JetBrains TeamCity On-Premises CVE-2026-63077 Emergency Hardening & Patch Runbook Package
A production-grade security engineering suite containing four specialized incident response and hardening packages.
.
├── README.md # Enterprise Suite Index & Quick Start
├── package.json # Master test runner (Jest + Python unittest suites)
├── .gitignore # Production repository exclusions
│
├── supply-chain-security/ # TARGET 1: Supply Chain Security-as-a-Service (Injective Spec)
│ ├── README.md # Module Architecture & Red-Team Results
│ ├── SUPPLY_CHAIN_SECURITY_PLAYBOOK.md # Master Deployment Playbook
│ ├── .github/ # CODEOWNERS & Hardened GitHub Workflows
│ ├── configs/ # Branch protection REST API policies
│ ├── docs/ # Dependency Pinning & Hardware MFA Policies
│ ├── scripts/ # AST Crypto Diff Checker & Pipeline Auditor
│ ├── tests/ # Unit & AST test suites
│ └── fixtures/ # Clean & hooked TypeScript SDK fixtures
│
├── bridge-security/ # TARGET 2: Cross-Chain Bridge Security (Verus Spec)
│ ├── README.md # Formal Verification & Circuit Breaker Guide
│ ├── contracts/ # VerusBridgeHardened.sol & Certora CVL spec
│ ├── certora/ # Certora Prover run config (VerusBridgeHardened.conf)
│ ├── docs/ # Standardized Public Audit Report Template
│ ├── requirements.txt # Python deps for contract tests & the monitor
│ └── scripts/ # Cross-chain import verification monitor (JSON-RPC indexer)
│
├── teamcity-hardening/ # TARGET 3: 48-Hour CI/CD Emergency Hardening (TeamCity Spec)
│ ├── README.md # Emergency Hardening & Patch Guide
│ ├── TEAMCITY_CVE-2026-63077_RUNBOOK.md # Master 48-Hour Emergency Response Protocol
│ ├── configs/ # Hardened NGINX mTLS Proxy Config
│ ├── docs/ # Patching, Network, Secrets & DFIR Playbooks
│ └── scripts/ # Pre-patch verify, Firewall, Secrets & DFIR scripts
│
└── human-layer-security/ # TARGET 4: Human-Layer Security Overhaul (Figure Spec)
├── README.md # FIDO2, Vishing & Zero Trust Spec
├── configs/ # DLP Bulk Export Auditing Rules
└── docs/ # FIDO2 Rollout, Vishing Program & JIT Access Policies
npm test # Jest AST tests + supply-chain / bridge / human-layer Python suites
bash supply-chain-security/scripts/verify_supply_chain_defenses.sh
bash teamcity-hardening/scripts/teamcity_patch_stage_verify.sh --help
bash teamcity-hardening/scripts/apply_firewall_rules.sh --dry-run
bash human-layer-security/scripts/verify_human_layer_defenses.sh