5 Commits

Author	SHA1	Message	Date
Pouzor	7c2417f5a9	fix(security): resolve code scanning alerts ... Add least-privilege 'permissions: contents: read' to quality, security and docker-ci workflows (actions/missing-workflow-permissions). Harden markdown table cell escaping in exportMarkdown: escape backslash before pipe and collapse newlines so untrusted values can't break the table (js/incomplete-sanitization). Add regression tests. ha-relevant: maybe	2026-06-09 17:15:26 +02:00
Pouzor	d9f3477780	fix(ci): inject bcrypt hash via compose environment with $$ escaping, remove dynamic hash generation	2026-03-28 13:03:28 +01:00
Pouzor	fd8735ce7f	fix(ci): quote CTID path, fix bcrypt hash shell expansion, npm audit fix	2026-03-28 12:49:50 +01:00
Pouzor	0bdf835a3d	fix(ci): expose backend port in CI, fix shellcheck warnings in lxc-install.sh	2026-03-28 12:45:01 +01:00
Pouzor	cc68fcf1c1	test: add deployment test tiers (shellcheck, hadolint, Docker smoke, integration) ... Tier 1 — quality.yml: ShellCheck on lxc-install.sh, hadolint on both Dockerfiles Tier 2 — docker-ci.yml: build images, smoke-test backend health + frontend 200 Tier 3 — test_integration.py: full stack pytest (auth, canvas save/reload, dimensions) Also adds Docker healthcheck to backend service in docker-compose.yml	2026-03-28 12:33:35 +01:00