Charon

Author	SHA1	Message	Date
akanealw	eec8c28fb3	changed perms Some checks are pending Go Benchmark / Performance Regression Check (push) Waiting to run Details Cerberus Integration / Cerberus Security Stack Integration (push) Waiting to run Details Upload Coverage to Codecov / Backend Codecov Upload (push) Waiting to run Details Upload Coverage to Codecov / Frontend Codecov Upload (push) Waiting to run Details CodeQL - Analyze / CodeQL analysis (go) (push) Waiting to run Details CodeQL - Analyze / CodeQL analysis (javascript-typescript) (push) Waiting to run Details CrowdSec Integration / CrowdSec Bouncer Integration (push) Waiting to run Details Docker Build, Publish & Test / build-and-push (push) Waiting to run Details Docker Build, Publish & Test / Security Scan PR Image (push) Blocked by required conditions Details Quality Checks / Auth Route Protection Contract (push) Waiting to run Details Quality Checks / Codecov Trigger/Comment Parity Guard (push) Waiting to run Details Quality Checks / Backend (Go) (push) Waiting to run Details Quality Checks / Frontend (React) (push) Waiting to run Details Rate Limit integration / Rate Limiting Integration (push) Waiting to run Details Security Scan (PR) / Trivy Binary Scan (push) Waiting to run Details Supply Chain Verification (PR) / Verify Supply Chain (push) Waiting to run Details WAF integration / Coraza WAF Integration (push) Waiting to run Details	2026-04-22 18:19:14 +00:00
GitHub Actions	4adcd9eda1	feat: add nightly branch workflow	2026-01-13 22:11:35 +00:00
GitHub Actions	739895d81e	fix(security): resolve CrowdSec startup and permission issues Fixes CrowdSec not starting automatically on container boot and LAPI binding failures due to permission issues. Changes: - Fix Dockerfile: Add charon:charon ownership for CrowdSec directories - Move reconciliation from routes.go goroutine to main.go initialization - Add mutex protection to prevent concurrent reconciliation - Increase LAPI startup timeout from 30s to 60s - Add config validation in entrypoint script Testing: - Backend coverage: 85.4% (✅ meets requirement) - Frontend coverage: 87.01% (✅ exceeds requirement) - Security: 0 Critical/High vulnerabilities (✅ Trivy + Go scans) - All CrowdSec-specific tests passing (✅ 100%) Technical Details: - Reconciliation now runs synchronously during app initialization (after DB migrations, before HTTP server starts) - Maintains "GUI-controlled" design philosophy per entrypoint docs - Follows principle of least privilege (charon user, not root) - No breaking changes to API or behavior Documentation: - Implementation guide: docs/implementation/crowdsec_startup_fix_COMPLETE.md - Migration guide: docs/implementation/crowdsec_startup_fix_MIGRATION.md - QA report: docs/reports/qa_report_crowdsec_startup_fix.md Related: #crowdsec-startup-timeout	2025-12-23 01:59:21 +00:00

3 Commits