GitHub Actions 3590553519 chore(ci): comprehensive CI/CD audit fixes per best practices ...

Implements all 13 fixes identified in the CI/CD audit against
github-actions-ci-cd-best-practices.instructions.md

Critical fixes:

Remove hardcoded encryption key from playwright.yml (security)
Fix artifact filename mismatch in supply-chain-pr.yml (bug)
Pin GoReleaser to ~> v2.5 instead of latest (supply chain)
High priority fixes:

Upgrade CodeQL action from v3 to v4 in supply-chain-pr.yml
Add environment protection for release workflow
Fix shell variable escaping ($$ → $) in release-goreleaser.yml
Medium priority fixes:

Add timeout-minutes to playwright.yml (20 min)
Add explicit permissions to quality-checks.yml
Add timeout-minutes to codecov-upload.yml jobs (15 min)
Fix benchmark.yml permissions (workflow-level read, job-level write)
Low priority fixes:

Add timeout-minutes to docs.yml jobs (10/5 min)
Add permissions block to docker-lint.yml
Add timeout-minutes to renovate.yml (30 min)

2026-01-15 15:25:58 +00:00

..

archive

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

proof-of-concept

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

agent-skills-migration-spec.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

archive_supply_chain_pr_implementation.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

bulk-apply-security-headers-plan.md

test(security): complete CWE-918 remediation and achieve 86% backend coverage

2025-12-24 11:51:51 +00:00

c-ares_remediation_plan.md

feat: add weekly security rebuild workflow with no-cache scanning

2025-12-14 02:08:16 +00:00

caddy_bouncer_field_remediation.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

caddy_config_architecture_investigation.md

fix: remove invalid trusted_proxies structure causing 500 error on proxy host save

2025-12-20 05:46:03 +00:00

caddy_upgrade_plan.md

chore(deps): upgrade Caddy to v2.11.0-beta.2

2026-01-06 20:20:41 +00:00

cerberus_integration_testing_plan.md

Add comprehensive tests for Security Dashboard functionality

2025-12-12 23:51:05 +00:00

cerberus_remediation_plan.md

Enhance documentation and testing plans

2025-12-14 02:45:24 +00:00

cerberus_uiux_testing_plan.md

Enhance documentation and testing plans

2025-12-14 02:45:24 +00:00

ci_failure_fix.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

ci_failure_remediation_plan.md

Enhance documentation and testing plans

2025-12-14 02:45:24 +00:00

cleanup_temp_files.md

Fix Rate Limiting Issues

2025-12-12 19:21:44 +00:00

codecov_config_analysis.md

fix: update Codecov ignore patterns to align with local coverage analysis

2025-12-15 07:30:36 +00:00

codecov-acceptinvite-patch-coverage.md

fix: remove unreachable constant-time compare in AcceptInvite handler

2025-12-22 19:06:12 +00:00

codeql-local-hygiene.md

fix: authentication issues for certificate endpoints and improve test coverage

2026-01-03 03:08:43 +00:00

container-hardening-fix.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

crowdsec_bouncer_research_plan.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

crowdsec_full_implementation.md

Enhance documentation and testing plans

2025-12-14 02:45:24 +00:00

crowdsec_hotfix_plan.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

crowdsec_lapi_error_diagnostic.md

fix: enhance LAPI readiness checks and update related UI feedback

2025-12-15 07:30:35 +00:00

crowdsec_nonroot_fix_spec.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

crowdsec_reconciliation_failure.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

crowdsec_source_build.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

crowdsec_startup_fix.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

crowdsec_testing_plan.md

Enhance documentation and testing plans

2025-12-14 02:45:24 +00:00

crowdsec_toggle_fix_plan.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

current_spec.md

chore(ci): comprehensive CI/CD audit fixes per best practices

2026-01-15 15:25:58 +00:00

current_spec.md.backup_20251224_203906

fix(lint): resolve 20 gocritic, eslint, and type safety issues

2025-12-31 05:21:11 +00:00

current_spec.md.backup_playwright_skill

fix(tests): correct Playwright locator for Script DNS provider field

2026-01-15 05:24:54 +00:00

custom_dns_plugin_spec.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

db_corruption_guardrails_spec.md

feat: add SQLite database corruption guardrails

2025-12-17 16:53:38 +00:00

dns_challenge_backend_research.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

