Commit Graph

66 Commits

Author SHA1 Message Date
renovate[bot]
053760c0f1 chore(deps): update actions/add-to-project action to v1 2025-11-20 00:44:58 +00:00
Jeremy
e8de9b1a2c Merge pull request #106 from Wikid82/renovate/aquasecurity-trivy-action-0.x
chore(deps): update aquasecurity/trivy-action action to v0.33.1
2025-11-19 18:20:54 -05:00
Jeremy
90f3342763 Merge pull request #108 from Wikid82/renovate/node-18.x
chore(deps): update dependency node to v18.20.8
2025-11-19 18:20:16 -05:00
Jeremy
9037ea6f86 Merge pull request #110 from Wikid82/renovate/docker-build-push-action-5.x
chore(deps): update docker/build-push-action action to v5.4.0
2025-11-19 18:20:01 -05:00
Jeremy
a5bf51b62c Merge pull request #111 from Wikid82/renovate/docker-login-action-3.x
chore(deps): update docker/login-action action to v3.6.0
2025-11-19 18:18:40 -05:00
Jeremy
9c680584c6 Merge pull request #112 from Wikid82/renovate/docker-setup-buildx-action-3.x
chore(deps): update docker/setup-buildx-action action to v3.11.1
2025-11-19 18:18:19 -05:00
Jeremy
fc8be94198 Merge pull request #113 from Wikid82/renovate/docker-setup-qemu-action-3.x
chore(deps): update docker/setup-qemu-action action to v3.7.0
2025-11-19 18:17:59 -05:00
Jeremy
26f0a66681 Merge pull request #114 from Wikid82/renovate/renovatebot-github-action-40.x
chore(deps): update renovatebot/github-action action to v40.3.6
2025-11-19 18:17:37 -05:00
Jeremy
04c40a4cc4 Merge pull request #105 from Wikid82/renovate/actions-setup-node-4.x
chore(deps): update actions/setup-node action to v4.4.0
2025-11-19 18:17:22 -05:00
renovate[bot]
7f14ff0735 chore(deps): update renovatebot/github-action action to v40.3.6 2025-11-19 23:16:01 +00:00
renovate[bot]
c1f84162ad chore(deps): update docker/setup-qemu-action action to v3.7.0 2025-11-19 23:15:57 +00:00
renovate[bot]
8a68cb19cf chore(deps): update docker/setup-buildx-action action to v3.11.1 2025-11-19 23:15:53 +00:00
renovate[bot]
9d99926b8e chore(deps): update docker/login-action action to v3.6.0 2025-11-19 23:15:48 +00:00
renovate[bot]
ecf2feb857 chore(deps): update docker/build-push-action action to v5.4.0 2025-11-19 23:15:44 +00:00
Wikid82
50d710ba7b chore: rename project artifacts to CPMP 2025-11-19 18:07:36 -05:00
renovate[bot]
db1e71604d chore(deps): update dependency node to v18.20.8 2025-11-19 22:47:20 +00:00
renovate[bot]
c05dd54f5c chore(deps): update aquasecurity/trivy-action action to v0.33.1 2025-11-19 22:47:08 +00:00
renovate[bot]
a0c0456d0d chore(deps): update actions/setup-node action to v4.4.0 2025-11-19 22:47:03 +00:00
Jeremy
6dec8a0aae Merge pull request #97 from Wikid82/renovate/actions-setup-go-5.x
chore(deps): update actions/setup-go action to v5.5.0
2025-11-19 11:52:57 -05:00
Jeremy
6922096438 Merge pull request #96 from Wikid82/renovate/actions-checkout-4.x
chore(deps): update actions/checkout action to v4.3.1
2025-11-19 11:52:42 -05:00
Jeremy
5cb289a26e Merge pull request #95 from Wikid82/renovate/golangci-golangci-lint-action-4.x
chore(deps): update golangci/golangci-lint-action action to v4.0.1
2025-11-19 11:52:24 -05:00
Jeremy
a28dec399e Merge pull request #94 from Wikid82/renovate/actions-checkout-digest
chore(deps): update actions/checkout digest to 34e1148
2025-11-19 11:52:09 -05:00
renovate[bot]
ba4fb99f0a chore(deps): update actions/setup-go action to v5.5.0 2025-11-19 16:47:48 +00:00
renovate[bot]
3e3089b8d6 chore(deps): update actions/checkout action to v4.3.1 2025-11-19 16:47:42 +00:00
renovate[bot]
d7c067385e chore(deps): update golangci/golangci-lint-action action to v4.0.1 2025-11-19 16:47:37 +00:00
renovate[bot]
0474c83782 chore(deps): update actions/checkout digest to 34e1148 2025-11-19 16:47:32 +00:00
renovate[bot]
e5b9ae8a90 chore(deps): pin dependencies 2025-11-19 16:47:27 +00:00
Wikid82
3537dc0084 ci: add GitHub Actions workflow for building and pushing Docker images 2025-11-19 10:19:15 -05:00
