adam/syslog-server
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/syslog-server.git synced 2026-09-30 12:23:16 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
23 commits 2 branches 0 tags 686 KiB
Commit graph

11 commits

Author SHA1 Message Date
Adam Moussa
db4a49a4e8
fix(ci): update PR policy to v1.0.6 
Refs: PLAT-62
 2026-08-04 14:46:27 -04:00
Adam Moussa
ba4271fae7
Merge branch 'main' into chore/pr-policy-rollout 2026-08-04 14:27:00 -04:00
Adam Moussa
5ea21991d8
ci: add org PR policy caller 
Refs: PLAT-62
 2026-08-04 11:32:26 -04:00
dependabot[bot]
045d436e8a
chore(deps): bump the minor-and-patch group with 4 updates (#18)
Some checks are pending
Deploy / deploy (push) Waiting to run
Details 
Bumps the minor-and-patch group with 4 updates: [Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml](https://github.com/sea-haven-industries/.github), [Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml](https://github.com/sea-haven-industries/.github), [Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml](https://github.com/sea-haven-industries/.github) and [Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml](https://github.com/sea-haven-industries/.github).


Updates `Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml` from 1.0.2 to 1.0.3
- [Release notes](https://github.com/sea-haven-industries/.github/releases)
- [Commits](0170a57c0d...3f74677422)

Updates `Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml` from 1.0.2 to 1.0.3
- [Release notes](https://github.com/sea-haven-industries/.github/releases)
- [Commits](0170a57c0d...3f74677422)

Updates `Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml` from 1.0.2 to 1.0.3
- [Release notes](https://github.com/sea-haven-industries/.github/releases)
- [Commits](0170a57c0d...3f74677422)

Updates `Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml` from 1.0.2 to 1.0.3
- [Release notes](https://github.com/sea-haven-industries/.github/releases)
- [Commits](0170a57c0d...3f74677422)

---
updated-dependencies:
- dependency-name: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml
  dependency-version: 1.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml
  dependency-version: 1.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml
  dependency-version: 1.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml
  dependency-version: 1.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-04 11:19:12 -04:00
Adam Moussa
707783ca08 ci: declare workflow permissions and normalize block spacing 2026-07-28 18:06:15 -04:00
Adam Moussa
5682d5cdf7 ci(deps): pin org reusable workflows to v1.0.2 2026-07-28 17:56:13 -04:00
Adam Moussa
b056a29ba6
ci(security): allow GHSA-3jxr-9vmj-r5cp in dependency review (#16) 
brace-expansion 5.0.7 ships inBundle inside aws-cdk-lib and cannot be
overridden via the lockfile; dependency-review (fail-on-severity: high)
blocks any PR whose diff moves the bundled copy, currently Dependabot #15
(aws-cdk-lib 2.261.0 -> 2.262.1, bundled 5.0.6 -> 5.0.7).

- bump callable-dependency-review pin to org main HEAD (adds the
  allow-ghsas input, absent at the old fd60e4c9 pin)
- pass allow-ghsas scoped to this single advisory
- adjudicate the accepted risk in .security-review/suppressions.json
  per the org workflow input contract (synth-time-only exposure)

Remove the allow + suppression when aws-cdk-lib bundles >=5.0.8.
 2026-07-28 15:47:30 -04:00
Adam Moussa
7f64f00601
ci: add dependabot coverage (INFRA-130) (#7) 2026-07-08 16:32:26 -04:00
Adam Moussa
ef5fc34b75
chore(ci): SHA-pin org reusable-workflow caller refs (INFRA-50) (#6)
Some checks failed
Deploy / deploy (push) Has been cancelled
Details
2026-07-06 18:27:15 -04:00
Adam Moussa
fbb627027f
Repo hygiene: PR labeler + README badges (INFRA-56/57) (#3)
Some checks failed
Deploy / deploy (push) Has been cancelled
Details 
- Add Labeler workflow calling org reusable callable-labeler.yaml
- Add README status badges (TypeScript, AWS CDK, CI)

Part of INFRA-47 (INFRA-56, INFRA-57).
 2026-06-11 14:13:59 -04:00
Adam Moussa
a8276b44fd feat: syslog-server under IaC (INFRA-12) 
CDK stack for the EC2 syslog collector (rsyslog 514 -> CloudWatch agent ->
unifi-syslog), mirroring the file-share/forgejo pattern. Recreated from the
captured console config; EIP 184.72.154.32 imported + re-associated so the
UniFi forwarding target is unchanged. Deployed + verified 2026-06-09.

Note: deploy role can assume cdk-hnb659fds-* (account-admin via CDK
bootstrap) — same exposure as every org CDK deploy role; per-app qualifier
is a known org-wide follow-up.
 2026-06-09 13:51:17 -04:00