extension-platform

Archived

This repository has been archived on 2026-07-19. You can view files and clone it. You cannot open issues or pull requests or push a commit.

T

chaim 686a07e088 fix(security): require DB_PASS and GITEA_TOKEN env vars

Removed hardcoded fallback secrets in app_server.py. Both env vars
are now required at startup — fail fast instead of silently using
production credentials baked into the source.

Why: discovered while mapping the leak radius of a separate Gitea
token during the LegalCrm 2026-04-25 security audit. Per the
Infisical-only secrets policy, hardcoded credentials in any source
file are Critical regardless of intent.

Note: deployment must set both env vars before restarting the
service; missing either now produces KeyError on startup.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-04-25 21:49:23 +00:00

.gitea/workflows

Add CI/CD workflow for pre-built Docker image deployment

2026-04-13 20:41:59 +00:00

dashboard

fix: use semver comparison for extension version upgrades

2026-04-06 15:05:15 +00:00

n8n-workflows

feat: add health check endpoint + twice-daily monitoring workflow

2026-03-30 11:38:36 +00:00

app_server.py

fix(security): require DB_PASS and GITEA_TOKEN env vars