{
 "schemaVersion": 1,
 "check": "security-headers",
 "testedAt": "2026-11-05T20:20:58.376Z",
 "commit": {
  "sha": "d449f6396ae90d58d1f5aa377a6a59d1e608f059",
  "short": "d449f63"
 },
 "environment": {
  "kind": "ci",
  "os": "linux 7.0.0-1017-azure",
  "node": "v22.23.4",
  "runner": "github-actions",
  "baseUrl": "[local]",
  "productionUrl": "https://raqueeb.dev"
 },
 "tool": "fetch",
 "command": "HTTPS requests to https://raqueeb.dev",
 "status": "passed",
 "summary": "all 8 headers present; www, http and trailing-slash redirects 301; security.txt served; admin no-store and noindex; no source files exposed; production is 3470b08",
 "results": {
  "home": {
   "content-encoding": "br",
   "content-security-policy": "frame-ancestors 'none'",
   "content-type": "text/html",
   "cross-origin-opener-policy": "same-origin",
   "cross-origin-resource-policy": "same-origin",
   "permissions-policy": "accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), interest-cohort=()",
   "referrer-policy": "strict-origin-when-cross-origin",
   "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
   "x-content-type-options": "nosniff",
   "x-frame-options": "DENY"
  },
  "redirects": {
   "www": 301,
   "http": 301,
   "trailingSlash": 301
  },
  "securityTxt": {
   "status": 200,
   "body": "Contact: mailto:hello@raqueeb.dev\nExpires: 2027-11-03T00:00:00.000Z\nPreferred-Languages: en\nCanonical: https://raqueeb.dev/.well-known/security.txt\n"
  },
  "admin": {
   "cache-control": "no-store, must-revalidate",
   "content-encoding": "br",
   "content-security-policy": "frame-ancestors 'none'",
   "content-type": "text/html",
   "cross-origin-opener-policy": "same-origin-allow-popups",
   "cross-origin-resource-policy": "same-origin",
   "permissions-policy": "accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), interest-cohort=()",
   "referrer-policy": "strict-origin-when-cross-origin",
   "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
   "x-content-type-options": "nosniff",
   "x-frame-options": "DENY",
   "x-robots-tag": "noindex, nofollow"
  },
  "probes": {
   "/.env": 403,
   "/package.json": 404,
   "/.git/HEAD": 403,
   "/README.md": 404,
   "/wrangler.toml": 404
  },
  "productionCommit": "3470b08acf40e21e34aae017490fadaaf6b0611f"
 },
 "limitations": [
  "Configuration checks against the production host as it is at run time, which may be the previous commit; not a penetration test"
 ]
}