19 Commits

Include renames

Author	SHA1	Message	Date
sharang	0834547a74	chore(ci): repoint registry/git/cargo meghsakha.com -> breakpilot.com (#231)	2026-08-06 08:42:45 +00:00
sharang	a72f79e557	ci: fix cosign signing (install fallback, env-style login, portal sign step) (#225)	2026-07-22 07:46:34 +00:00
sharang	36a49cdeac	ci: push images to Harbor (repo.meghsakha.com) + cosign (#216)	2026-07-21 12:08:04 +00:00
sharang	c6baf72c6d	feat: control-driven SAST — LUT + grounded LLM triage over tool findings (#213)	2026-07-21 09:01:51 +00:00
sharang	70a4ee55ab	refactor(werkbank): extract soft-PLC provisioning + ICS probe into werkbank-exec (WB-04a) (#208)	2026-07-17 12:56:15 +00:00
sharang	9e70bd1c8e	ci: don't cancel-in-progress for main-branch runs (only pull_request) (#152)	2026-07-12 22:08:58 +00:00
sharang	9ec07ff7a1	fix(ci): authenticate tramiton fetch in dashboard + mcp image builds (#147)	2026-07-12 21:52:38 +00:00
sharangandSharang Parnerkar	c6b5622113	fix(ci): authenticate tramiton-core fetch in the agent image build (main deploys) (#143) ... The PR `check` job authenticates the private tramiton-core git fetch, but the main-branch **`deploy-agent`** job builds `Dockerfile.agent` where cargo also fetches tramiton-core — inside the image build, with no credentials — so **agent image builds on main fail**. Fix: inject the PAT as a **BuildKit secret** (never baked into an image layer). - `Dockerfile.agent`: `RUN --mount=type=secret,id=tramiton_token …` applies the same `https`-insteadOf rewrite + `CARGO_NET_GIT_FETCH_WITH_CLI=true` before `cargo build`. - `deploy-agent`: `DOCKER_BUILDKIT=1 docker build --secret id=tramiton_token,env=TRAMITON_FETCH_TOKEN …`, reusing the existing `TRAMITON_FETCH_TOKEN` secret. Only the agent image depends on tramiton-core (dashboard/mcp/docs unaffected). **Self-tests on merge** — changing `Dockerfile.agent` makes `detect-changes` run `deploy-agent`. Note: couldn't fully run the image build locally (no PAT value on hand + no `.dockerignore` so the context is large), but this mirrors the working PR-stage auth and uses standard BuildKit secret injection. Assumes the deploy runner's Docker daemon supports BuildKit (docker:27-cli → yes). --------- Co-authored-by: Sharang Parnerkar <30073382+mighty840@users.noreply.github.com> Reviewed-on: #143	2026-07-12 20:25:39 +00:00
sharang	a074efd0b4	ci: Kellnr crates.io mirror + persistent S3-backed sccache (#140)	2026-07-10 16:30:51 +00:00
sharang	ef6ee3dcd1	feat(onboarding): artifact ingest + classifier + native tramiton + suite seams (#138)	2026-07-10 16:00:51 +00:00
Sharang Parnerkar	5cafd13f44	ci: log orca webhook response so deploy steps arent silent	2026-04-08 15:09:27 +02:00
Sharang ParnerkarandClaude Opus 4.6	bc7cdd35e4	ci: replace coolify webhook with orca deploy ... Each deploy job now builds the per-service image, pushes to the private registry as :latest and :sha, then triggers an HMAC-signed orca redeploy webhook. Coolify webhooks are no longer used. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-08 10:06:11 +02:00
sharang	4388e98b5b	feat: add E2E test suite with nightly CI, fix dashboard Dockerfile (#52)	2026-03-30 10:04:07 +00:00
Sharang ParnerkarandClaude Opus 4.6	77f1c92c7b	ci: skip check stage on main push since PRs enforce it ... Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-13 11:20:39 +01:00
sharang	a529e9af0c	ci: consolidate CI into single job; fix sidebar footer (#14)	2026-03-13 09:44:32 +00:00
sharang	491665559f	feat: per-repo issue tracker, Gitea support, PR review pipeline (#10)	2026-03-11 12:13:59 +00:00
sharangandSharang Parnerkar	32e5fc21e7	feat: add MCP server for exposing compliance data to LLMs (#5) ... New `compliance-mcp` crate providing a Model Context Protocol server with 7 tools: list/get/summarize findings, list SBOM packages, SBOM vulnerability report, list DAST findings, and DAST scan summary. Supports stdio (local dev) and Streamable HTTP (deployment via MCP_PORT). Includes Dockerfile, CI clippy check, and Coolify deploy job. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> Co-authored-by: Sharang Parnerkar <parnerkarsharang@gmail.com> Reviewed-on: #5	2026-03-09 08:21:04 +00:00
Sharang ParnerkarandClaude Opus 4.6	d13cef94cb	Add Coolify deploy jobs with path-based change detection ... Deploys agent, dashboard, and docs independently based on which files changed. Only triggers on main after tests pass. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-08 19:22:56 +01:00
Sharang ParnerkarandClaude Opus 4.6	62196e5d74	Add CI pipeline for Gitea Actions ... Format, clippy, security audit, and test stages adapted from certifai. Clippy and tests run per-crate with proper feature gating for the dashboard's server/web split. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-02 17:26:27 +01:00