feat: AI 보안·제로트러스트 실행 스크립트 추가 및 validation 수정#4
Merged
nowzero1702 merged 1 commit intoApr 3, 2026
Conversation
…er template Add missing executable check/fix scripts for AI Security and Zero Trust guidelines to achieve parity with CII and Robot Security, which already had complete scripts coverage. Changes: - Add scripts/ai-security/ (3 files: model-security-check, api-security-check, data-pipeline-check) - Add scripts/zero-trust/ (3 files: identity-check, network-check, visibility-check) - Add templates/ai-security/service-provider.md (27-item checklist) - All content synchronized across 8 skills (4 EN + 4 KO) - Fix pre-existing README validation failure by adding English CII technical table - Update validate-content.mjs to verify new directories and file counts - Clean up temp/ directory from git tracking Constraint: All scripts follow existing KISA guide structure (Source + Checklist refs + bash/PowerShell commands + Verification Checklist) Constraint: Content parity enforced across all 8 skill directories as required by validate-content.mjs Rejected: Adding language-specific secure coding templates (Go/Java/Rust) | pseudocode.md already covers these via language-agnostic patterns Confidence: high Scope-risk: moderate
nathankim0
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
KESE-KIT의 CII, 로봇 보안은
references/,templates/,scripts/3종 세트가 완비되어 있지만, AI 보안과 제로트러스트는scripts/디렉토리가 없어 실행 가능한 점검 스크립트가 부재했습니다. 이 PR은 해당 갭을 해소합니다.변경 사항
scripts/ai-security/)model-security-check.md— 모델 파일 무결성, 권한, pickle 안전성, 컨테이너 보안, GPU 접근 제어api-security-check.md— API 인증, TLS, Rate Limiting, 프롬프트 인젝션 방어, CORS/보안 헤더data-pipeline-check.md— 데이터 전송 암호화, 저장소 암호화, 무결성 검증, PII 탐지, 보존/삭제 정책scripts/zero-trust/)identity-check.md— MFA 구성, 세션 타임아웃, 최소 권한, 디바이스 컴플라이언스, ID 연합network-check.md— 네트워크 세그멘테이션, 마이크로세그멘테이션, 암호화 트래픽, 횡이동 방지visibility-check.md— 중앙 로깅, 감사 추적, SIEM 연동, 자동 대응(SOAR), 취약점 스캐닝templates/ai-security/service-provider.md).gitignore추가 및 git 추적 제거스크립트 커버리지 비교 (Before → After)
Test Plan
node scripts/validate-content.mjs— 16개 검증 모두 통과Notes
> Source헤더 → 체크리스트 참조 → bash/PowerShell 명령어 → Verification Checklist 테이블