PersonalBlog

T

CI / Frozen lockfile install (pull_request) Successful in 51s

Details

test: lock in non-root execution criteria (E00-S02-T05)

tests/non-root-user.test.mjs locks in both acceptance criteria: a static
assertion that the Dockerfile runtime stage declares a non-root USER (not
root/uid 0, 'USER node' exactly), non-vacuous mutation probes, and a
Docker-gated real-stack probe that starts the stack and asserts 'id -u' and
'id -un' inside the running app container report a non-root user, with the
health endpoint still answering as a regression guard.

2026-08-29 00:41:16 +00:00

.gitea/workflows

chore: bootstrap pnpm workspace and package manifests

2026-08-27 23:07:58 +00:00

apps/server

feat: run the app image as a non-root user (E00-S02-T05)

2026-08-29 00:41:10 +00:00

docs/development

feat: app health endpoint succeeds (E00-S02-T03)

2026-08-29 00:21:34 +00:00

extensions/example

feat: add root build/test/typecheck scripts (E00-S01-T05)