Commit Graph

177 Commits

Author SHA1 Message Date
GitHub Actions
285ee2cdda fix: expand Semgrep ruleset to cover TypeScript, Dockerfile, and shell security 2026-03-15 11:45:18 +00:00
GitHub Actions
1096b00b94 fix: set PORT environment variable for httpbin backend in integration scripts 2026-03-14 16:44:35 +00:00
GitHub Actions
58b087bc63 fix: replace curl with wget for backend readiness checks in integration scripts 2026-03-14 13:17:06 +00:00
GitHub Actions
042c5ec6e5 fix(ci): replace abandoned httpbin image with maintained Go alternative 2026-03-13 22:44:19 +00:00
GitHub Actions
48af524313 chore(security): expand Semgrep coverage to include frontend and secrets scanning 2026-03-13 20:07:30 +00:00
GitHub Actions
bad97102e1 fix: repair GeoIP CI detection and harden httpbin startup in integration tests 2026-03-13 20:07:30 +00:00
GitHub Actions
82e2134333 fix: remove security-experimental queries from CodeQL configuration to prevent false positives 2026-03-07 03:48:04 +00:00
GitHub Actions
92310a8b3e fix: update CodeQL queries to include security-experimental suite for enhanced analysis 2026-03-07 02:42:42 +00:00
GitHub Actions
c665f62700 chore: migrate pre-commit hooks to lefthook for improved performance and consistency 2026-03-07 02:20:29 +00:00
GitHub Actions
a69f698440 fix: enhance WebSocket origin check and improve email validation in mail service 2026-03-06 13:50:59 +00:00
GitHub Actions
635caf0f9a fix: update Caddy version to 2.11.2 in architecture and compatibility matrix for consistency 2026-03-06 02:56:31 +00:00
GitHub Actions
27c252600a chore: git cache cleanup 2026-03-04 18:34:49 +00:00
GitHub Actions
c32cce2a88 chore: git cache cleanup 2026-03-04 18:34:39 +00:00
GitHub Actions
e3b6693402 fix: correct version-check hook to use global latest tag
The pre-commit version check hook was incorrectly using `git describe`
to find the latest tag, which only traverses the current branch's
ancestry. On feature branches that predate release tags applied to
main/nightly, this caused false failures — reporting v0.19.1 as latest
even though v0.20.0 and v0.21.0 existed globally.

