Merge pull request #10 from aleyipsoftwire/exercise-11

Exercise 11

Author: aleyipsoftwire

.github/workflows/my-pipeline.yml

@@ -18,6 +18,8 @@ jobs:
       - uses: actions/checkout@v4
       - run: docker build --target test --tag todo-app:test .
       - run: docker run --env-file .env.test todo-app:test
+      - run: docker run --entrypoint poetry todo-app:test run safety check
+        continue-on-error: true
 
   deploy:
     name: Build docker image and deploy to production

README.md

@@ -166,3 +166,14 @@ docker run -dit \
 
 When the image is updated and pushed to DockerHub, run `curl -x POST '<webhook>'`.
 The webhook URL can be found under Deployment Center on the app service's page in the Azure portal
+
+## Security
+
+### Encryption in transit
+
+We are enforcing HTTPS with Azure App service.
+
+### Encryption at rest
+
+Azure Cosmos DB is encrypted at rest and in transport.
+See https://learn.microsoft.com/en-us/azure/cosmos-db/database-encryption-at-rest for more details.