Commit Graph

89 Commits

Author SHA1 Message Date
renovate[bot]
dfffa66e36 fix(deps): update weekly-non-major-updates 2026-01-25 14:42:45 +00:00
GitHub Actions
80e37b4920 Merge branch 'development' into feature/beta-release 2026-01-25 06:11:29 +00:00
renovate[bot]
e1e840bac1 fix(deps): update weekly-non-major-updates 2026-01-25 05:39:59 +00:00
GitHub Actions
8d954c3b29 fix: update Go version to 1.25.6 and modify build step in CodeQL workflow 2026-01-16 03:41:10 +00:00
renovate[bot]
f049f1cf98 fix(deps): update weekly-non-major-updates 2026-01-13 21:48:48 +00:00
Jeremy
74f32c70ab Merge pull request #518 from Wikid82/renovate/feature/beta-release-actions-setup-go-digest
chore(deps): update actions/setup-go digest to 7a3fe6c (feature/beta-release)
2026-01-13 15:30:00 -05:00
renovate[bot]
8ec2c73048 chore(deps): update actions/setup-go digest to 7a3fe6c 2026-01-13 08:59:25 +00:00
renovate[bot]
39d1db93a5 chore(deps): update github/codeql-action digest to cdefb33 2026-01-12 20:29:07 +00:00
GitHub Actions
5674280c65 fix: Refactor token references in workflows and documentation
- Updated references from `CPMP_TOKEN` to `CHARON_TOKEN` in beta release draft PR body, beta release PR body, and GitHub setup documentation.
- Enhanced clarity in documentation regarding the use of `GITHUB_TOKEN` and fallback options.
- Removed outdated sections from the archived plan for the Docs-to-Issues workflow fix, streamlining the document.
- Initiated integration of Staticcheck into pre-commit hooks to improve code quality, including updates to Makefile, VS Code tasks, and documentation.
2026-01-11 04:27:26 +00:00
GitHub Actions
a1ff78a92f fix: add CodeQL configuration to exclude documented SSRF false positives and update workflow to use new config 2026-01-01 03:36:06 +00:00
GitHub Actions
f46d19b3c0 fix(security): enhance SSRF defense-in-depth with monitoring (CWE-918)
- Add CodeQL custom model recognizing ValidateExternalURL as sanitizer
- Enhance validation: hostname length (RFC 1035), IPv6-mapped IPv4 blocking
- Integrate Prometheus metrics (charon_ssrf_blocks_total, charon_url_validation_total)
- Add security audit logging with sanitized error messages
- Fix test race conditions with atomic types
- Update SECURITY.md with 5-layer defense documentation

Related to: #450
Coverage: Backend 86.3%, Frontend 87.27%
Security scans: CodeQL, Trivy, govulncheck all clean
2025-12-31 21:17:08 +00:00
GitHub Actions
0133d64866 chore: add cache-dependency-path for Go setup in CodeQL workflow 2025-12-24 17:41:22 +00:00
GitHub Actions
70bd60dbce chore: Implement CodeQL CI Alignment and Security Scanning
- Added comprehensive QA report for CodeQL CI alignment implementation, detailing tests, results, and findings.
- Created CodeQL security scanning guide in documentation, outlining usage and common issues.
- Developed pre-commit hooks for CodeQL scans and findings checks, ensuring security issues are identified before commits.
- Implemented scripts for running CodeQL Go and JavaScript scans, aligned with CI configurations.
- Verified all tests passed, including backend and frontend coverage, TypeScript checks, and SARIF file generation.
2025-12-24 14:35:33 +00:00
GitHub Actions
af8384046c chore: implement instruction compliance remediation
- Replace Go interface{} with any (Go 1.18+ standard)
- Add database indexes to frequently queried model fields
- Add JSDoc documentation to frontend API client methods
- Remove deprecated docker-compose version keys
- Add concurrency groups to all 25 GitHub Actions workflows
- Add YAML front matter and fix H1→H2 headings in docs

