PersonalBlog

Fabrika/PersonalBlog

Fork 1

T

implementer 10ea1ef3db

CI / Stage 1 — Frozen lockfile install (E00-S05-T01) (pull_request) Successful in 4m11s

Details

CI / Stage 2 — Typecheck (E00-S05-T01) (pull_request) Successful in 1m24s

Details

CI / Stage 3 — Formatting/lint policy (E00-S05-T01) (pull_request) Successful in 51s

Details

CI / Stage 4 — Unit tests (E00-S05-T01) (pull_request) Successful in 1m49s

Details

CI / Stage 5 — Architecture tests (E00-S05-T01) (pull_request) Successful in 4m2s

Details

CI / Stage 6 — PostgreSQL integration tests (E00-S05-T01) (pull_request) Successful in 1m15s

Details

CI / Stage 7 — Build the admin and server applications (E00-S05-T01) (pull_request) Successful in 1m43s

Details

test: lock in the action SHA pins and workflow-level permissions with the ci-stages suite (E00-S05-T01)

- assertHardening: every uses: ref is a full 40-char commit SHA equal to the
  committed PINNED_ACTIONS table (no floating tags) and the workflow declares
  a top-level permissions: contents: read block
- mutation probes: reverting a pin to @v4, swapping a pinned SHA or removing
  the permissions block all fail

2026-08-30 06:29:43 +00:00

.gitea/workflows

ci: pin third-party actions to full commit SHAs and declare minimal workflow permissions (E00-S05-T01)

2026-08-30 06:29:43 +00:00

apps/server

feat: HOST validated at the adapter boundary and controls the actual bind interface (E00-S04-T04)

2026-08-30 04:41:53 +00:00

docs/development

docs: document the lint command and the CI quality baseline stages (E00-S05-T01)

2026-08-30 06:12:25 +00:00

extensions/example

feat: add root build/test/typecheck scripts (E00-S01-T05)