Дмитрий ea7cc84a37 ci: stage5 day-1 investigation workflow — diagnose audit:verify-chains failures + failed_webhook_jobs 163k spike (one-shot read-only, hardcoded SQL on incidents_log/failed_jobs/failed_webhook_jobs + direct audit:verify-chains -v artisan call)

2026-05-29 06:24:30 +03:00

..

a11y.yml

feat(a11y): migrate Pa11y scope from handoff prototypes to live Vue app

2026-05-14 08:25:14 +03:00

artisan-run.yml

feat(stage5): daily monitor workflow + remove non-existent partitions:list from artisan-run whitelist + checklist refinement (GitHub-cron 06:00 UTC daily 29.05-04.06 runs scheduler:check-heartbeats + incidents:watch-failures + migrate:status + 4 SQL signals from incidents_log/project_routing_snapshots/failed_webhook_jobs/scheduler_heartbeats; window auto-stops after 2026-06-05; result to job summary + artifact)

2026-05-29 05:42:30 +03:00

brain-l1-watcher-weekly.yml

feat(controller): C1 l1-watcher — settings.json ↔ Tooling drift detector

2026-05-19 06:31:18 +03:00

dependency-check.yml

fix(configs): Windows-fix format:sql:check + lychee/pa11y/composer/ESLint hygiene + npm-outdated CI (audit P0-03 + 5 P1/O)

2026-05-09 18:31:17 +03:00

deploy.yml

fix(ci/deploy): drop ON CONFLICT on migrations marker INSERT (table has no UNIQUE)

2026-05-28 12:38:52 +03:00

sast.yml

feat(ci): Semgrep SAST workflow — push/PR to main (#25)

2026-05-10 08:40:52 +03:00

ssh-diagnose.yml

ci(ssh-diagnose): add round 2 — show sshd_config.d/01-claude.conf, full nftables ruleset, ssh.service journal, fail2ban jail.d content, recidive jail check (round 1 showed dev IP not in fail2ban banlist, INPUT policy ACCEPT — narrowing to 01-claude.conf restriction or nftables f2b-table; recidive jail can persist bans beyond regular sshd bantime)

2026-05-29 04:47:10 +03:00

stage5-daily-monitor.yml

feat(stage5): daily monitor workflow + remove non-existent partitions:list from artisan-run whitelist + checklist refinement (GitHub-cron 06:00 UTC daily 29.05-04.06 runs scheduler:check-heartbeats + incidents:watch-failures + migrate:status + 4 SQL signals from incidents_log/project_routing_snapshots/failed_webhook_jobs/scheduler_heartbeats; window auto-stops after 2026-06-05; result to job summary + artifact)

2026-05-29 05:42:30 +03:00

stage5-investigate-day1.yml

ci: stage5 day-1 investigation workflow — diagnose audit:verify-chains failures + failed_webhook_jobs 163k spike (one-shot read-only, hardcoded SQL on incidents_log/failed_jobs/failed_webhook_jobs + direct audit:verify-chains -v artisan call)

2026-05-29 06:24:30 +03:00

trivy.yml

feat(tooling): Trivy CI workflow prep — disabled until YC Docker (#26)

2026-05-10 08:45:17 +03:00