Verification · Threat modeling · Attack surface inventory
Asynchronous entry points
Queue consumers and scheduled jobs that act on external data.
How to build it
- List each queue consumer, cron job and scheduled task that reads external data.
- Mark queues that receive data from outside the service as trust boundaries.
- Keep the asynchronous entries in the threat model next to the network entry points.
Signals in a repository
- Queue or scheduler configuration files, such as cron definitions or worker manifests.
- A threat model file with asynchronous entries marked as untrusted input.
In practice
No scanned repository runs a tool for this check. The steps above are the only guidance.