Jens/MobilityOps
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
216 Commits 12 Branches 2 Tags
19df5f75080182c221cd9b669db5d9e7a8680313
Commit Graph
9 Commits
Author SHA1 Message Date
NuklearRabbit 19df5f7508 ci: keep one required pull-request gate
MobilityOps acceptance / backend (pull_request) Failing after 2m18s
Details
MobilityOps acceptance / frontend (pull_request) Successful in 29s
Details
MobilityOps acceptance / e2e (pull_request) Skipped
Details
2026-08-29 05:38:23 +02:00
NuklearRabbit 00191e9b54 M48: harden demo operations and offsite recovery
MobilityOps acceptance / backend (push) Failing after 20s
Details
MobilityOps acceptance / frontend (push) Successful in 28s
Details
MobilityOps acceptance / e2e (push) Skipped
Details
2026-08-21 22:17:49 +02:00
NuklearRabbit acd8b82b09 M44: harden release integrity and assurance
MobilityOps acceptance / backend (push) Failing after 20s
Details
MobilityOps acceptance / frontend (push) Successful in 26s
Details
MobilityOps acceptance / e2e (push) Skipped
Details
2026-08-21 18:32:02 +02:00
NuklearRabbit 24dcb3494c M41: harden trust boundaries and delivery
MobilityOps acceptance / backend (push) Failing after 47s
Details
MobilityOps acceptance / frontend (push) Successful in 29s
Details
MobilityOps acceptance / e2e (push) Skipped
Details
2026-08-21 17:06:59 +02:00
JensandClaude Fable 5 a830e8a2d0 ci(security): pin trivy-action to an existing tag (v0.30.0) so the gate can resolve on Gitea Actions
MobilityOps acceptance / backend (push) Failing after 33s
Details
MobilityOps acceptance / frontend (push) Successful in 33s
Details
MobilityOps acceptance / e2e (push) Skipped
Details 
The first real platform runs (2026-08-17, new instance runner) failed at
'Unable to resolve 0.30.0: reference not found' - the tag exists only as v0.30.0.
Where present, the trufflehog GitHub Action (which fails under the act runner) is
replaced by the pinned trufflehog binary in filesystem mode next to gitleaks.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-08-18 14:13:18 +02:00
NuklearRabbit ae39a8947f M39: harden application and acceptance gates
MobilityOps acceptance / backend (push) Failing after 45s
Details
MobilityOps acceptance / frontend (push) Successful in 32s
Details
MobilityOps acceptance / e2e (push) Skipped
Details
2026-08-17 03:17:44 +02:00
NuklearRabbit a9f48d6880 fix(security): add secret-scan step to backend CI job 
Backend job had static checks (ruff/mypy) and a dependency-vulnerability
gate but no secret scan; frontend had a dependency audit but no secret
scan either. Adds trufflehog once, on the backend job's full checkout,
covering the whole repository - the last gap for this repo to count as
fully-authored.
 2026-08-16 14:54:44 +02:00
NuklearRabbit 6859249570 fix(security): add backend dependency vulnerability gate to CI 
Backend CI had ruff/mypy static checks and a real pip-audit-equivalent
was missing; frontend already had npm audit, so backend was the only
side of this repo without any dependency-vulnerability gate (partial
coverage). Adds trivy-action fs scoped to backend/, HIGH/CRITICAL only,
consistent with this security programme's gate convention elsewhere.
Verified clean (0 HIGH/CRITICAL) against backend/pyproject.toml before
wiring in, so the gate does not immediately fail CI.
 2026-08-16 04:41:07 +02:00
NuklearRabbit 686795a452 M16: isolate acceptance and harden readiness 2026-08-10 12:08:42 +02:00