7c2417f5a9
fix(security): resolve code scanning alerts
...
Add least-privilege 'permissions: contents: read' to quality, security
and docker-ci workflows (actions/missing-workflow-permissions).
Harden markdown table cell escaping in exportMarkdown: escape backslash
before pipe and collapse newlines so untrusted values can't break the
table (js/incomplete-sanitization). Add regression tests.
ha-relevant: maybe
2026-06-09 17:15:26 +02:00
fc765fa255
ci(docker): publish homelable-mcp image to GHCR
...
Add mcp matrix entry in docker-publish workflow so the MCP server
image is built and pushed alongside backend/frontend. Also wire the
prebuilt compose file so users can pull and run it directly.
Closes #162
2026-05-27 21:32:55 +02:00
785be6a5dd
Create FUNDING.yml
2026-04-28 14:52:25 +02:00
adb2088752
revert: restore workflow to upstream version
2026-04-24 00:42:00 +02:00
3ccdde0bea
Update Docker image references to use repository owner
2026-04-24 00:42:00 +02:00
fe5e3c9858
revert: restore workflow to upstream version
2026-04-22 22:41:01 +02:00
1a3cde3a02
Update Docker image references to use repository owner
2026-04-22 22:41:01 +02:00
a8ca4f1cca
revert: restore workflow to upstream version
2026-04-21 16:08:40 +02:00
0204a7ddeb
Update Docker image references to use repository owner
2026-04-21 16:08:40 +02:00
d9f3477780
fix(ci): inject bcrypt hash via compose environment with $$ escaping, remove dynamic hash generation
2026-03-28 13:03:28 +01:00
c9d6642b26
ci: pass DL3008 ignore directly to hadolint action
2026-03-28 12:58:03 +01:00
fd8735ce7f
fix(ci): quote CTID path, fix bcrypt hash shell expansion, npm audit fix
2026-03-28 12:49:50 +01:00
0bdf835a3d
fix(ci): expose backend port in CI, fix shellcheck warnings in lxc-install.sh
2026-03-28 12:45:01 +01:00
cc68fcf1c1
test: add deployment test tiers (shellcheck, hadolint, Docker smoke, integration)
...
Tier 1 — quality.yml: ShellCheck on lxc-install.sh, hadolint on both Dockerfiles
Tier 2 — docker-ci.yml: build images, smoke-test backend health + frontend 200
Tier 3 — test_integration.py: full stack pytest (auth, canvas save/reload, dimensions)
Also adds Docker healthcheck to backend service in docker-compose.yml
2026-03-28 12:33:35 +01:00
7ba5e888b4
feat: add standalone (frontend-only) mode via VITE_STANDALONE build flag
...
- App.tsx: bypass auth gate, swap canvas save/load to localStorage
- Sidebar.tsx: hide scan views and Scan Network button
- useStatusPolling.ts: skip WebSocket connection
- Dockerfile.frontend: accept VITE_STANDALONE build arg
- docker-publish.yml: build ghcr.io/pouzor/homelable-frontend-standalone image
- docker-compose.standalone.yml: frontend-only compose file
- install.sh: add --standalone flag
Usage:
curl -fsSL .../install.sh | bash -s -- --standalone
cd homelable && docker compose up -d
2026-03-09 14:00:25 +01:00
1cd93ed250
fix: add linux/arm64 to Docker build platforms for Apple Silicon support
2026-03-09 13:33:49 +01:00
6a7113193f
feat: add GitHub Actions Docker publish workflow and prebuilt install
...
- Build and push backend/frontend images to ghcr.io on every push to main and on version tags
- Add docker-compose.prebuilt.yml for pull-based install (no clone needed)
- Update README Quick Start with inline install one-liner using prebuilt images
2026-03-09 12:01:04 +01:00
1811afa749
fix: upgrade fastapi to 0.135.1, fix starlette CVEs, update auth test assertions
...
- fastapi 0.115.0 → 0.135.1 pulls starlette 0.52.1 (fixes CVE-2024-47874, CVE-2025-54121)
- pip-audit: ignore CVE-2024-23342 (ecdsa Minerva attack, no fix exists; app uses HS256 only)
- Update auth guard tests: FastAPI 0.135 returns 401 (not 403) when Bearer token is missing
2026-03-07 15:18:28 +01:00
e5262b4b71
fix: replace safety scan with pip-audit (no login required)
...
safety scan requires interactive account login, breaking CI.
pip-audit provides equivalent vulnerability scanning without auth.
2026-03-07 15:11:59 +01:00
fccbdad409
fix: patch CVEs — upgrade python-jose 3.3→3.5, python-multipart 0.0.12→0.0.22; use safety scan
2026-03-07 15:08:04 +01:00
4310a5cc2d
feat: Phase 1 scaffold — frontend canvas + backend skeleton
...
Frontend:
- Vite + React 18 + TypeScript + Tailwind v4 + Shadcn/ui
- React Flow v12 canvas with all 11 node types and 5 edge types
- Dark theme with project design system (cyan, green, orange, purple accents)
- Collapsible sidebar, toolbar, detail panel
- Zustand store for canvas state
- Demo data with 10 nodes and 10 edges
Backend:
- FastAPI + SQLAlchemy async + SQLite (Python 3.13)
- DB models: Node, Edge, CanvasState, PendingDevice, ScanRun
- REST API routes: auth, nodes, edges, canvas, scan, status (WebSocket)
- JWT auth + bcrypt via config.yml
- Pydantic v2 schemas
Infra:
- GitHub Actions quality + security workflows
- .gitignore, .env.example, verify-tooling.sh, security-check.sh
2026-03-06 23:14:34 +01:00
Pouzor