 embeddevio
|
60521b1d7b
|
ci(verify): токен для registry — secret REGISTRY_TOKEN с fallback на GITHUB_TOKEN
contract-openapi / openapi-contract (push) Failing after 31s
contract-openapi / ts-client-is-current (push) Failing after 42s
ci / lint (push) Successful in 42s
ci / unit (push) Successful in 48s
ci / security (push) Successful in 4m4s
ci / build (push) Successful in 39s
ci / image-scan (push) Failing after 4s
ci / push (push) Has been skipped
Refs #17
|
2026-10-28 22:32:42 +03:00 |
|
|
embeddevio
|
10ce7b8483
|
ci(verify): trivy через образ aquasec/trivy + кэш БД
ci / lint (push) Successful in 36s
contract-openapi / openapi-contract (push) Failing after 31s
contract-openapi / ts-client-is-current (push) Failing after 41s
ci / unit (push) Successful in 54s
ci / security (push) Successful in 1m57s
ci / build (push) Successful in 38s
ci / image-scan (push) Failing after 27s
ci / push (push) Has been skipped
Refs #17
|
2026-10-28 22:31:59 +03:00 |
|
|
embeddevio
|
56979d9912
|
ci(verify): trivy из релизного tarball, версия 0.76.1
ci / lint (push) Successful in 45s
contract-openapi / openapi-contract (push) Failing after 40s
contract-openapi / ts-client-is-current (push) Failing after 35s
ci / unit (push) Successful in 44s
ci / security (push) Successful in 1m10s
ci / build (push) Successful in 34s
ci / image-scan (push) Failing after 52s
ci / push (push) Has been skipped
Refs #17
|
2026-10-28 22:21:04 +03:00 |
|
|
embeddevio
|
a941525f2e
|
ci: тесты требуют requirements-contract.txt; явный guard на отсутствие deploy/Dockerfile
ci / lint (push) Successful in 42s
contract-openapi / openapi-contract (push) Failing after 41s
contract-openapi / ts-client-is-current (push) Failing after 31s
ci / unit (push) Successful in 41s
ci / security (push) Successful in 1m19s
ci / build (push) Has been skipped
ci / image-scan (push) Has been skipped
ci / push (push) Has been skipped
Refs #17
|
2026-10-28 22:01:14 +03:00 |
|
|
embeddevio
|
b13f5e8ac5
|
ci: пайплайн с гейтами (lint, unit+coverage>=70%, security, build, image-scan, push staging-<sha>)
contract-openapi / openapi-contract (push) Failing after 0s
contract-openapi / ts-client-is-current (push) Failing after 1s
ci / lint (push) Successful in 7m38s
ci / unit (push) Failing after 1m3s
ci / security (push) Successful in 2m19s
ci / build (push) Has been skipped
ci / image-scan (push) Has been skipped
ci / push (push) Has been skipped
Refs #17, Refs #15
- lint: ruff check/format + mypy strict
- unit: pytest с --cov-fail-under=70, артефакты coverage.xml + htmlcov
- security: bandit -lll (HIGH) + pip-audit, артефакты bandit/pip-audit
- build: docker build deploy/Dockerfile -> staging-<sha> (активируется после merge #18)
- image-scan: trivy HIGH/CRITICAL --exit-code 1
- push: docker login + push в registry 192.168.1.111:3000
Обход дефекта Gitea git-http (upload-pack отдаёт пустой pack): fallback
на archive/<sha>.tar.gz, actions/checkout остаётся основным путём.
|
2026-10-28 21:47:05 +03:00 |
|