CI overhaul + issue #1 devexp fixes#6
Merged
Merged
Conversation
…udit, supply-chain hygiene. - New rust-tests.yml: fmt check, clippy, full workspace tests on crates/** changes - Rewrite trivyignore-audit: scan the published image for fixed/stale ignored CVEs and file an issue, instead of a broken 'trivy db search' check that only ever committed weekly date bumps to main - Remove dead DHI login from docker.yml (runtime image moved to Distroless in c1ddb7c) - SHA-pin all actions, least-privilege permissions, concurrency groups everywhere - Add Dependabot for cargo, npm (ui, docs/site), and github-actions - ux-tests now also trigger on crates/** since they exercise the real binary Closes #5 Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
…n the --no-auth example. Closes #3 Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Gets CI and the deployment devexp progressing again. Four commits:
CI overhaul (closes #5)
rust-tests.yml— fmt check, clippy, full workspace tests oncrates/**changes. First time the 800-test suite runs in CI.trivyignore-audit.ymlrewritten — the oldtrivy db searchcheck never worked; now scans the published image with no ignore file and files an issue for fixed/stale entries instead of committing weekly date bumps to main.DOCKERHUB_*repo secrets can be deleted.permissions,concurrencygroups, Dependabot for cargo/npm/actions. ux-tests now trigger on backend changes too.cargo fmtpass so the new formatting gate passes.Issue #1 follow-ups
HONE_IN_CONTAINER=1,/.dockerenvas fallback; would have made the Deployment error #1 report self-diagnosing.--host 0.0.0.0when editingcommand:, plus a Troubleshooting section keyed on thecurl: (52)symptom.Verified locally on the exact committed tree: fmt clean, clippy clean, 801 tests passing.
🤖 Generated with Claude Code