GitHub Actions
285ee2cdda
fix: expand Semgrep ruleset to cover TypeScript, Dockerfile, and shell security
2026-03-15 11:45:18 +00:00
GitHub Actions
1096b00b94
fix: set PORT environment variable for httpbin backend in integration scripts
2026-03-14 16:44:35 +00:00
GitHub Actions
58b087bc63
fix: replace curl with wget for backend readiness checks in integration scripts
2026-03-14 13:17:06 +00:00
GitHub Actions
042c5ec6e5
fix(ci): replace abandoned httpbin image with maintained Go alternative
2026-03-13 22:44:19 +00:00
GitHub Actions
48af524313
chore(security): expand Semgrep coverage to include frontend and secrets scanning
2026-03-13 20:07:30 +00:00
GitHub Actions
bad97102e1
fix: repair GeoIP CI detection and harden httpbin startup in integration tests
2026-03-13 20:07:30 +00:00
GitHub Actions
82e2134333
fix: remove security-experimental queries from CodeQL configuration to prevent false positives
2026-03-07 03:48:04 +00:00
GitHub Actions
92310a8b3e
fix: update CodeQL queries to include security-experimental suite for enhanced analysis
2026-03-07 02:42:42 +00:00
GitHub Actions
c665f62700
chore: migrate pre-commit hooks to lefthook for improved performance and consistency
2026-03-07 02:20:29 +00:00
GitHub Actions
a69f698440
fix: enhance WebSocket origin check and improve email validation in mail service
2026-03-06 13:50:59 +00:00
GitHub Actions
635caf0f9a
fix: update Caddy version to 2.11.2 in architecture and compatibility matrix for consistency
2026-03-06 02:56:31 +00:00
GitHub Actions
27c252600a
chore: git cache cleanup
2026-03-04 18:34:49 +00:00
GitHub Actions
c32cce2a88
chore: git cache cleanup
2026-03-04 18:34:39 +00:00
GitHub Actions
e3b6693402
fix: correct version-check hook to use global latest tag
...
The pre-commit version check hook was incorrectly using `git describe`
to find the latest tag, which only traverses the current branch's
ancestry. On feature branches that predate release tags applied to
main/nightly, this caused false failures — reporting v0.19.1 as latest
even though v0.20.0 and v0.21.0 existed globally.
Replaced with `git tag --sort=-v:refname | grep semver | head -1` so
the check always compares .version against the true latest release tag
in the repository, independent of which branch is checked out.
2026-03-02 19:52:47 +00:00
GitHub Actions
e90ad34c28
chore: add script to update Go module dependencies
2026-03-01 01:33:26 +00:00
GitHub Actions
82d18f11a5
fix: restrict push branches in workflows to only main
2026-02-26 04:31:52 +00:00
GitHub Actions
06ceb9ef6f
fix: enhance GHCR prune script to include size reporting for candidates and deleted images
2026-02-26 04:05:31 +00:00
GitHub Actions
ac720f95df
fix: implement GHCR and Docker Hub prune scripts with summary reporting
2026-02-26 03:30:02 +00:00
GitHub Actions
1913e9d739
fix: remove obsolete GHCR downloads badge script
2026-02-26 03:07:26 +00:00
GitHub Actions
e1c0173e3d
fix: update script version echo statement in prune-container-images.sh
2026-02-25 19:31:16 +00:00
GitHub Actions
a1c88de3c4
fix: enhance GHCR API interaction by adding recommended headers and improved JSON error handling
2026-02-25 18:59:27 +00:00
GitHub Actions
1af04987e0
fix: update protected regex pattern for container pruning scripts and enhance logging details
2026-02-25 17:35:47 +00:00
GitHub Actions
0deffd37e7
fix: change default DRY_RUN value to false in prune-container-images script
2026-02-25 16:40:52 +00:00
GitHub Actions
cb16ac05a2
fix: implement security severity policy and enhance CodeQL checks for blocking findings
2026-02-25 15:05:41 +00:00
GitHub Actions
7591d2cda8
fix: update minimum coverage threshold to 87 for frontend and backend test scripts
2026-02-25 05:39:06 +00:00
GitHub Actions
bbaad17e97
fix: enhance notification provider validation and error handling in Test method
2026-02-24 19:56:57 +00:00
GitHub Actions
6cec0a67eb
fix: add exception handling for specific SSRF rule in CodeQL SARIF checks
2026-02-24 12:41:20 +00:00
GitHub Actions
b1a1a7a238
fix: enhance CodeQL SARIF parsing for improved severity level detection
2026-02-24 12:41:20 +00:00
GitHub Actions
8381790b0b
fix: improve CodeQL SARIF parsing for accurate high/critical findings detection
