c076e410ad
Update appleboy/ssh-action from v1.0.3 to v1.2.4
...
CI/CD Pipeline - Apartment Dashboard / Run Linter (push) Successful in 13s
CI/CD Pipeline - Apartment Dashboard / Scan Dependencies (push) Successful in 12s
CI/CD Pipeline - Apartment Dashboard / Build & Push Image (push) Successful in 1m0s
CI/CD Pipeline - Apartment Dashboard / Deploy to Production (push) Successful in 20s
Fix deploy pipeline failure caused by 502 error when cloning
the old v1.0.3 ref from GitHub.
2026-02-09 12:17:15 -07:00
bd537a5e19
Re-enable security scanning and replace anchore/sbom-action with Syft CLI
...
CI/CD Pipeline - Apartment Dashboard / Run Linter (push) Successful in 12s
CI/CD Pipeline - Apartment Dashboard / Scan Dependencies (push) Successful in 15s
CI/CD Pipeline - Apartment Dashboard / Deploy to Production (push) Successful in 14s
CI/CD Pipeline - Apartment Dashboard / Build & Push Image (push) Successful in 58s
Uncomment Trivy vulnerability scanning, Cosign image signing, and SBOM
attestation steps that were temporarily disabled. Replace the
anchore/sbom-action GitHub Action with direct Syft CLI install to avoid
the upload-artifact@v4 incompatibility with GHES.
2026-02-08 20:20:42 -07:00
f0b1ea3e05
Update .github/workflows/deploy.yml
CI/CD Pipeline - Apartment Dashboard / Run Linter (push) Successful in 12s
CI/CD Pipeline - Apartment Dashboard / Scan Dependencies (push) Successful in 12s
CI/CD Pipeline - Apartment Dashboard / Build & Push Image (push) Successful in 32s
CI/CD Pipeline - Apartment Dashboard / Deploy to Production (push) Successful in 14s
2026-02-08 19:54:43 -07:00
c5c2c0e81c
Fix security vulnerabilities and add early dependency scanning
...
CI/CD Pipeline - Apartment Dashboard / Scan Dependencies (push) Successful in 44s
CI/CD Pipeline - Apartment Dashboard / Run Linter (push) Successful in 10m6s
CI/CD Pipeline - Apartment Dashboard / Build & Push Image (push) Failing after 2m36s
CI/CD Pipeline - Apartment Dashboard / Deploy to Production (push) Has been skipped
- Add apk upgrade to nginx:alpine to fix libpng vulnerabilities
- Add scan-deps job that runs in parallel with lint
2026-01-23 16:10:52 -07:00
78c5bd1c51
Fix Trivy action compatibility with Gitea runner
...
CI/CD Pipeline - Apartment Dashboard / Build & Push Image (push) Has been cancelled
CI/CD Pipeline - Apartment Dashboard / Deploy to Production (push) Has been cancelled
CI/CD Pipeline - Apartment Dashboard / Run Linter (push) Has been cancelled
Replace aquasecurity/trivy-action with direct Trivy installation
to avoid node24 compatibility issues with act-based runners
2026-01-23 15:22:23 -07:00
94e37f082d
Add image signing, SBOM generation, and vulnerability scanning to CI/CD
...
CI/CD Pipeline - Apartment Dashboard / Run Linter (push) Successful in 9m33s
CI/CD Pipeline - Apartment Dashboard / Deploy to Production (push) Has been cancelled
CI/CD Pipeline - Apartment Dashboard / Build & Push Image (push) Has been cancelled
- Add Trivy vulnerability scanning (fails on CRITICAL/HIGH)
- Add Syft SBOM generation in SPDX format
- Add Cosign image signing using digest
- Attach SBOM attestation to image in Harbor
- Add cosign.pub for signature verification
2026-01-23 14:55:06 -07:00
de08b3ddfa
Add CI/CD pipeline with Harbor registry and SSH deployment
...
CI/CD Pipeline - Apartment Dashboard / Run Linter (push) Failing after 4m52s
CI/CD Pipeline - Apartment Dashboard / Build & Push Image (push) Has been skipped
CI/CD Pipeline - Apartment Dashboard / Deploy to Production (push) Has been skipped
- Replace local deployment with proper CI/CD pipeline
- Add lint job as first stage (fail-fast)
- Build and push Docker image to Harbor registry
- Deploy via SSH with image tag from commit SHA
- Add deployment verification with health check
- Update Dockerfile to Node 20 and fix npm ci
- Support IMAGE variable in docker-compose for deployments
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com >
2026-01-22 16:59:51 -07:00
29622f54ef
Add deployment workflow
Deploy Apartment Dashboard / deploy (push) Failing after 4m57s
2025-07-15 16:35:58 -06:00
