From 32c56d594f1fc9ce376b2c4b2bf6ae0628f64686 Mon Sep 17 00:00:00 2001 From: Furox Date: Sat, 5 Sep 2026 02:09:24 +0300 Subject: [PATCH] chore: remove temporary issue 416 security workflow --- .../workflows/issue-416-security-round6.yml | 53 ------------------- 1 file changed, 53 deletions(-) delete mode 100644 .github/workflows/issue-416-security-round6.yml diff --git a/.github/workflows/issue-416-security-round6.yml b/.github/workflows/issue-416-security-round6.yml deleted file mode 100644 index 63dbc6a1b..000000000 --- a/.github/workflows/issue-416-security-round6.yml +++ /dev/null @@ -1,53 +0,0 @@ -name: Issue 416 Security Round 6 - -on: - push: - branches: - - feat/issue-416-backup-destinations - paths: - - .github/workflows/issue-416-security-round6.yml - -permissions: - contents: write - -jobs: - fix-and-verify: - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@v5 - with: - ref: feat/issue-416-backup-destinations - - uses: pnpm/action-setup@v5 - with: - version: 10.22.0 - - uses: actions/setup-node@v5 - with: - node-version: 24.4.0 - cache: pnpm - - run: pnpm install --frozen-lockfile - - name: Apply guarded patch - run: python .github/issue-416-round6.py - - name: Format changed files - run: pnpm exec biome check --write packages/server/src/utils/backups/utils.ts packages/server/src/utils/backups/redact.ts apps/dokploy/__test__/backups/redact-credentials.test.ts apps/dokploy/__test__/utils/backups.test.ts - - name: Focused backup and security regressions - run: pnpm --filter=dokploy exec vitest --config __test__/vitest.config.ts __test__/backups/redact-credentials.test.ts __test__/utils/backups.test.ts __test__/utils/issue-416-path-safety.test.ts --run - - name: Typecheck - run: pnpm typecheck - - name: Server build - run: pnpm server:build - - name: Biome clean - run: pnpm exec biome check packages/server/src/utils/backups/utils.ts packages/server/src/utils/backups/redact.ts apps/dokploy/__test__/backups/redact-credentials.test.ts apps/dokploy/__test__/utils/backups.test.ts - - name: Verify invariants - run: | - grep -F -- '--ftp-no-check-certificate=false' packages/server/src/utils/backups/utils.ts - grep -F -- '--no-check-certificate=false' packages/server/src/utils/backups/utils.ts - grep -F 'fully redact shell-quote output' apps/dokploy/__test__/backups/redact-credentials.test.ts - - name: Commit verified hardening - run: | - git config user.name "github-actions[bot]" - git config user.email "41898282+github-actions[bot]@users.noreply.github.com" - git add packages/server/src/utils/backups/utils.ts packages/server/src/utils/backups/redact.ts apps/dokploy/__test__/backups/redact-credentials.test.ts apps/dokploy/__test__/utils/backups.test.ts - if ! git diff --cached --quiet; then - git commit -m "fix: harden rclone environment and credential redaction" - git push origin HEAD:feat/issue-416-backup-destinations - fi