chore: remove temporary issue 416 security workflow

This commit is contained in:
Furox 2026-09-05 02:09:24 +03:00 committed by Furox88
parent 9fa33160cf
commit 32c56d594f

View File

@ -1,53 +0,0 @@
name: Issue 416 Security Round 6
on:
push:
branches:
- feat/issue-416-backup-destinations
paths:
- .github/workflows/issue-416-security-round6.yml
permissions:
contents: write
jobs:
fix-and-verify:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v5
with:
ref: feat/issue-416-backup-destinations
- uses: pnpm/action-setup@v5
with:
version: 10.22.0
- uses: actions/setup-node@v5
with:
node-version: 24.4.0
cache: pnpm
- run: pnpm install --frozen-lockfile
- name: Apply guarded patch
run: python .github/issue-416-round6.py
- name: Format changed files
run: pnpm exec biome check --write packages/server/src/utils/backups/utils.ts packages/server/src/utils/backups/redact.ts apps/dokploy/__test__/backups/redact-credentials.test.ts apps/dokploy/__test__/utils/backups.test.ts
- name: Focused backup and security regressions
run: pnpm --filter=dokploy exec vitest --config __test__/vitest.config.ts __test__/backups/redact-credentials.test.ts __test__/utils/backups.test.ts __test__/utils/issue-416-path-safety.test.ts --run
- name: Typecheck
run: pnpm typecheck
- name: Server build
run: pnpm server:build
- name: Biome clean
run: pnpm exec biome check packages/server/src/utils/backups/utils.ts packages/server/src/utils/backups/redact.ts apps/dokploy/__test__/backups/redact-credentials.test.ts apps/dokploy/__test__/utils/backups.test.ts
- name: Verify invariants
run: |
grep -F -- '--ftp-no-check-certificate=false' packages/server/src/utils/backups/utils.ts
grep -F -- '--no-check-certificate=false' packages/server/src/utils/backups/utils.ts
grep -F 'fully redact shell-quote output' apps/dokploy/__test__/backups/redact-credentials.test.ts
- name: Commit verified hardening
run: |
git config user.name "github-actions[bot]"
git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
git add packages/server/src/utils/backups/utils.ts packages/server/src/utils/backups/redact.ts apps/dokploy/__test__/backups/redact-credentials.test.ts apps/dokploy/__test__/utils/backups.test.ts
if ! git diff --cached --quiet; then
git commit -m "fix: harden rclone environment and credential redaction"
git push origin HEAD:feat/issue-416-backup-destinations
fi