Wikid82
b297585df3 ci: fix propagation logic (main->dev, dev->feature/**) 2025-11-19 10:14:21 -05:00
Wikid82
7ca6d8f606 ci: streamline workflows, consolidate docker build/publish, add quality checks 2025-11-19 10:13:41 -05:00
Wikid82
de484db648 ci(secrets): migrate GITHUB_TOKEN references to PROJECT_TOKEN secret 2025-11-19 10:07:18 -05:00
Wikid82
c055a7676f fix(ci): use ADD_TO_PROJECT_PAT for project access (user projects require PAT) 2025-11-19 10:07:18 -05:00
Wikid82
069e8112c3 fix(ci): correct indentation for skip summary step in docker-build 2025-11-19 10:03:45 -05:00
Wikid82
1cf07a892a ci: skip heavy docker build/publish for renovate bot and chore(deps)/chore commits 2025-11-19 10:03:40 -05:00
Wikid82
939847e6af ci: robust health check with retries; normalize IMAGE_NAME in publish workflow 2025-11-19 10:03:15 -05:00
Wikid82
6bf9fba474 chore(ci): skip add-to-project when PROJECT_URL secret absent 2025-11-19 10:02:47 -05:00
Wikid82
0d6fb54370 fix(ci): normalize IMAGE_NAME to lowercase for registry compliance 2025-11-19 10:02:20 -05:00
Wikid82
eec702a335 fix(ci): lowercase IMAGE_NAME in workflows; fix Renovate packageRule (remove matchUpdateTypes from allowedVersions rule) 2025-11-19 09:58:32 -05:00
Wikid82
e3e6c75354 ci: add checkout step to Renovate workflow so config file is available 2025-11-19 09:54:13 -05:00
Wikid82
ae4f03e26e CI: Show Trivy table output before SARIF upload; always upload SARIF; fail late on CRITICAL/HIGH 2025-11-19 09:53:57 -05:00
Wikid82
778854473a CI: Add Renovate automation and Caddy v3 monitor; fix CADDY_IMAGE ARG scope 2025-11-19 09:52:10 -05:00
Wikid82
3111421b92 CI: Pin Caddy base by digest in builds; enforce Trivy fail on CRITICAL/HIGH; pass CADDY_IMAGE build-arg 2025-11-19 09:52:10 -05:00
Wikid82
d65b55144d CI: Generate PR tag via ref_name; skip push & security scan on PR 2025-11-19 09:52:09 -05:00
Wikid82
ffa1bd9af7 CI: Fix Trivy scan refs and guard SARIF upload; use metadata tags for docker-build scan; add outcome gating 2025-11-19 09:52:09 -05:00
Wikid82
8434121dd1 CI: Add CodeQL analysis workflow with security-events permissions and skip fork PRs 2025-11-19 09:52:08 -05:00
Wikid82
f14b0f3978 fix: Remove SHA-based Docker tags causing invalid format errors
- Remove type=sha tags that were producing invalid formats like ':-f0d0654'
- Keep latest/dev tags for branches and semver tags for releases
- SHA is still tracked via image digest and labels
2025-11-19 09:52:07 -05:00
Wikid82
8716919e22 fix: Correct Docker tag format in metadata action
- Add format=short to SHA tags to prevent malformed tags
- Standardize dev tag naming across workflows (was 'development')
- Ensure branch name is properly included in SHA prefix
2025-11-19 09:52:07 -05:00
Wikid82
95823204a6 feat: Add Trivy security scanning to Docker workflows
- Add Trivy vulnerability scanner after image build
- Upload SARIF results to GitHub Security tab
- Display critical/high severity issues in workflow logs
- Add security-events permission for SARIF upload
- Skip scanning on pull requests to save time
2025-11-19 09:51:58 -05:00
Wikid82
6273aa32a1 fix: Remove legacy Python lint job from CI workflow
- Remove ruff/flake8/pre-commit steps (legacy Python scaffold)
- Remove needs dependencies on non-existent lint job
- Backend and frontend tests now run independently
2025-11-19 09:50:59 -05:00
Wikid82
8e641b01bd fix: Eliminate act() warnings in frontend tests and resolve Docker arm64 build
- Wrap async mutations in act() across useImport, useProxyHosts, useRemoteServers tests
- Add npm_config_rollup_skip_nodejs_native=1 in Dockerfile to bypass native binary for arm64
- Enable Go module caching in CI via cache-dependency-path on setup-go action
- All frontend tests now pass cleanly (49/49) without React Testing Library warnings
2025-11-19 09:50:08 -05:00