2026-02-24 12:41:20 +00:00
GitHub Actions
1f2b4c7d5e
chore: Add Caddy compatibility gate workflow and related scripts; update documentation and test cases
2026-02-23 14:41:55 +00:00
GitHub Actions
45458df1bf
chore: Add Caddy compatibility gate workflow and related scripts; enhance SMTP settings tests
2026-02-23 13:38:02 +00:00
GitHub Actions
89a1768496
chore: add npm update script for managing project dependencies
2026-02-21 18:06:08 +00:00
GitHub Actions
a21351cd0f
chore: add CHARON_ENCRYPTION_KEY management for backend tests
2026-02-21 17:39:50 +00:00
GitHub Actions
8e88d9feae
chore: Update CodeQL scan scripts and documentation for CI alignment and deprecate old suites
2026-02-20 13:55:28 +00:00
GitHub Actions
6b249bc178
fix: Improve error handling for missing SARIF files in CodeQL checks
2026-02-18 21:26:22 +00:00
GitHub Actions
b4b076039f
fix: Update baseline references to use 'origin/development' for consistency across scripts and tests
2026-02-18 17:36:52 +00:00
GitHub Actions
849d95ca84
fix: Enhance Dockerfile and scripts for improved dependency management and coverage reporting
2026-02-18 14:31:14 +00:00
GitHub Actions
2e5c13b90e
fix: update CodeQL JavaScript scan script to set correct source root for database creation
2026-02-18 08:36:30 +00:00
GitHub Actions
26a19e58a6
choret: add manual security scans for Semgrep and Gitleaks in pre-commit hooks
2026-02-18 08:26:13 +00:00
GitHub Actions
fd95611a25
chore: update CodeQL workflow to include feature and fix branches and enhance JS scan script
2026-02-18 08:13:55 +00:00
GitHub Actions
24509dc84f
fix: add allowlist normalization and validation in permissions repair process
2026-02-18 06:31:19 +00:00
GitHub Actions
aefbc5eee8
chore: add local pre-CI patch report generation for backend and frontend coverage
...
- Implemented a new script `local-patch-report.sh` to generate a local patch report.
- The report computes patch coverage based on changes from the current branch against `origin/main`.
- Integrated backend and frontend coverage inputs, producing both Markdown and JSON output artifacts.
- Updated existing frontend coverage script to validate the presence of LCOV coverage file.
- Added tests for coverage computation and parsing of unified diffs for changed lines.
- Enhanced error handling and validation for coverage inputs and baseline references.
2026-02-17 13:11:29 +00:00
GitHub Actions
557e08c783
fix: enhance encryption key validation and add trigger parity check for Codecov workflows
2026-02-17 00:58:44 +00:00
GitHub Actions
9222314681
fix: update go-test-coverage script to handle test failures correctly with gotestsum and go test
2026-02-16 18:54:21 +00:00
GitHub Actions
ec36ce32b6
chore: add unit tests for email recipient normalization and SQLite error detection
2026-02-16 18:28:38 +00:00
GitHub Actions
ae00b367c4
fix: update minimum coverage threshold to 85%
2026-02-16 09:36:52 +00:00
GitHub Actions
7f2532a3f7
chore: remove deprecated entry points from coverage exclusions
2026-02-16 09:24:52 +00:00
GitHub Actions
9ff12a80bf
fix: refactor golangci-lint scripts to improve version resolution and installation process
2026-02-13 00:07:02 +00:00
GitHub Actions
54f5ff5db3
chore: Add pre-commit blocker report and improve Go version management
...
- Created a comprehensive pre-commit blocker report detailing GolangCI-Lint and TypeScript type check failures, including remediation steps and verification commands.
- Enhanced the golangci-lint pre-commit hook to automatically rebuild the tool if a Go version mismatch is detected.
- Introduced a new script `rebuild-go-tools.sh` to rebuild essential Go development tools, ensuring they are compiled with the current Go version.
- Improved error handling and user feedback in the rebuilding process, providing clear instructions for manual intervention if needed.
- Updated supervisor review report to reflect the successful implementation of Go version management and associated documentation.
2026-02-13 00:07:02 +00:00
GitHub Actions
413f9609a1
chore: add GHCR downloads badge and update workflow for automated fetching
2026-02-10 23:07:46 +00:00