-2 findings total; cycle-1 closures
confirmed for F-6, F-7, F-8, F-13, A09.

Files:
- security_report_cycle2.md (delta on cycle-1 report; FAIL verdict,
  tracker follow-ups filed as AZ-552..AZ-557 + 9 deferred Medium/Low)
- owasp_review_cycle2.md (A01..A09 delta; 2 FAIL / 2 PASS_W_W / 5 PASS)
- static_analysis_cycle2.md (F-AUTH-1..9 with locations + remediation)
- infrastructure_review_cycle2.md (F-INFRA-1..6 with locations
  + remediation)
- dependency_scan_cycle2.md (no new CVEs; cycle-1 deprecations re-flagged)

Cycle-1 reports remain authoritative for non-cycle-2 surface.

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-05-14 09:23:02 +03:00

..

dependency_scan_cycle2.md

[AZ-529] [AZ-530] Cycle-2 security audit reports

2026-05-14 09:23:02 +03:00

dependency_scan.md

refactor: remove deploy.cmd and update Dockerfile for health checks

2026-05-13 08:47:21 +03:00

infrastructure_review_cycle2.md

[AZ-529] [AZ-530] Cycle-2 security audit reports

2026-05-14 09:23:02 +03:00

infrastructure_review.md

refactor: remove deploy.cmd and update Dockerfile for health checks

2026-05-13 08:47:21 +03:00

owasp_review_cycle2.md

[AZ-529] [AZ-530] Cycle-2 security audit reports

2026-05-14 09:23:02 +03:00

owasp_review.md

refactor: remove obsolete resource download and installer endpoints

2026-05-14 04:17:55 +03:00

security_report_cycle2.md

[AZ-529] [AZ-530] Cycle-2 security audit reports

2026-05-14 09:23:02 +03:00

security_report.md

refactor: remove deploy.cmd and update Dockerfile for health checks

2026-05-13 08:47:21 +03:00

static_analysis_cycle2.md

[AZ-529] [AZ-530] Cycle-2 security audit reports

2026-05-14 09:23:02 +03:00

static_analysis.md

refactor: remove deploy.cmd and update Dockerfile for health checks

2026-05-13 08:47:21 +03:00