Skip to content

Idea Enhancing the template with local-first offline security auditing workflows #68

Description

@bhudson1976

This is an incredibly solid clean architecture baseline! Having CI/CD integration baked right into the template saves a massive amount of initioal setup time.
I've been spending a lot of time in the Flutter pipeline space lately, specifically focusing on local security auditing patterns. One of the biggest friction points I kept seeing with standard CI/CD setups is that teams are often hesitant to pipe their proprietary Dart codebases to third-party cloud scanners due to strict IP and privacy constraints.
To tackle that, I've been working on a local first desktop auditor (SentinelAI) built on a 3 pass orchestration pipeline. It runs entirely offline on macOS and Windows so teams can catch configuration leakage, hardcoded keys,and loose component permissions locally before anything ever gets pushed to a remote repo or cloud runner.
If you guys are ever looking to expand the template's documentation or recommendations around local pre-commit security checks or offline analysis workflows, I’d love to sync up and share notes on what we've mapped out!

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions