Дмитрий 89f124cd27 fix(artisan-run): pass command via base64 to avoid SSH shell-quote space loss (first dry-run showed 'supplier:rekey-orphansdry-run' — space eaten by printf %q + outer double-quote interaction; base64 encode locally + decode on prod side preserves spaces and special chars cleanly)

2026-05-29 05:13:14 +03:00

..

a11y.yml

feat(a11y): migrate Pa11y scope from handoff prototypes to live Vue app

2026-05-14 08:25:14 +03:00

artisan-run.yml

fix(artisan-run): pass command via base64 to avoid SSH shell-quote space loss (first dry-run showed 'supplier:rekey-orphansdry-run' — space eaten by printf %q + outer double-quote interaction; base64 encode locally + decode on prod side preserves spaces and special chars cleanly)

2026-05-29 05:13:14 +03:00

brain-l1-watcher-weekly.yml

feat(controller): C1 l1-watcher — settings.json ↔ Tooling drift detector

2026-05-19 06:31:18 +03:00

dependency-check.yml

fix(configs): Windows-fix format:sql:check + lychee/pa11y/composer/ESLint hygiene + npm-outdated CI (audit P0-03 + 5 P1/O)

2026-05-09 18:31:17 +03:00

deploy.yml

fix(ci/deploy): drop ON CONFLICT on migrations marker INSERT (table has no UNIQUE)

2026-05-28 12:38:52 +03:00

sast.yml

feat(ci): Semgrep SAST workflow — push/PR to main (#25)

2026-05-10 08:40:52 +03:00

ssh-diagnose.yml

ci(ssh-diagnose): add round 2 — show sshd_config.d/01-claude.conf, full nftables ruleset, ssh.service journal, fail2ban jail.d content, recidive jail check (round 1 showed dev IP not in fail2ban banlist, INPUT policy ACCEPT — narrowing to 01-claude.conf restriction or nftables f2b-table; recidive jail can persist bans beyond regular sshd bantime)

2026-05-29 04:47:10 +03:00

trivy.yml

feat(tooling): Trivy CI workflow prep — disabled until YC Docker (#26)

2026-05-10 08:45:17 +03:00