suculent / thinx-device-api
73%
master: 14%

LAST BUILD BRANCH: thinx-staging
DEFAULT BRANCH: master
Repo Added
Files 93
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH main
branch: main
CHANGE BRANCH
x

coverage: 72.743% (+0.04%) from 72.706%
ef381fe4-eef8-4554-8b26-6c4b634011ec

push

circleci

web-flow 
Security fixes (#577)

* fix(test): revoke GitHub SSH keys after integration tests

* fix(deps): clear npm audit findings in the API

- npm audit fix: body-parser 2.4.0/1.20.9, fast-uri 3.1.9, follow-redirects
  1.16.2, ip-address 10.7.5, node-forge 1.4.2, qs, undici 7.30.1
- node-forge ^1.4.2 and serialize-javascript override ^7.1.3, so a fresh
  resolution cannot fall back below the fixed versions
- base submodule: same fixes for the base package set

npm audit: 9 -> 0 (lockfile and fresh resolution, with and without dev).

* build: install API and Vue console dependencies from tracked lockfiles

The API image copied only package.json (package-lock.json was even in
.dockerignore) and ran `npm install`, so it shipped whatever the ranges
resolved to on build day instead of the audited lockfile. Dockerfile and
Dockerfile.test now copy package-lock.json and run `npm ci`.

services/console: dependency upgrades (gulp-inject-envs removed, unused Vue
deps dropped, yarn resolutions) and vue/yarn.lock tracked; test-vue-console
installs with `yarn install --frozen-lockfile`.

* ci: stop deleting package-lock.json before the API test and image builds

The test job and build-api-cloud both ran `rm -rf ./package-lock.json`
before building, so the new `COPY package.json package-lock.json` in
Dockerfile/Dockerfile.test failed with "/package-lock.json: not found".

* fix(nodemcu-docker-build): security fix

5327 of 7819 branches covered (68.13%)

Branch coverage included in aggregate %.

23 of 23 new or added lines in 1 file covered. (100.0%)

8057 of 10580 relevant lines covered (76.15%)

67.81 hits per line

Relevant lines Covered
10580 RELEVANT LINES 8057 COVERED LINES
67.81 HITS PER LINE
Source Files on main

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
ef381fe4... main Security fixes (#577) * fix(test): revoke GitHub SSH keys after integration tests * fix(deps): clear npm audit findings in the API - npm audit fix: body-parser 2.4.0/1.20.9, fast-uri 3.1.9, follow-redirects 1.16.2, ip-address 10.7.5, node-for... push web-flow circleci
72.74
088e11c9... main fix(security): update undici from 7.30.0 to 8.12.2 (#576) Co-authored-by: aikido-autofix[bot] <119856028+aikido-autofix[bot]@users.noreply.github.com> push web-flow circleci
72.71
c31817e2... main Merge branch 'thinx-staging' * thinx-staging: (724 commits) docs(agents): point to the private deployment notes in thinx-swarm docs(agents): standing rules moved over from session memory docs(planning): track the leftover review record, ign... push suculent circleci
72.71
5ab43754... main chore(console): submodule sync + docs push suculent circleci
72.73
a3eefa17... main Release 1.19.0: log-injection guard, secret scanning, Vue console without Maps (#575) * docs(46-06): record CR-01 and WR-05 fixed in the review disposition Claude-Session: https://claude.ai/code/session_014ZVXKS2uhAMrLdLzKmNufX * chore(46): bum... push web-flow circleci
72.71
7155a4e7... main Release v1.18.4749: Console Improvements + Deploy-Key OpenBao Transit (#574) Squash of thinx-staging at e59b2684 (v1.17 Deploy-Key OpenBao Transit, v1.18 Console Improvements, CodeQL high fixes). Full history stays on thinx-staging. Claude-Sessi... push web-flow circleci
72.66
1a9e85b3... main component check and latest changes (#573) * docs(state): docker-swarm.yml env parity restored * docs(state): thinx-staging pushed, CI rollout pending * docs(state): CI green and thinx_api rollout verified after thinx-staging push * fix(31): WR... push web-flow circleci
71.16
f1475eab... main Merge pull request #571 from suculent/thinx-staging Release v1.14.4031: transfer in-progress gate fix + CodeQL log hardening push web-flow circleci
71.33
85e9710b... main Merge pull request #570 from suculent/thinx-staging Release v1.14.4031: Backlog & Hardening Sweep push web-flow circleci
71.38
aaa76586... main Merge pull request #569 from suculent/thinx-staging Release: thinx-staging to main (includes v1.14 Phase 22 CI and SAST baseline) push web-flow circleci
47.82
See All Builds (13359)