GitHub Actions 978f698570 fix(security): remove hardcoded encryption keys from docker compose files ...

Replace hardcoded CHARON_ENCRYPTION_KEY with environment variable
substitution using Docker Compose required variable syntax.

docker-compose.playwright.yml: use ${CHARON_ENCRYPTION_KEY:?...}
docker-compose.e2e.yml: use ${CHARON_ENCRYPTION_KEY:?...}
e2e-tests.yml: add ephemeral key generation per CI run
.env.test.example: document the requirement prominently
Security: The old key exists in git history and must never be used
in production. Each CI run now generates a unique ephemeral key.

Refs: OWASP A02:2021 - Cryptographic Failures

2026-01-25 03:50:12 +00:00

..

archive

fix: implement user management UI

2026-01-24 22:22:40 +00:00

proof-of-concept

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

agent-skills-migration-spec.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

archive_supply_chain_pr_implementation.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

auto_versioning_remediation.md

fix Add Quality Assurance & Security Audit Report for Nightly Workflow Implementation

2026-01-16 03:30:53 +00:00

bulk-apply-security-headers-plan.md

test(security): complete CWE-918 remediation and achieve 86% backend coverage

2025-12-24 11:51:51 +00:00

c-ares_remediation_plan.md

feat: add weekly security rebuild workflow with no-cache scanning

2025-12-14 02:08:16 +00:00

caddy_bouncer_field_remediation.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

caddy_config_architecture_investigation.md

fix: remove invalid trusted_proxies structure causing 500 error on proxy host save

2025-12-20 05:46:03 +00:00

caddy_upgrade_plan.md

chore(deps): upgrade Caddy to v2.11.0-beta.2

2026-01-06 20:20:41 +00:00

cerberus_integration_testing_plan.md

Add comprehensive tests for Security Dashboard functionality

2025-12-12 23:51:05 +00:00

cerberus_remediation_plan.md

Enhance documentation and testing plans

2025-12-14 02:45:24 +00:00

cerberus_uiux_testing_plan.md

Enhance documentation and testing plans

2025-12-14 02:45:24 +00:00

ci_failure_fix.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

ci_failure_remediation_plan.md

Enhance documentation and testing plans

2025-12-14 02:45:24 +00:00

cleanup_temp_files.md

Fix Rate Limiting Issues

2025-12-12 19:21:44 +00:00

codecov_config_analysis.md

fix: update Codecov ignore patterns to align with local coverage analysis

2025-12-15 07:30:36 +00:00

codecov-acceptinvite-patch-coverage.md

fix: remove unreachable constant-time compare in AcceptInvite handler

2025-12-22 19:06:12 +00:00

codeql-local-hygiene.md

fix: authentication issues for certificate endpoints and improve test coverage

2026-01-03 03:08:43 +00:00

container-hardening-fix.md

chore: replace wget with curl in various scripts for consistency and reliability

2026-01-24 22:22:39 +00:00

crowdsec_bouncer_research_plan.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

crowdsec_full_implementation.md

chore: replace wget with curl in various scripts for consistency and reliability

2026-01-24 22:22:39 +00:00

crowdsec_hotfix_plan.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

crowdsec_lapi_error_diagnostic.md

fix: enhance LAPI readiness checks and update related UI feedback

2025-12-15 07:30:35 +00:00

crowdsec_nonroot_fix_spec.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

crowdsec_reconciliation_failure.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

crowdsec_source_build.md

chore: bump CrowdSec to v1.7.6

2026-01-24 22:22:40 +00:00

crowdsec_startup_fix.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

crowdsec_testing_plan.md

Enhance documentation and testing plans

2025-12-14 02:45:24 +00:00

crowdsec_toggle_fix_plan.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

current_spec.md

fix(security): remove hardcoded encryption keys from docker compose files

2026-01-25 03:50:12 +00:00

custom_dns_plugin_spec.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

db_corruption_guardrails_spec.md

feat: add SQLite database corruption guardrails

2025-12-17 16:53:38 +00:00

debian_migration_spec.md

chore: replace wget with curl in various scripts for consistency and reliability

2026-01-24 22:22:39 +00:00

dns_challenge_backend_research.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

dns_challenge_frontend_research.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

dns_challenge_future_features.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

dns_future_features_implementation.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

docker_socket_trace.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

docs_to_issues_workflow.md

Enhance documentation and testing plans

2025-12-14 02:45:24 +00:00

fix_generateconfig_tests.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

frontend_coverage_boost.md

Fix Rate Limiting Issues

2025-12-12 19:21:44 +00:00

handler_test_optimization.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

history_rewrite.md

Fix Rate Limiting Issues

2025-12-12 19:21:44 +00:00

import_cert_dashboard_spec.md

Fix Rate Limiting Issues

2025-12-12 19:21:44 +00:00

instruction_compliance_spec.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

issue-365-additional-security.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

issue-365-remaining-work.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

medium_severity_remediation.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

