# Updated via Autotest Editor - 2026-05-25T21:52:11.984Z
# Source of truth: this YAML file

id: core-security-check-previous_security_findings_have_been_remediated_before_release
module: core
group: core-security
title: Verify all previously identified security findings are remediated before release
description: Verify all previously identified security findings are remediated before release
priority: Medium
tags: []
references: []
dependencies:
  - label: Admin Portal
    value: https://pbx.local:4443 (configure via $BASE_URL)
  - label: Repository URL
    value: ${BASE_URL}/downloads or $REPO_URL
  - label: Protocol
    value: HTTPS (admin portal) + optional SSH/CLI
  - label: Credentials
    value: Admin user with sufficient privileges (portal + SSH where needed)
  - label: Test Data
    value: Clean test tenant or lab PBX instance (recommended isolated environment)
preconditions: []
postconditions: []
steps:
  - action: Open admin portal or repository URL in browser context
    expected: ''
  - action: Log in to the admin portal (if required)
    expected: ''
  - action: Navigate to the relevant settings section
    expected: ''
  - action: Read current configuration values via UI or API
    expected: ''
automation_status: manual
file: tests/core/security.spec.ts
custom_fields:
  original_action: check
  manualReason: Requires access to security issue tracker and cross-referencing CVEs with the release changelog
automatable:
  - Most UI-driven configuration and verification steps via Playwright
notYet:
  - Requires access to security issue tracker and cross-referencing CVEs with the release changelog
