8 Commits

Author	SHA1	Message	Date
Toutsu	11f6b1bcc9	Merge remote-tracking branch 'origin/main' into feature/trivy-security-scan	2026-05-12 12:59:49 +03:00
Toutsu	06d40fdbc8	ci: add deep SAST via SecurityCodeScan Roslyn analyzer ... - SecurityCodeScan.VS2019 5.6.7 injected into Directory.Build.props scans all C# source during every dotnet build - HIGH/CRITICAL findings fail the build because TreatWarningsAsErrors=true - No extra CI step needed: analyzer runs inside every build job automatically Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-12 12:45:36 +03:00
Toutsu	043ed9ce45	ci: add Trivy security scanning (SAST/SCA) to pipeline ... - PR checks: filesystem scan with Trivy (vuln, secret, misconfig) - Deploy pipeline: image scan for bot and web containers before deploy - Scans entire repository, not filtered file subsets - Bump version -> 1.14.0 Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-12 12:42:32 +03:00
Toutsu	105a051c2f	ci: install latest trivy and verify scan inputs ... Enable NuGet lock files so Trivy has dependency targets, fail PR checks when no lock files or language-specific files are detected, and let the installer fetch the latest Trivy release.	2026-05-12 12:20:42 +03:00
Hermes Agent	007806a5d8	feat(ci): add C# linter and security scanner to PR checks ... - dotnet format --verify-no-changes (C# code style linting) - dotnet list package --vulnerable --include-transitive (NuGet vulnerability check) - Trivy filesystem scan (CVE, secrets, dependency scanning)	2026-05-11 20:11:15 +00:00
root	cad4e5c30e	fix(ci): remove --no-build from dotnet test step	2026-05-06 09:52:46 +00:00
root	77647e4bb8	fix(ci): use ubuntu runner + setup-dotnet instead of container image	2026-05-06 09:46:52 +00:00
root	17c631aef2	ci: add PR checks workflow — test + build, no publish	2026-05-06 09:40:11 +00:00