4 Commits

Author	SHA1	Message	Date
Pouzor	7c2417f5a9	fix(security): resolve code scanning alerts ... Add least-privilege 'permissions: contents: read' to quality, security and docker-ci workflows (actions/missing-workflow-permissions). Harden markdown table cell escaping in exportMarkdown: escape backslash before pipe and collapse newlines so untrusted values can't break the table (js/incomplete-sanitization). Add regression tests. ha-relevant: maybe	2026-06-09 17:15:26 +02:00
Pouzor	c9d6642b26	ci: pass DL3008 ignore directly to hadolint action	2026-03-28 12:58:03 +01:00
Pouzor	cc68fcf1c1	test: add deployment test tiers (shellcheck, hadolint, Docker smoke, integration) ... Tier 1 — quality.yml: ShellCheck on lxc-install.sh, hadolint on both Dockerfiles Tier 2 — docker-ci.yml: build images, smoke-test backend health + frontend 200 Tier 3 — test_integration.py: full stack pytest (auth, canvas save/reload, dimensions) Also adds Docker healthcheck to backend service in docker-compose.yml	2026-03-28 12:33:35 +01:00
Pouzor	4310a5cc2d	feat: Phase 1 scaffold — frontend canvas + backend skeleton ... Frontend: - Vite + React 18 + TypeScript + Tailwind v4 + Shadcn/ui - React Flow v12 canvas with all 11 node types and 5 edge types - Dark theme with project design system (cyan, green, orange, purple accents) - Collapsible sidebar, toolbar, detail panel - Zustand store for canvas state - Demo data with 10 nodes and 10 edges Backend: - FastAPI + SQLAlchemy async + SQLite (Python 3.13) - DB models: Node, Edge, CanvasState, PendingDevice, ScanRun - REST API routes: auth, nodes, edges, canvas, scan, status (WebSocket) - JWT auth + bcrypt via config.yml - Pydantic v2 schemas Infra: - GitHub Actions quality + security workflows - .gitignore, .env.example, verify-tooling.sh, security-check.sh	2026-03-06 23:14:34 +01:00