mirror of
https://github.com/Sea-Haven-Industries/proposal-system.git
synced 2026-10-07 16:18:57 +00:00
80e36bfb9a
Addresses 29 FIX-severity findings and accessibility/code-quality NITs from the 2026-05-20 audit. Key changes: - Add confirmation dialogs for Mark as Sent and Create Revision (FIX-17) - Restrict S3 CORS from wildcard to specific origins (FIX-38) - Add API Gateway throttling at 100 rps / 50 burst (FIX-39) - Separate vendor upload from SQS extraction trigger (FIX-04/05) - Copy TotalBidAmount on proposal revision (FIX-11) - Add CI paths-ignore and concurrency group (FIX-47) - Add post-deploy health check (FIX-46) - Fix N+1 query, Guid.Empty FK, pagination bounds, role sync (FIX-01/02/07/09) - Fix dashboard OOM, status transitions, audit error handling (FIX-03/06/12) - Fix frontend date filters, error display, currency formatting (FIX-14/16/18-23) - Remove AOSS dashboard public access, skip empty AI suggestions (FIX-41/45) - Add aria-labels, document.title management, deduplicate constants - Restrict CORS localhost to development, log invalid API key attempts [skip deploy]
65 lines
1.6 KiB
YAML
65 lines
1.6 KiB
YAML
name: CI
|
|
|
|
on:
|
|
pull_request:
|
|
branches: [main]
|
|
paths-ignore:
|
|
- '*.md'
|
|
- 'docs/**'
|
|
- 'AUDIT-*.md'
|
|
- '.claude/**'
|
|
- 'LICENSE'
|
|
|
|
concurrency:
|
|
group: ci-${{ github.ref }}
|
|
cancel-in-progress: true
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
dotnet:
|
|
name: .NET Build & Test
|
|
uses: Sea-Haven-Industries/.github/.github/workflows/ci-dotnet.yaml@main
|
|
with:
|
|
working-directory: api
|
|
solution: ProposalSystem.sln
|
|
|
|
web:
|
|
name: Web Frontend Check
|
|
uses: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml@main
|
|
with:
|
|
working-directory: web
|
|
cache-dependency-path: web/package-lock.json
|
|
node-version: "24"
|
|
run-cdk-synth: false
|
|
run-conventions-check: false
|
|
|
|
python:
|
|
name: Python Lint
|
|
uses: Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml@main
|
|
with:
|
|
source-dirs: "lambdas/"
|
|
run-sam-validate: false
|
|
run-conventions-check: false
|
|
|
|
mobile:
|
|
name: Mobile Typecheck
|
|
uses: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml@main
|
|
with:
|
|
working-directory: mobile
|
|
cache-dependency-path: mobile/package-lock.json
|
|
node-version: "24"
|
|
run-cdk-synth: false
|
|
run-conventions-check: false
|
|
|
|
infra:
|
|
name: CDK Synth
|
|
uses: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml@main
|
|
with:
|
|
working-directory: infra
|
|
cache-dependency-path: infra/package-lock.json
|
|
node-version: "24"
|
|
dotnet-version: "8.0.x"
|
|
dotnet-publish-project: api/src/ProposalSystem.Api/ProposalSystem.Api.csproj
|
|
run-typecheck: false
|