Jon Chery 0d5ff663b4 fix(P13): step-ca /tmp hardening (REQ-128, F10) ...

---ci---
project: orca
phase: 13
milestone: v0.12
status: execute
---/ci---

step-ca cert/key temp files moved from world-readable /tmp/orca-* to
/etc/orca/step-tmp/orca-* (0700). mkdir + chmod 700 before writing.
Fixes both stepca.go and spiffe.go. All tests updated + pass.

2026-08-07 11:22:07 +00:00

..

oidc_test.go

feat(P04): OIDC client + auth CLI (REQ-144, D-239, D-242, D-246)

2026-08-07 10:59:55 +00:00

oidc.go

feat(P04): OIDC client + auth CLI (REQ-144, D-239, D-242, D-246)

2026-08-07 10:59:55 +00:00

SPIFFE_SPIKE_RESULT.md

feat(P01.5): SPIFFE SVID minting spike (REQ-076, gate C-08) — PASSES

2026-08-07 04:30:43 +00:00

spiffe_test.go

fix(P13): step-ca /tmp hardening (REQ-128, F10)

2026-08-07 11:22:07 +00:00

spiffe.go

fix(P13): step-ca /tmp hardening (REQ-128, F10)

2026-08-07 11:22:07 +00:00