c5c2c0e81c
Fix security vulnerabilities and add early dependency scanning
...
CI/CD Pipeline - Apartment Dashboard / Scan Dependencies (push) Successful in 44s
CI/CD Pipeline - Apartment Dashboard / Run Linter (push) Successful in 10m6s
CI/CD Pipeline - Apartment Dashboard / Build & Push Image (push) Failing after 2m36s
CI/CD Pipeline - Apartment Dashboard / Deploy to Production (push) Has been skipped
- Add apk upgrade to nginx:alpine to fix libpng vulnerabilities
- Add scan-deps job that runs in parallel with lint
2026-01-23 16:10:52 -07:00
78c5bd1c51
Fix Trivy action compatibility with Gitea runner
...
CI/CD Pipeline - Apartment Dashboard / Build & Push Image (push) Has been cancelled
CI/CD Pipeline - Apartment Dashboard / Deploy to Production (push) Has been cancelled
CI/CD Pipeline - Apartment Dashboard / Run Linter (push) Has been cancelled
Replace aquasecurity/trivy-action with direct Trivy installation
to avoid node24 compatibility issues with act-based runners
2026-01-23 15:22:23 -07:00
94e37f082d
Add image signing, SBOM generation, and vulnerability scanning to CI/CD
...
CI/CD Pipeline - Apartment Dashboard / Run Linter (push) Successful in 9m33s
CI/CD Pipeline - Apartment Dashboard / Deploy to Production (push) Has been cancelled
CI/CD Pipeline - Apartment Dashboard / Build & Push Image (push) Has been cancelled
- Add Trivy vulnerability scanning (fails on CRITICAL/HIGH)
- Add Syft SBOM generation in SPDX format
- Add Cosign image signing using digest
- Attach SBOM attestation to image in Harbor
- Add cosign.pub for signature verification
2026-01-23 14:55:06 -07:00
de08b3ddfa
Add CI/CD pipeline with Harbor registry and SSH deployment
...
CI/CD Pipeline - Apartment Dashboard / Run Linter (push) Failing after 4m52s
CI/CD Pipeline - Apartment Dashboard / Build & Push Image (push) Has been skipped
CI/CD Pipeline - Apartment Dashboard / Deploy to Production (push) Has been skipped
- Replace local deployment with proper CI/CD pipeline
- Add lint job as first stage (fail-fast)
- Build and push Docker image to Harbor registry
- Deploy via SSH with image tag from commit SHA
- Add deployment verification with health check
- Update Dockerfile to Node 20 and fix npm ci
- Support IMAGE variable in docker-compose for deployments
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com >
2026-01-22 16:59:51 -07:00
29622f54ef
Add deployment workflow
Deploy Apartment Dashboard / deploy (push) Failing after 4m57s
2025-07-15 16:35:58 -06:00
