implementer b3ad55efe8 test: lock in no-secrets-in-image criteria (E00-S02-T08) ...

tests/secrets-not-embedded.test.mjs: static assertions that the Dockerfile
embeds no secrets (no secret-bearing ARG/ENV, no secret-path or blanket COPY)
and .dockerignore excludes env/credential files; non-vacuous mutation probes
for every assertion; Docker-gated probe that builds the image with a marker
env file in the context and scans every layer + image config for secret
values.

2026-08-29 01:28:26 +00:00

.gitea/workflows

chore: bootstrap pnpm workspace and package manifests

2026-08-27 23:07:58 +00:00

apps/server

feat: keep secrets out of the app image (E00-S02-T08)

2026-08-29 01:28:26 +00:00

docs/development

feat: app health endpoint succeeds (E00-S02-T03)

2026-08-29 00:21:34 +00:00

extensions/example

feat: add root build/test/typecheck scripts (E00-S01-T05)

2026-08-28 08:39:13 +00:00

packages/core

feat: add root build/test/typecheck scripts (E00-S01-T05)

2026-08-28 08:39:13 +00:00

tests

test: lock in no-secrets-in-image criteria (E00-S02-T08)

2026-08-29 01:28:26 +00:00

.dockerignore

feat: keep secrets out of the app image (E00-S02-T08)

2026-08-29 01:28:26 +00:00

.gitignore

chore: bootstrap pnpm workspace and package manifests

2026-08-27 23:07:58 +00:00

compose.yaml

feat: keep secrets out of the app image (E00-S02-T08)

2026-08-29 01:28:26 +00:00

dependency-boundaries.json

feat: add dependency-boundary rule and architecture import test (E00-S01-T04)

2026-08-28 08:30:34 +00:00

package.json

feat: restrict Node engine to 24.x (E00-S01-T08)

2026-08-28 09:15:09 +00:00

pnpm-lock.yaml

feat: app health endpoint succeeds (E00-S02-T03)

2026-08-29 00:21:34 +00:00

pnpm-workspace.yaml

feat: restrict Node engine to 24.x (E00-S01-T08)

2026-08-28 09:15:09 +00:00

tsconfig.base.json

feat: add strict tsconfig.base.json shared by all packages (E00-S01-T02)

2026-08-28 00:00:51 +00:00

S

Description

No description provided

857 KiB

Languages

JavaScript 89%

TypeScript 9.9%

Dockerfile 1.1%