implementer b3ad55efe8 test: lock in no-secrets-in-image criteria (E00-S02-T08) ...

tests/secrets-not-embedded.test.mjs: static assertions that the Dockerfile
embeds no secrets (no secret-bearing ARG/ENV, no secret-path or blanket COPY)
and .dockerignore excludes env/credential files; non-vacuous mutation probes
for every assertion; Docker-gated probe that builds the image with a marker
env file in the context and scans every layer + image config for secret
values.

2026-08-29 01:28:26 +00:00

..

architecture-import.test.mjs

feat: add dependency-boundary rule and architecture import test (E00-S01-T04)

2026-08-28 08:30:34 +00:00

build-targets.test.mjs

test: lock in amd64/arm64 build target criteria (E00-S02-T07)

2026-08-29 01:13:30 +00:00

compose-config.test.mjs

test: lock in DB volume persistence criteria (E00-S02-T04)

2026-08-29 00:32:15 +00:00

frozen-install.test.mjs

fix: handle quoted scoped keys in frozen-install probe (E00-S02-T03)

2026-08-29 00:23:27 +00:00

health-endpoint.test.mjs

test: lock in app health endpoint criteria (E00-S02-T03)

2026-08-29 00:21:34 +00:00

no-core-extension-imports.test.mjs

test: lock in no core package imports a concrete extension (E00-S01-T14)

2026-08-28 23:24:02 +00:00

node-engine.test.mjs

test: lock in Node 24.x engine restriction (E00-S01-T08)

2026-08-28 09:15:09 +00:00

non-root-user.test.mjs

test: lock in non-root execution criteria (E00-S02-T05)

2026-08-29 00:41:16 +00:00

readonly-rootfs.test.mjs

test: lock in read-only rootfs criteria (E00-S02-T06)

2026-08-29 00:53:40 +00:00

root-commands.test.mjs

test: lock in root build/test/typecheck commands (E00-S01-T12)

2026-08-28 22:56:48 +00:00

secrets-not-embedded.test.mjs

test: lock in no-secrets-in-image criteria (E00-S02-T08)

2026-08-29 01:28:26 +00:00

strict-tsconfig.test.mjs

test: lock in strict base tsconfig for all packages (E00-S01-T10)

2026-08-28 21:46:57 +00:00

typescript-pin.test.mjs

test: lock in TypeScript 6.0.3 exact dependency (E00-S01-T09)

2026-08-28 21:33:52 +00:00

workspace-config.test.mjs

test: lock in committed pnpm 11.23.0 workspace config (E00-S01-T07)

2026-08-28 09:03:50 +00:00

workspace-layout.test.mjs

test: lock in apps/packages/extensions workspace layout separation (E00-S01-T11)

2026-08-28 22:43:01 +00:00