Charon

Author	SHA1	Message	Date
akanealw	eec8c28fb3	changed perms Some checks are pending Go Benchmark / Performance Regression Check (push) Waiting to run Details Cerberus Integration / Cerberus Security Stack Integration (push) Waiting to run Details Upload Coverage to Codecov / Backend Codecov Upload (push) Waiting to run Details Upload Coverage to Codecov / Frontend Codecov Upload (push) Waiting to run Details CodeQL - Analyze / CodeQL analysis (go) (push) Waiting to run Details CodeQL - Analyze / CodeQL analysis (javascript-typescript) (push) Waiting to run Details CrowdSec Integration / CrowdSec Bouncer Integration (push) Waiting to run Details Docker Build, Publish & Test / build-and-push (push) Waiting to run Details Docker Build, Publish & Test / Security Scan PR Image (push) Blocked by required conditions Details Quality Checks / Auth Route Protection Contract (push) Waiting to run Details Quality Checks / Codecov Trigger/Comment Parity Guard (push) Waiting to run Details Quality Checks / Backend (Go) (push) Waiting to run Details Quality Checks / Frontend (React) (push) Waiting to run Details Rate Limit integration / Rate Limiting Integration (push) Waiting to run Details Security Scan (PR) / Trivy Binary Scan (push) Waiting to run Details Supply Chain Verification (PR) / Verify Supply Chain (push) Waiting to run Details WAF integration / Coraza WAF Integration (push) Waiting to run Details	2026-04-22 18:19:14 +00:00
GitHub Actions	0da6f7620c	fix: restore PATCH endpoints used by E2E + emergency-token fallback register PATCH /api/v1/settings and PATCH /api/v1/security/acl (E2E expectations) add emergency-token-aware shortcut handlers (validate X-Emergency-Token → set admin context → invoke handler) preserve existing POST handlers and backward compatibility rebuild & redeploy E2E image, verified backend build success Why: unblocked failing Playwright E2E tests that returned 404s and were blocking the hotfix release	2026-01-27 22:43:33 +00:00
GitHub Actions	f64e3feef8	chore: clean .gitignore cache	2026-01-26 19:22:05 +00:00
GitHub Actions	e5f0fec5db	chore: clean .gitignore cache	2026-01-26 19:21:33 +00:00
GitHub Actions	892b89fc9d	feat: break-glass security reset Implement dual-registry container publishing to both GHCR and Docker Hub for maximum distribution reach. Add emergency security reset endpoint ("break-glass" mechanism) to recover from ACL lockout situations. Key changes: Docker Hub + GHCR dual publishing with Cosign signing and SBOM Emergency reset endpoint POST /api/v1/emergency/security-reset Token-based authentication bypasses Cerberus middleware Rate limited (5/hour) with audit logging 30 new security enforcement E2E tests covering ACL, WAF, CrowdSec, Rate Limiting, Security Headers, and Combined scenarios Fixed container startup permission issue (tmpfs directory ownership) Playwright config updated with testIgnore for browser projects Security: Token via CHARON_EMERGENCY_TOKEN env var (32+ chars recommended) Tests: 689 passed, 86% backend coverage, 85% frontend coverage	2026-01-25 20:14:06 +00:00

5 Commits