MIGRATION_UPDATE_SUMMARY.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

nightly_branch_implementation.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

nightly_workflow_verification_status.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

notification_page_trace.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

patch_coverage_spec.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

patch-coverage-codecov.md

fix: authentication issues for certificate endpoints and improve test coverage

2026-01-03 03:08:43 +00:00

phase1-failures-remediation.md

fix(tests): remediate 11 Phase 1 E2E test failures

2026-01-24 22:22:40 +00:00

phase1-skipped-tests-remediation.md

chore: enable Cerberus security by default and fix 31 skipped E2E tests

2026-01-24 22:22:40 +00:00

phase3_caddy_integration_completion.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

phase3_completion_summary.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

phase4_security_toggles_spec.md

fix(security): implement security module toggle actions

2026-01-24 22:22:40 +00:00

phase4-settings-plan.md

fix: resolve E2E test failures in Phase 4 settings tests

2026-01-24 22:22:39 +00:00

phase4-test-remediation.md

fix: resolve E2E test failures in Phase 4 settings tests

2026-01-24 22:22:39 +00:00

phase5_custom_plugins_spec.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

phase5-implementation.md

chore: implement Phase 5 E2E tests for Tasks & Monitoring

2026-01-24 22:22:39 +00:00

PHASE5_E2E_REMEDIATION.md

fix(tests): resolve E2E race conditions with Promise.all pattern

2026-01-24 22:22:39 +00:00

playwright-coverage-fix.md

fix: update Vite port to 5173 and enhance Playwright coverage reporting

2026-01-24 22:22:40 +00:00

playwright-coverage-plan.md

chore: add Playwright E2E coverage with Codecov integration

2026-01-20 06:11:59 +00:00

post_rebuild_diagnostic.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

pr460_frontend_coverage.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

pr-434-docker-analysis.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

precommit_performance_fix_spec.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

prev_spec_archived_dec16.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

prev_spec_ci_investigation_dec18.md

fix: remove invalid trusted_proxies structure causing 500 error on proxy host save

2025-12-20 05:46:03 +00:00

prev_spec_docker_socket_500_dec23.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

prev_spec_i18n_language_selector_dec19.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

prev_spec_security_headers_persistence_dec18.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

prev_spec_standard_proxy_headers_dec19.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

prev_spec_test_coverage_dec24.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

prev_spec_uiux_dec16.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

prev_spec_websocket_fix_dec16.md

chore: replace wget with curl in various scripts for consistency and reliability

2026-01-24 22:22:39 +00:00

prev_spec_xforwarded_port_investigation.md

fix: remove invalid trusted_proxies structure causing 500 error on proxy host save

2025-12-20 05:46:03 +00:00

qa_remediation.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

rate_limiter_testing_plan.md

Fix Rate Limiting Issues

2025-12-12 19:21:44 +00:00

react-activity-icon-error-plan.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

sample_orchestration_plan.md

Fix Rate Limiting Issues

2025-12-12 19:21:44 +00:00

SECURITY_COVERAGE_QA_PLAN.md

Fix Rate Limiting Issues

2025-12-12 19:21:44 +00:00

security_features_spec.md

Fix Rate Limiting Issues

2025-12-12 19:21:44 +00:00

security_headers_apply_preset_analysis.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

security_headers_investigation.md

fix: consolidate preset UI and fix field name mismatch

2025-12-19 18:55:48 +00:00

security_remediation_plan.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

security_tooling_analysis.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

security_vulnerability_remediation.md

chore: replace wget with curl in various scripts for consistency and reliability

2026-01-24 22:22:39 +00:00

skipped-tests-remediation.md

chore(tests): implement Phase 5 TestDataManager auth validation infrastructure

2026-01-24 22:22:40 +00:00

ssl_card_pending_fix.md

Fix Rate Limiting Issues

2025-12-12 19:21:44 +00:00

ssrf_handler_fix_spec.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

ssrf_remediation_spec.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

ssrf-remediation.md

fix: authentication issues for certificate endpoints and improve test coverage

2026-01-03 03:08:43 +00:00

structure.md

chore: reorganize repository structure

2025-12-21 04:57:31 +00:00

supply_chain_security_implementation.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

test_coverage_plan_100_percent.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

test_coverage_plan_sqlite_corruption.md

fix: remove invalid trusted_proxies structure causing 500 error on proxy host save

2025-12-20 05:46:03 +00:00

test-coverage-remediation-plan.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

test-optimization.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

ui_ux_bugfixes_spec.md

Enhance documentation and testing plans

2025-12-14 02:45:24 +00:00

uptime_monitoring_diagnosis.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

url_test_security_fixes.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

url_testing_codeql_fix.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

user_handler_coverage_fix.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

waf_integration_fix.md

feat: add nightly branch workflow

2026-01-13 22:11:35 +00:00

waf_testing_plan.md

Enhance documentation and testing plans

2025-12-14 02:45:24 +00:00

workflow_modularization_spec.md

chore: fix CI/CD workflow linter config and documentation

2026-01-15 20:35:43 +00:00