bugfix
d4cf5524a6
Per Jeppe 2026-08-16 19:52 UTC: external pen test engagement is cancelled. Removes: - documentation/security/pen-test-plan.md (the planning document, TRU-80 cancelled) KEEPS: - .github/workflows/code_quality.yml (Qodana Cloud scan, still active) - QODANA_TOKEN secret (Qodana project key)
Security documentation
This folder holds security-related planning, post-mortems, and pen-test artefacts for the Truck Wash ApS platform.
| Doc | Purpose | Status |
|---|---|---|
pen-test-plan.md |
TRU-80: scope, methodology, schedule and budget for the next white-hat pen test. | Draft v1, awaiting management sign-off. |
Conventions:
- Pen-test reports and any raw findings live in date-stamped subfolders
(e.g.
2026-q4-pentest/) and are never committed to the public repository — only the planning docs and re-test acceptance letters are. - All security work is tracked under the Linear project UI Library & Pen Testing.