Skip to content

History / Security Best Practices

Revisions

  • docs: update remaining wiki pages and remove MIGRATION-INSTRUCTIONS Revise all wiki pages for accuracy, readability, and consistency with current codebase. Remove MIGRATION-INSTRUCTIONS.md (no longer needed). Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

    @ericfitz ericfitz committed Apr 8, 2026
  • docs: update container security references from Docker Scout to Grype - Update Security-Best-Practices.md with Grype integration section - Update Getting-Started-with-Development.md optional tools - Update Glossary.md with Grype definition - Update FAQ.md vulnerability scanning reference - Update Security-Operations.md scanning commands - Update Planning-Your-Deployment.md container security guide link - Update Architecture-and-Design.md security scanning reference - Update OCI-Container-Deployment.md image scanning section Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

    @ericfitz ericfitz committed Jan 31, 2026
  • docs: update wiki pages with verified content from tmi-ux docs Updated pages with verified and migrated content: - Architecture-and-Design.md - Security-Best-Practices.md - Working-with-Data-Flow-Diagrams.md Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

    @ericfitz ericfitz committed Jan 26, 2026
  • docs: add HTTP security headers section from TMI-UX docs Migrated client-side HTTP security headers documentation from docs/reference/security/README.md including: - Dynamic CSP configuration - Required deployment headers - Nginx configuration example - Testing guidance Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

    @ericfitz ericfitz committed Jan 26, 2026
  • docs(wiki): enhance Database-Schema-Reference with design patterns Add key design patterns section migrated from complete schema doc: - UUID-based identifiers with GORM BeforeCreate hook - Provider-based identity scoping for multi-provider OAuth - Dual foreign key pattern for user/group authorization - Authorization inheritance model - Threat modeling frameworks (CIA, STRIDE, LINDDUN, DIE, PLOT4ai) - Asset types enumeration Note legacy SQL migrations location for historical reference. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

    @ericfitz ericfitz committed Jan 24, 2026
  • docs: update container documentation to reflect Chainguard migration - Update Deploying-TMI-Server.md with Chainguard Dockerfile and new make targets - Update Architecture-and-Design.md container security and deployment sections - Update Security-Operations.md with Chainguard base images and new build commands - Update Security-Best-Practices.md with Chainguard info and individual build targets - Update Common-Issues.md with new container rebuild commands Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

    @ericfitz ericfitz committed Jan 19, 2026
  • Complete TMI wiki with comprehensive documentation Created comprehensive wiki organized by task area and audience: - Home page with ecosystem overview and role-based navigation - Getting Started (9 pages): End user guides for threat modeling - Deployment (7 pages): Operator guides for deploying TMI - Operation (5 pages): SRE/DevOps guides for running TMI - Troubleshooting (4 pages): Common issues and debugging - Development (6 pages): Contributor guides and architecture - Integrations (4 pages): Issue trackers, webhooks, addons - Tools (3 pages): API clients, Terraform analyzer, Promtail - API Reference (4 pages): REST, WebSocket, workflows - Reference (6 pages): Configuration, schema, specs, glossary, FAQ Total: 48 pages (~27,000 lines, 1.0 MB) Documentation migrated from: - tmi/docs/developer/, tmi/docs/operator/ - tmi/docs/reference/architecture/ - tmi-ux/docs/developer/ - tmi-clients, tmi-tf, tmi-promtail README files Preserved in tmi repo (used in builds): - docs/reference/apis/tmi-openapi.json - docs/reference/apis/tmi-asyncapi.yml - docs/reference/apis/api-workflows.json 🤖 Generated with Claude Code (https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>

    @ericfitz ericfitz committed Nov 12, 2025