Coverage: Backend 85.5%, Frontend 87.73%
Security: No vulnerabilities detected

Refs: docs/plans/instruction_compliance_spec.md
2025-12-21 04:08:42 +00:00
renovate[bot]
711ed07df7 chore(deps): update github/codeql-action digest to 5d4e8d1 2025-12-17 14:25:45 +00:00
renovate[bot]
33efc29d9b chore(deps): update github/codeql-action digest to 1b168cd 2025-12-12 15:37:21 +00:00
renovate[bot]
e10fcf93a2 chore(deps): update github/codeql-action digest to cf1bb45 2025-12-08 00:35:42 +00:00
Jeremy
e1f0178040 Merge branch 'development' into renovate/go-1.x 2025-12-03 09:16:20 -05:00
renovate[bot]
4235573d80 chore(deps): update dependency go to v1.25.5 2025-12-03 03:25:40 +00:00
renovate[bot]
5a239f473f chore(deps): update actions/checkout digest to 8e8c483 2025-12-02 18:38:15 +00:00
renovate[bot]
40fac9d12e chore(deps): update actions/setup-go action to v6 2025-12-01 14:37:33 +00:00
Jeremy
336ddafea3 Merge branch 'development' into renovate/actions-setup-go-5.x 2025-12-01 09:37:05 -05:00
renovate[bot]
395fc0d6d2 chore(deps): update actions/setup-go action to v5 2025-12-01 13:04:26 +00:00
Jeremy
b635ea247f Merge branch 'development' into renovate/github-codeql-action-digest 2025-12-01 08:03:55 -05:00
renovate[bot]
d63143a658 chore(deps): pin dependencies 2025-12-01 10:47:30 +00:00
renovate[bot]
d6dbd0ffb3 chore(deps): update github/codeql-action digest to fe4161a 2025-12-01 10:46:52 +00:00
CI
143c0dfe43 chore(ci): CodeQL + seed + integration-test improvements 2025-11-29 17:09:51 +00:00
Wikid82
6feff3e8ce chore: remove cashed 2025-11-24 18:22:01 +00:00
Wikid82
9c842e7eab chore: remove cached 2025-11-24 18:21:11 +00:00
renovate[bot]
24b7afe7f4 chore(deps): update github/codeql-action digest to fdbfb4d 2025-11-24 16:29:00 +00:00
Wikid82
a5042cab55 fix: update workflows to replace PROJECT_TOKEN and GITHUB_TOKEN with CPMP_TOKEN 2025-11-22 14:53:25 -05:00
Wikid82
a2f1aaa6c2 ci: fix codeql permissions 2025-11-20 22:44:55 -05:00
renovate[bot]
0369e51918 chore(deps): update actions/checkout action to v6 2025-11-20 16:37:52 +00:00
renovate[bot]
f09cb19108 chore(deps): update github/codeql-action action to v4 2025-11-20 04:28:47 +00:00
Wikid82
6471e24f11 feat: Add GitHub Actions workflows for Docker build, publish, documentation deployment, and quality checks
- Implemented `docker-build.yml` for building and pushing Docker images with multi-platform support, Trivy security scanning, and conditional builds based on commit messages.
- Created `docker-publish.yml` for streamlined Docker image publishing with Trivy vulnerability scanning on push events.
- Added `docs.yml` to automate documentation deployment to GitHub Pages, including a custom HTML structure and markdown conversion.
- Introduced `propagate-changes.yml` to automate PR creation for synchronizing changes between main, development, and feature branches.
- Established `quality-checks.yml` for running backend (Go) and frontend (React) quality checks, including tests and linting.
- Developed `release.yml` for generating changelogs and creating GitHub releases upon version tag pushes.
- Set up `renovate.yml` for automated dependency updates on a daily schedule.
2025-11-19 22:53:42 -05:00
Wikid82
1e2d87755d Remove Settings and Setup pages along with their tests and related API services
- Deleted Settings.tsx and Setup.tsx pages, which included functionality for changing passwords and setting up an admin account.
- Removed associated test files for Setup page.
- Eliminated API service definitions related to proxy hosts, remote servers, import functionality, and health checks.
- Cleaned up mock data and test setup files.
- Removed configuration files for TypeScript, Vite, and Tailwind CSS.
- Deleted scripts for testing coverage, release management, Dockerfile validation, and Python compilation checks.
- Removed Sourcery pre-commit wrapper script.
2025-11-19 22:53:32 -05:00
renovate[bot]
17672c2b53 chore(deps): update actions/checkout action to v5 2025-11-20 00:45:05 +00:00
renovate[bot]
e5b9ae8a90 chore(deps): pin dependencies 2025-11-19 16:47:27 +00:00
Wikid82
8434121dd1 CI: Add CodeQL analysis workflow with security-events permissions and skip fork PRs 2025-11-19 09:52:08 -05:00