From b95d4e6a24535ba8c6e3d43a8fb45f76702c15c8 Mon Sep 17 00:00:00 2001
From: Furox <real.furkannn@gmail.com>
Date: Sat, 5 Sep 2026 01:12:45 +0300
Subject: [PATCH] chore: run issue 416 audit validation

---
 .../workflows/issue-416-audit-validation.yml  | 76 +++++++++++++++++++
 1 file changed, 76 insertions(+)
 create mode 100644 .github/workflows/issue-416-audit-validation.yml

diff --git a/.github/workflows/issue-416-audit-validation.yml b/.github/workflows/issue-416-audit-validation.yml
new file mode 100644
index 000000000..a06796e76
--- /dev/null
+++ b/.github/workflows/issue-416-audit-validation.yml
@@ -0,0 +1,76 @@
+name: Issue 416 Audit Validation
+
+on:
+  push:
+    branches: ["feat/issue-416-backup-destinations"]
+    paths:
+      - "packages/server/src/utils/backups/utils.ts"
+      - "packages/server/src/utils/backups/redact.ts"
+      - "apps/dokploy/__test__/utils/issue-416-path-safety.test.ts"
+      - ".github/workflows/issue-416-audit-validation.yml"
+
+permissions:
+  contents: write
+
+jobs:
+  validate:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+      - uses: pnpm/action-setup@v5
+        with:
+          version: 10.22.0
+      - uses: actions/setup-node@v5
+        with:
+          node-version: 24.4.0
+          cache: pnpm
+      - run: pnpm install --frozen-lockfile
+      - name: Apply Biome formatting
+        run: |
+          pnpm exec biome check --write \
+            packages/server/src/utils/backups/utils.ts \
+            packages/server/src/utils/backups/redact.ts \
+            apps/dokploy/__test__/utils/issue-416-path-safety.test.ts
+      - name: Commit formatter changes if needed
+        run: |
+          if ! git diff --quiet; then
+            git config user.name "github-actions[bot]"
+            git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+            git add \
+              packages/server/src/utils/backups/utils.ts \
+              packages/server/src/utils/backups/redact.ts \
+              apps/dokploy/__test__/utils/issue-416-path-safety.test.ts
+            git commit -m "style: apply audit formatting"
+            git push
+          fi
+      - name: Build server package
+        run: pnpm server:build
+      - name: Typecheck workspaces
+        run: pnpm typecheck
+      - name: Reproduce and verify issue 416 security cases
+        run: |
+          pnpm --filter=dokploy exec vitest --config __test__/vitest.config.ts \
+            __test__/utils/backups.test.ts \
+            __test__/backups/redact-credentials.test.ts \
+            __test__/utils/issue-416-path-safety.test.ts \
+            --run
+      - name: Verify Biome is clean
+        run: |
+          pnpm exec biome check \
+            packages/server/src/utils/backups/utils.ts \
+            packages/server/src/utils/backups/redact.ts \
+            apps/dokploy/__test__/utils/issue-416-path-safety.test.ts
+      - name: Run full test suite required by fix-issue skill
+        id: full_tests
+        continue-on-error: true
+        shell: bash
+        run: |
+          set -o pipefail
+          pnpm test 2>&1 | tee full-test.log
+      - name: Report full-suite result
+        if: always()
+        run: |
+          echo "Full pnpm test outcome: ${{ steps.full_tests.outcome }}"
+          if [ -f full-test.log ]; then
+            tail -n 120 full-test.log
+          fi
\ No newline at end of file