Security
Security covers both the GoForj software supply chain and application behavior that affects identity, sessions, authorization, secrets, and runtime safety.
Enterprise reviewers can start with Security Assurance for the ecosystem scope, controls, evidence, and stated limits. Application teams should start with Auth when the App includes generated account and session support.
Pages
Assurance and Review
- Security Assurance provides the single entry point for a security review.
- Security Controls explains what each automated control proves and does not prove.
- Threat Model maps assets, trust boundaries, threats, mitigations, ownership, and residual risks.
- Repository Coverage maps every in-scope repository to its baseline and evidence.
- Vulnerability Management explains reporting, remediation, and exceptions.
- Source and Build Integrity shows how to verify an approved framework version and preserve its identity through an application build.
- Enterprise Assessment separates GoForj evidence from deployment-owned controls.
Related Sections
- HTTP Services explains protected routes and middleware.
- Inspects explains request-scoped runtime diagnostics.
- Health and Readiness explains diagnostic token behavior.