maintainx-security-basics

# MaintainX Security Basics ## Overview Secure your MaintainX integration with proper credential management, input validation, audit logging, and key rotation procedures. ## Prerequisites - MaintainX account with admin access - Node.js 18+ - Familiarity with environment variables and secret management ## Instructions ### Step 1: Secure Credential Storage Never hardcode API keys. Use environment variables or a secret manager. ```bash # .env (never committed to git) MAINTAINX_API_KEY=mx-prod-key-here # .gitignore .env .env.* *.key ``` ```typescript // src/config.ts - load and validate credentials import 'dotenv/config'; const REQUIRED_VARS = ['MAINTAINX_API_KEY'] as const; export function validateEnv() { const missing = REQUIRED_VARS.filter((v) => !process.env[v]); if (missing.length > 0) { throw new Error(`Missing required env vars: ${missing.join(', ')}`); } } validateEnv(); export const API_KEY = process.env.MAINTAINX_API_KEY!; ``` ### Step 2: Git Hook to Prevent Secret Commits ```bash # Install pre-commit hook cat > .git/hooks/pre-commit << 'HOOK' #!/bin/bash # Block commits containing API keys if git diff --cached --diff-filter=ACMR | grep -qiE '(MAINTAINX_API_KEY|Bearer mx-)'; then echo "ERROR: Potential MaintainX API key detected in staged files." echo "Remove secrets before committing." exit 1 fi HOOK chmod +x .git/hooks/pre-commit ``` Or use `gitleaks`: ```bash npx gitleaks detect --source . --no-git ``` ### Step 3: Input Validation Vali...