Commit graph

7 commits

Author SHA1 Message Date
Stefano Bertelli
31b31b7946 ci: exclude weak-sensitive-data-hashing rule from CodeQL
API token hashing uses HMAC-SHA256 on high-entropy tokens (256-bit
random), not passwords. Actual password hashing uses bcrypt.
2026-04-03 00:55:01 -05:00
Stefano Bertelli
aa38c3797e ci: add security policy, CodeQL scanning, enable Dependabot 2026-04-03 00:35:42 -05:00
Stefano Bertelli
87989b899d fix(ci): add contents:write permission for release job to push tags 2026-04-03 00:03:44 -05:00
Stefano Bertelli
bde7a82224 fix(ci): remove container from release job, use ubuntu-latest directly 2026-04-02 23:58:22 -05:00
Stefano Bertelli
aaddb319bc fix(ci): add valkey, mock-oidc services and MOCK_OIDC_HOST env for e2e tests 2026-04-02 23:52:01 -05:00
Stefano Bertelli
b3f23fd00d fix(ci): install Playwright browsers before e2e tests 2026-04-02 23:39:08 -05:00
Stefano Bertelli
c94b2ed76c ci: add GitHub Actions workflows mirroring Forgejo CI/CD 2026-04-02 23:35:56 -05:00