dns_challenge_frontend_research.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

dns_challenge_future_features.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

dns_future_features_implementation.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

docker_socket_trace.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

docs_to_issues_workflow.md

Enhance documentation and testing plans

2025-12-14 02:45:24 +00:00

fix_generateconfig_tests.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

frontend_coverage_boost.md

Fix Rate Limiting Issues

2025-12-12 19:21:44 +00:00

handler_test_optimization.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

history_rewrite.md

Fix Rate Limiting Issues

2025-12-12 19:21:44 +00:00

import_cert_dashboard_spec.md

Fix Rate Limiting Issues

2025-12-12 19:21:44 +00:00

instruction_compliance_spec.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

issue-365-additional-security.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

issue-365-remaining-work.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

medium_severity_remediation.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

MIGRATION_UPDATE_SUMMARY.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

nightly_branch_implementation.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

nightly_workflow_verification_status.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

notification_page_trace.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

patch_coverage_spec.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

patch-coverage-codecov.md

fix: authentication issues for certificate endpoints and improve test coverage

2026-01-03 03:08:43 +00:00

phase3_caddy_integration_completion.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

phase3_completion_summary.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

phase5_custom_plugins_spec.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

post_rebuild_diagnostic.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

pr460_frontend_coverage.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

pr-434-docker-analysis.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

precommit_performance_fix_spec.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

prev_spec_archived_dec16.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

prev_spec_ci_investigation_dec18.md

fix: remove invalid trusted_proxies structure causing 500 error on proxy host save

2025-12-20 05:46:03 +00:00

prev_spec_docker_socket_500_dec23.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

prev_spec_i18n_language_selector_dec19.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

prev_spec_security_headers_persistence_dec18.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

prev_spec_standard_proxy_headers_dec19.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

prev_spec_test_coverage_dec24.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

prev_spec_uiux_dec16.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

prev_spec_websocket_fix_dec16.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

prev_spec_xforwarded_port_investigation.md

fix: remove invalid trusted_proxies structure causing 500 error on proxy host save

2025-12-20 05:46:03 +00:00

qa_remediation.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

rate_limiter_testing_plan.md

Fix Rate Limiting Issues

2025-12-12 19:21:44 +00:00

react-activity-icon-error-plan.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

sample_orchestration_plan.md

Fix Rate Limiting Issues

2025-12-12 19:21:44 +00:00

SECURITY_COVERAGE_QA_PLAN.md

Fix Rate Limiting Issues

2025-12-12 19:21:44 +00:00

security_features_spec.md

Fix Rate Limiting Issues

2025-12-12 19:21:44 +00:00

security_headers_apply_preset_analysis.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

security_headers_investigation.md

fix: consolidate preset UI and fix field name mismatch

2025-12-19 18:55:48 +00:00

security_remediation_plan.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

security_tooling_analysis.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

security_vulnerability_remediation.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

ssl_card_pending_fix.md

Fix Rate Limiting Issues

2025-12-12 19:21:44 +00:00

ssrf_handler_fix_spec.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

ssrf_remediation_spec.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

ssrf-remediation.md

fix: authentication issues for certificate endpoints and improve test coverage

2026-01-03 03:08:43 +00:00

structure.md

chore: reorganize repository structure

2025-12-21 04:57:31 +00:00

supply_chain_security_implementation.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

task.md

fix(ci): use valid 32-byte base64 encryption key for E2E tests

2026-01-15 06:02:42 +00:00

test_coverage_plan_100_percent.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

test_coverage_plan_sqlite_corruption.md

fix: remove invalid trusted_proxies structure causing 500 error on proxy host save

2025-12-20 05:46:03 +00:00

test-coverage-remediation-plan.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

test-optimization.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

ui_ux_bugfixes_spec.md

Enhance documentation and testing plans

2025-12-14 02:45:24 +00:00

uptime_monitoring_diagnosis.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

url_test_security_fixes.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

url_testing_codeql_fix.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

user_handler_coverage_fix.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

waf_integration_fix.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

waf_testing_plan.md

Enhance documentation and testing plans

2025-12-14 02:45:24 +00:00