johndoe6345789 ee32934c74 fix(security+ci): address code review findings ...

Security:
- /api/setup and /api/bootstrap now require Authorization: Bearer $SETUP_SECRET
  before executing any database seed operations

E2E:
- global.setup.ts: replace fixed 2s sleep with waitForServer() poll loop
  (60s timeout, 1s interval) so seed POST only fires when server is ready

CI pipeline:
- lint gate: remove || true so ESLint failures propagate; tighten
  error threshold from 1500 to 0 (errors are now a hard gate)
- container-build-apps: replace !failure() with explicit
  needs.container-base-tier1.result == 'success' so a failed tier-1
  build blocks Gate 2 instead of being silently skipped
- skip_tests workflow_dispatch input now wired to gate-2-start,
  test-unit, test-e2e, and test-dbal-daemon jobs

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-13 18:36:23 +00:00

2.9 KiB

Raw Permalink Blame History

View Raw