Replaced with `git tag --sort=-v:refname | grep semver | head -1` so
the check always compares .version against the true latest release tag
in the repository, independent of which branch is checked out.
2026-03-02 19:52:47 +00:00
GitHub Actions
e90ad34c28 chore: add script to update Go module dependencies 2026-03-01 01:33:26 +00:00
GitHub Actions
82d18f11a5 fix: restrict push branches in workflows to only main 2026-02-26 04:31:52 +00:00
GitHub Actions
06ceb9ef6f fix: enhance GHCR prune script to include size reporting for candidates and deleted images 2026-02-26 04:05:31 +00:00
GitHub Actions
ac720f95df fix: implement GHCR and Docker Hub prune scripts with summary reporting 2026-02-26 03:30:02 +00:00
GitHub Actions
1913e9d739 fix: remove obsolete GHCR downloads badge script 2026-02-26 03:07:26 +00:00
GitHub Actions
e1c0173e3d fix: update script version echo statement in prune-container-images.sh 2026-02-25 19:31:16 +00:00
GitHub Actions
a1c88de3c4 fix: enhance GHCR API interaction by adding recommended headers and improved JSON error handling 2026-02-25 18:59:27 +00:00
GitHub Actions
1af04987e0 fix: update protected regex pattern for container pruning scripts and enhance logging details 2026-02-25 17:35:47 +00:00
GitHub Actions
0deffd37e7 fix: change default DRY_RUN value to false in prune-container-images script 2026-02-25 16:40:52 +00:00
GitHub Actions
cb16ac05a2 fix: implement security severity policy and enhance CodeQL checks for blocking findings 2026-02-25 15:05:41 +00:00
GitHub Actions
7591d2cda8 fix: update minimum coverage threshold to 87 for frontend and backend test scripts 2026-02-25 05:39:06 +00:00
GitHub Actions
bbaad17e97 fix: enhance notification provider validation and error handling in Test method 2026-02-24 19:56:57 +00:00
GitHub Actions
6cec0a67eb fix: add exception handling for specific SSRF rule in CodeQL SARIF checks 2026-02-24 12:41:20 +00:00
GitHub Actions
b1a1a7a238 fix: enhance CodeQL SARIF parsing for improved severity level detection 2026-02-24 12:41:20 +00:00
GitHub Actions
8381790b0b fix: improve CodeQL SARIF parsing for accurate high/critical findings detection 2026-02-24 12:41:20 +00:00
GitHub Actions
1f2b4c7d5e chore: Add Caddy compatibility gate workflow and related scripts; update documentation and test cases 2026-02-23 14:41:55 +00:00
GitHub Actions
45458df1bf chore: Add Caddy compatibility gate workflow and related scripts; enhance SMTP settings tests 2026-02-23 13:38:02 +00:00
GitHub Actions
89a1768496 chore: add npm update script for managing project dependencies 2026-02-21 18:06:08 +00:00
GitHub Actions
a21351cd0f chore: add CHARON_ENCRYPTION_KEY management for backend tests 2026-02-21 17:39:50 +00:00
GitHub Actions
8e88d9feae chore: Update CodeQL scan scripts and documentation for CI alignment and deprecate old suites 2026-02-20 13:55:28 +00:00
GitHub Actions
6b249bc178 fix: Improve error handling for missing SARIF files in CodeQL checks 2026-02-18 21:26:22 +00:00
GitHub Actions
b4b076039f fix: Update baseline references to use 'origin/development' for consistency across scripts and tests 2026-02-18 17:36:52 +00:00
GitHub Actions
849d95ca84 fix: Enhance Dockerfile and scripts for improved dependency management and coverage reporting 2026-02-18 14:31:14 +00:00
GitHub Actions
2e5c13b90e fix: update CodeQL JavaScript scan script to set correct source root for database creation 2026-02-18 08:36:30 +00:00
GitHub Actions
26a19e58a6 choret: add manual security scans for Semgrep and Gitleaks in pre-commit hooks 2026-02-18 08:26:13 +00:00
GitHub Actions
fd95611a25 chore: update CodeQL workflow to include feature and fix branches and enhance JS scan script 2026-02-18 08:13:55 +00:00
GitHub Actions
24509dc84f fix: add allowlist normalization and validation in permissions repair process 2026-02-18 06:31:19 +00:00
GitHub Actions
aefbc5eee8 chore: add local pre-CI patch report generation for backend and frontend coverage
- Implemented a new script `local-patch-report.sh` to generate a local patch report.
- The report computes patch coverage based on changes from the current branch against `origin/main`.
- Integrated backend and frontend coverage inputs, producing both Markdown and JSON output artifacts.
- Updated existing frontend coverage script to validate the presence of LCOV coverage file.
- Added tests for coverage computation and parsing of unified diffs for changed lines.
- Enhanced error handling and validation for coverage inputs and baseline references.
2026-02-17 13:11:29 +00:00
GitHub Actions
557e08c783 fix: enhance encryption key validation and add trigger parity check for Codecov workflows 2026-02-17 00:58:44 +00:00
GitHub Actions
9222314681 fix: update go-test-coverage script to handle test failures correctly with gotestsum and go test 2026-02-16 18:54:21 +00:00
GitHub Actions
ec36ce32b6 chore: add unit tests for email recipient normalization and SQLite error detection 2026-02-16 18:28:38 +00:00
GitHub Actions
ae00b367c4 fix: update minimum coverage threshold to 85% 2026-02-16 09:36:52 +00:00
GitHub Actions
7f2532a3f7 chore: remove deprecated entry points from coverage exclusions 2026-02-16 09:24:52 +00:00
GitHub Actions
9ff12a80bf fix: refactor golangci-lint scripts to improve version resolution and installation process 2026-02-13 00:07:02 +00:00
GitHub Actions
54f5ff5db3 chore: Add pre-commit blocker report and improve Go version management
- Created a comprehensive pre-commit blocker report detailing GolangCI-Lint and TypeScript type check failures, including remediation steps and verification commands.
- Enhanced the golangci-lint pre-commit hook to automatically rebuild the tool if a Go version mismatch is detected.
- Introduced a new script `rebuild-go-tools.sh` to rebuild essential Go development tools, ensuring they are compiled with the current Go version.
- Improved error handling and user feedback in the rebuilding process, providing clear instructions for manual intervention if needed.
- Updated supervisor review report to reflect the successful implementation of Go version management and associated documentation.
2026-02-13 00:07:02 +00:00
GitHub Actions
413f9609a1 chore: add GHCR downloads badge and update workflow for automated fetching 2026-02-10 23:07:46 +00:00