CapaKraken

Files

T

Hartmut 110e4ff1aa fix(security): harden auth reset, rate limiter fallback, and CI secrets

- Move CI_AUTH_SECRET from plaintext to ${{ secrets.CI_AUTH_SECRET }}
- Wrap password reset (update + session kill + token mark) in $transaction
  to prevent stale sessions on partial failure (CWE-613)
- Rate limiter Redis fallback now uses stricter degraded limits
  (maxRequests/10) and logs at error level instead of warn

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-04-11 08:03:42 +02:00

ci.yml

fix(security): harden auth reset, rate limiter fallback, and CI secrets

2026-04-11 08:03:42 +02:00

deploy-prod.yml

refactor(ops): standardize image-based production delivery

2026-03-30 23:35:29 +02:00

deploy-staging.yml

refactor(ops): standardize image-based production delivery

2026-03-30 23:35:29 +02:00

deploy-test.yml

ci(e2e): add Playwright smoke tests to deploy-test workflow