Commit graph

5 commits

Author SHA1 Message Date
senke
d86b27efdc fix(audit-1.8,1.9): implement OAuth user lookup, add cargo audit to CI
- 1.8: Implement GetUserByOAuthID in database.go via federated_identities join
- 1.8: Use OAuth ID lookup first in oauth_service getOrCreateUser
- 1.9: Add cargo audit step to chat-ci.yml and stream-ci.yml

Refs: AUDIT_TECHNIQUE_INTEGRAL_2026_02_15.md items 1.8, 1.9
2026-02-15 14:22:27 +01:00
senke
f9d731c77a fix(ci): correct Rust service paths and reactivate CD pipeline
- Fix chat-ci.yml and stream-ci.yml to reference veza-chat-server/
  and veza-stream-server/ instead of non-existent apps/ paths
- Add veza-common/ to CI triggers so shared library changes are tested
- Reactivate CD pipeline with Docker registry push and Kubernetes
  deployment steps (gated on secrets availability)
- Standardize Redis dependency to v0.32 across both Rust services

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-02-12 22:44:56 +01:00
senke
45c84aea54 ci: add cargo clippy lint step to chat and stream CI workflows
Add clippy with -D warnings (deny all warnings) to both Rust CI
pipelines. The production-deploy workflow already had clippy.

This ensures lint issues are caught before merge for both services.

Addresses audit finding D15: clippy not present in all Rust workflows.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-02-11 23:25:57 +01:00
senke
e84eed58f9 ci: upgrade remaining GitHub Actions and remove || true patterns
- backend-ci.yml: remove || true from govulncheck
- frontend-ci.yml: remove || true from npm audit
- cd.yml: upgrade checkout@v3 -> v4, buildx-action@v2 -> v3
- chat-ci.yml: replace actions-rs/toolchain@v1 with dtolnay/rust-toolchain@stable
- stream-ci.yml: replace actions-rs/toolchain@v1 with dtolnay/rust-toolchain@stable

Zero remaining `|| true` patterns across all 11 workflow files.
Zero remaining deprecated action references.

Completes CI hardening started in C1.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-02-11 22:54:35 +01:00
okinrev
6e2e16fbb5 initial: initial repo set up (README, LICENSE, CONTRIBUTORS, etc...) 2025-12-03 13:54:23 +01:00