mirror of
https://github.com/hanzoai/vault.git
synced 2026-10-30 18:18:35 +00:00
zeekay
cda584c628
- Multi-stage Alpine Dockerfile with non-root user and healthcheck - K8s: namespace (hanzo-vault, PCI zone 3), deployment (Recreate, read-only rootfs, security hardening), service, NetworkPolicies (deny-all default, allow commerce on 8443, allow DNS) - ServiceAccount for RBAC - GitHub Actions: test, build (multi-arch GHCR), Trivy scan, deploy