mirror of
https://github.com/Dokploy/dokploy.git
synced 2026-09-12 19:51:00 +05:00
chore: remove temporary issue 416 security workflow
This commit is contained in:
parent
9fa33160cf
commit
32c56d594f
53
.github/workflows/issue-416-security-round6.yml
vendored
53
.github/workflows/issue-416-security-round6.yml
vendored
@ -1,53 +0,0 @@
|
||||
name: Issue 416 Security Round 6
|
||||
|
||||
on:
|
||||
push:
|
||||
branches:
|
||||
- feat/issue-416-backup-destinations
|
||||
paths:
|
||||
- .github/workflows/issue-416-security-round6.yml
|
||||
|
||||
permissions:
|
||||
contents: write
|
||||
|
||||
jobs:
|
||||
fix-and-verify:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- uses: actions/checkout@v5
|
||||
with:
|
||||
ref: feat/issue-416-backup-destinations
|
||||
- uses: pnpm/action-setup@v5
|
||||
with:
|
||||
version: 10.22.0
|
||||
- uses: actions/setup-node@v5
|
||||
with:
|
||||
node-version: 24.4.0
|
||||
cache: pnpm
|
||||
- run: pnpm install --frozen-lockfile
|
||||
- name: Apply guarded patch
|
||||
run: python .github/issue-416-round6.py
|
||||
- name: Format changed files
|
||||
run: pnpm exec biome check --write packages/server/src/utils/backups/utils.ts packages/server/src/utils/backups/redact.ts apps/dokploy/__test__/backups/redact-credentials.test.ts apps/dokploy/__test__/utils/backups.test.ts
|
||||
- name: Focused backup and security regressions
|
||||
run: pnpm --filter=dokploy exec vitest --config __test__/vitest.config.ts __test__/backups/redact-credentials.test.ts __test__/utils/backups.test.ts __test__/utils/issue-416-path-safety.test.ts --run
|
||||
- name: Typecheck
|
||||
run: pnpm typecheck
|
||||
- name: Server build
|
||||
run: pnpm server:build
|
||||
- name: Biome clean
|
||||
run: pnpm exec biome check packages/server/src/utils/backups/utils.ts packages/server/src/utils/backups/redact.ts apps/dokploy/__test__/backups/redact-credentials.test.ts apps/dokploy/__test__/utils/backups.test.ts
|
||||
- name: Verify invariants
|
||||
run: |
|
||||
grep -F -- '--ftp-no-check-certificate=false' packages/server/src/utils/backups/utils.ts
|
||||
grep -F -- '--no-check-certificate=false' packages/server/src/utils/backups/utils.ts
|
||||
grep -F 'fully redact shell-quote output' apps/dokploy/__test__/backups/redact-credentials.test.ts
|
||||
- name: Commit verified hardening
|
||||
run: |
|
||||
git config user.name "github-actions[bot]"
|
||||
git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
|
||||
git add packages/server/src/utils/backups/utils.ts packages/server/src/utils/backups/redact.ts apps/dokploy/__test__/backups/redact-credentials.test.ts apps/dokploy/__test__/utils/backups.test.ts
|
||||
if ! git diff --cached --quiet; then
|
||||
git commit -m "fix: harden rclone environment and credential redaction"
|
||||
git push origin HEAD:feat/issue-416-backup-destinations
|
||||
fi
|
||||
Loading…
Reference in New Issue
Block a user