cesnimda
87d44537b9
security.yml: gitleaks secret scan + NuGet/npm vulnerability gate on PRs and pushes to main/develop (detective backstop to the pre-commit hook). deploy-staging.yml: on merge to develop, re-verify then rebuild the isolated local staging stack (needs a self-hosted Windows runner). deploy-prod.yml: tag-gated production promotion (the tag is the approval), ready to activate once the Linux server + its runner exist. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
1.5 KiB
1.5 KiB
Changelog
All notable changes to InboxIntel are documented here. Format follows Keep a Changelog; versions follow Semantic Versioning. See docs/WORKFLOW.md.
Unreleased
Added
- CI/CD pipeline (
.gitea/workflows/):security(gitleaks secret scan + NuGet/npm vulnerability gate),deploy-staging(auto-redeploy local staging ondevelop),deploy-prod(tag-gated production promotion, inactive until the server exists). - Formal Git workflow & environment strategy (
docs/WORKFLOW.md). - Staging environment overlay (
docker-compose.staging.yml) — production-shaped Linux containers on Windows, isolated ports/volumes. - Version-controlled Git hooks (
scripts/git-hooks/) + installer (scripts/install-hooks.ps1): pre-commit secret/format checks, pre-push build+test gate. VERSIONfile as the single source of truth for the release number.
[0.1.0] — scaffold
Added
- .NET 8 Clean Architecture backend (Domain/Application/Infrastructure/Api) + React/Vite SPA.
- Docker Compose stack (Postgres 16, API, frontend, optional nginx proxy).
- Gitea Actions CI (backend build+test, frontend build) on
main/develop+ PRs. - Security hardening: encrypted OAuth tokens, EF global query filters (IDOR), loopback binds, non-root containers, SSRF egress guard.
- One-command deploy scripts (
deploy/up.ps1,deploy/up.sh).