akanealw/Charon
1
0
Fork 0
Code Issues Pull Requests Actions 7 Packages Projects Releases Wiki Activity
2,180 Commits 11 Branches 107 Tags
de999c4dea9d788ae4de491f07b47d6f2fe24d8c
Commit Graph

11 Commits

Author SHA1 Message Date
GitHub Actions
032d475fba chore: remediate 61 Go linting issues and tighten pre-commit config 
Complete lint remediation addressing errcheck, gosec, and staticcheck
violations across backend test files. Tighten pre-commit configuration
to prevent future blind spots.

Key Changes:
- Fix 61 Go linting issues (errcheck, gosec G115/G301/G304/G306, bodyclose)
- Add proper error handling for json.Unmarshal, os.Setenv, db.Close(), w.Write()
- Fix gosec G115 integer overflow with strconv.FormatUint
- Add #nosec annotations with justifications for test fixtures
- Fix SecurityService goroutine leaks (add Close() calls)
- Fix CrowdSec tar.gz non-deterministic ordering with sorted keys

Pre-commit Hardening:
- Remove test file exclusion from golangci-lint hook
- Add gosec to .golangci-fast.yml with critical checks (G101, G110, G305)
- Replace broad .golangci.yml exclusions with targeted path-specific rules
- Test files now linted on every commit

Test Fixes:
- Fix emergency route count assertions (1→2 for dual-port setup)
- Fix DNS provider service tests with proper mock setup
- Fix certificate service tests with deterministic behavior

Backend: 27 packages pass, 83.5% coverage
Frontend: 0 lint warnings, 0 TypeScript errors
Pre-commit: All 14 hooks pass (~37s)
 2026-02-02 06:17:48 +00:00
GitHub Actions
f64e3feef8 chore: clean .gitignore cache 2026-01-26 19:22:05 +00:00
GitHub Actions
e5f0fec5db chore: clean .gitignore cache 2026-01-26 19:21:33 +00:00
GitHub Actions
99faac0b6a fix(security): implement security module toggle actions 
Complete Phase 4 implementation enabling ACL, WAF, and Rate Limiting
toggle functionality in the Security Dashboard UI.

Backend:

Add 60-second TTL settings cache layer to Cerberus middleware
Trigger async Caddy config reload on security.* setting changes
Query runtime settings in Caddy manager before config generation
Wire SettingsHandler with CaddyManager and Cerberus dependencies
Frontend:

Fix optimistic update logic to preserve mode field for WAF/rate_limit
Replace onChange with onCheckedChange for all Switch components
Add unit tests for mode preservation and rollback behavior
Test Fixes:

Fix CrowdSec startup test assertions (cfg.Enabled is global Cerberus flag)
Fix security service test UUID uniqueness for UNIQUE constraint
Add .first() to toast locator in wait-helpers.ts for multiple toasts
Documentation:

Add Security Dashboard Toggles section to features.md
Mark phase4_security_toggles_spec.md as IMPLEMENTED
Add E2E coverage mode (Docker vs Vite) documentation
Enables 8 previously skipped E2E tests in security-dashboard.spec.ts
and rate-limiting.spec.ts.
 2026-01-24 22:22:40 +00:00
GitHub Actions
d7939bed70 feat: add ManualDNSChallenge component and related hooks for manual DNS challenge management 
- Implemented `useManualChallenge`, `useChallengePoll`, and `useManualChallengeMutations` hooks for managing manual DNS challenges.
- Created tests for the `useManualChallenge` hooks to ensure correct fetching and mutation behavior.
- Added `ManualDNSChallenge` component for displaying challenge details and actions.
- Developed end-to-end tests for the Manual DNS Provider feature, covering provider selection, challenge UI, and accessibility compliance.
- Included error handling tests for verification failures and network errors.
 2026-01-12 04:01:40 +00:00
GitHub Actions
7a1a3adb1b fix: replace inline mock with verification executor for clarity in TestReconcileCrowdSecOnStartup 2025-12-31 23:52:04 +00:00
GitHub Actions
dcdc4e03b8 fix: update HTTP request handling and improve test coverage in various handlers 2025-12-31 22:12:51 +00:00
GitHub Actions
73aad74699 test: improve backend test coverage to 85.4% 
Add 38 new test cases across 6 backend files to address Codecov gaps:
- log_watcher.go: 56.25% → 98.2% (+41.95%)
- crowdsec_handler.go: 62.62% → 80.0% (+17.38%)
- routes.go: 69.23% → 82.1% (+12.87%)
- console_enroll.go: 79.59% → 83.3% (+3.71%)
- crowdsec_startup.go: 94.73% → 94.5% (maintained)
- crowdsec_exec.go: 92.85% → 81.0% (edge cases)

Test coverage improvements include:
- Security event detection (WAF, CrowdSec, ACL, rate limiting)
- LAPI decision management and health checking
- Console enrollment validation and error handling
- CrowdSec startup reconciliation edge cases
- Command execution error paths
- Configuration file operations

All quality gates passed:
- 261 backend tests passing (100% success rate)
- Pre-commit hooks passing
- Zero security vulnerabilities (Trivy)
- Clean builds (backend + frontend)
- Updated documentation and Codecov targets

Closes #N/A (addresses Codecov report coverage gaps)
 2025-12-16 14:10:32 +00:00
GitHub Actions
2a6175a97e feat: Implement CrowdSec toggle fix validation and documentation updates 
- Added QA summary report for CrowdSec toggle fix validation, detailing test results, code quality audit, and recommendations for deployment.
- Updated existing QA report to reflect the new toggle fix validation status and testing cycle.
- Enhanced security documentation to explain the persistence of CrowdSec across container restarts and troubleshooting steps for common issues.
- Expanded troubleshooting guide to address scenarios where CrowdSec does not start after a container restart, including diagnosis and solutions.
 2025-12-15 07:30:36 +00:00
GitHub Actions
aa55d38a82 fix: enhance CrowdSec startup logic and verification, improve error handling in Security page 2025-12-15 07:30:36 +00:00
GitHub Actions
e41c4a12da fix: resolve CrowdSec 500 error and state mismatch after container restart 
- Make Stop() idempotent: return nil instead of error when PID file missing
- Add startup reconciliation: auto-start CrowdSec if DB says enabled
- Ensure log file exists for LogWatcher to prevent disconnection

Fixes:
- "Failed to stop CrowdSec: 500 error" when toggling off
- CrowdSec showing "not running" despite being enabled in settings
- Live logs showing disconnected after container restart
 2025-12-15 07:30:35 +00:00