DevSecOps: move sandboxing/isolation guidance out of AI Security (#398) -- verified#411
Open
frameworks-volunteer wants to merge 13 commits intosecurity-alliance:developfrom
Conversation
frameworks-volunteer
changed the title
built with Refined Cloudflare Pages Action⚡ Cloudflare Pages Deployment
|
frameworks-volunteer
force-pushed
the
issue-398-devsecops-sandboxing-isolation
branch
from
5b806f5 to
1789d23
Compare
security-alliance#398) (cherry picked from commit 6f4e19c)
…y-alliance#398) (cherry picked from commit 6526afb)
…-alliance#398) (cherry picked from commit 0c0fe91)
… and references (issue security-alliance#398) (cherry picked from commit f56ae55)
(cherry picked from commit 0be5d0c)
(cherry picked from commit 6a4aecf)
… canonical wording
frameworks-volunteer
force-pushed
the
issue-398-devsecops-sandboxing-isolation
branch
from
b9553a4 to
2035cf9
Compare
mattaereal
added
content:add
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Implements #398 by relocating general sandboxing + isolation guidance from the AI Security section into DevSecOps, where it belongs for CI/CD, build systems, automation, and developer tooling.
What this PR does
• Moves and renames sandboxing/isolation documentation pages into docs/pages/devsecops/
• Removes AI-specific framing so the guidance reads as broadly applicable DevSecOps best practice
• Updates navigation/indexes/tag generation so the new pages are discoverable in DevSecOps
• Cleans up old/moved stubs in the AI Security section to avoid duplicated guidance
Why
Sandboxing and isolation are core DevSecOps controls (CI runners, PR builds, preview environments, automation with side effects). Keeping the material under AI Security made it harder to find and implicitly scoped it too narrowly.
Notes for reviewers
• The intent is content relocation + normalization, not changing the security stance.
• Pages remain focused on practical controls: blast-radius reduction, least privilege, egress controls, and operational footguns.
Closes #398.