Security hardening: container images, RBAC, secrets, network policies, dependency CVE patches#259

Open

devin-ai-integration[bot] wants to merge 5 commits into

devin/1782319621-security-hardening

Commits on Jun 24, 2026

security(container): pin base images to SHA digests, add non-root USER, replace deprecated openjdk

devin-ai-integration[bot]
and
achalc
committed
feature: security(rbac): add dedicated ServiceAccounts with namespace-scoped Roles

devin-ai-integration[bot]
and
achalc
committed
feature: security(secrets): remove hardcoded credentials, use env-var injection

devin-ai-integration[bot]
and
achalc
committed
feature: security(network): add NetworkPolicy resources for pod-to-pod isolation

devin-ai-integration[bot]
and
achalc
committed
bug: security(deps): upgrade Spring Boot 3.3.3→3.5.15, migrate mysql-connector to fix CVEs

devin-ai-integration[bot]
and
achalc
committed