nexarch

0 Fork 0

Author	SHA1	Message	Date
patrickandClaude Sonnet 5.5	07eb74cadf	Root-Modul: apierror und httpharden aus common v0.1.0 CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s Details CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (pull_request) Successful in 4s Details CI / Web (dms-browser) (pull_request) Failing after 1m27s Details CI / Web (shl) (pull_request) Failing after 11s Details CI / Core-Modul (Build/Vet/Test) (push) Failing after 1m0s Details CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (push) Successful in 4s Details CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Failing after 19s Details CI / Web (dms-browser) (push) Failing after 1m26s Details Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Successful in 13m12s Details CI / Core-Modul (Build/Vet/Test) (pull_request) Failing after 1m0s Details CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Successful in 5s Details CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Failing after 21s Details CI / Web (pdf-viewer) (pull_request) Failing after 1m2s Details CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Successful in 5s Details CI / Web (pdf-viewer) (push) Failing after 1m3s Details CI / Web (shl) (push) Failing after 11s Details CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Canceled after 0s Details CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s Details CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s Details DB-Integrationstests / db-tests (pull_request) Canceled after 0s Details Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s Details Supply-Chain-Scan (Go) / govulncheck (pull_request) Canceled after 0s Details Supply-Chain-Scan (npm) / npm-audit (pull_request) Canceled after 0s Details Core-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s Details RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Canceled after 0s Details Core-Schnittstellen-Vertragstests / contract-tests (push) Successful in 12m23s Details Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-28 09:37:03 +01:00
patrick	2cb48e6e73	Merge PR #122 (OPS-08/09/10 Haertungsbuendel)	2026-09-22 11:22:43 +02:00
patrickandClaude Sonnet 5	1e3fa43229	AUD-08: audit-export ohne token in der url Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-09-22 10:29:26 +02:00
patrickandClaude Sonnet 5	8327a25278	OPS-10: F-24 einheitliche Lauschadressen (127.0.0.1), F-22 Webhook-Ziel-Pruefung (SSRF) und verschluesseltes Signaturgeheimnis CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s Details CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s Details CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s Details CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s Details CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s Details CI / Web (dms-browser) (push) Canceled after 0s Details CI / Web (pdf-viewer) (push) Canceled after 0s Details CI / Web (shl) (push) Canceled after 0s Details Core-Schnittstellen-Vertragstests / contract-tests (push) Canceled after 0s Details Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s Details Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-09-22 10:21:25 +02:00
patrickandClaude Sonnet 5	c5fddad8a5	API-17: gehaertete HTTP-Server (Timeouts, Body-Limit) in allen Diensten (QA-15 F-05) Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-09-22 00:49:27 +02:00
patrickandClaude Sonnet 5	8b467d4ef5	AUD-08: REST-Ingest-Endpunkt fuer Audit-Ereignisse externer Module Supply-Chain-Scan (Go) / govulncheck (pull_request) Failing after 1m54s Details Supply-Chain-Scan (npm) / npm-audit (pull_request) Failing after 1m16s Details RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Successful in 1m27s Details Supply-Chain-Scan (Go) / govulncheck (push) Failing after 51s Details Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Successful in 1m31s Details Core exponierte bislang nur GET /audit/export (AUD-03) - physisch getrennte Module (Archive, DMS, Mail) hatten keinen Weg, eigene sicherheitsrelevante Vorgaenge im zentralen Audit-Log zu vermerken. IngestHandler (POST /audit/ingest, X-Service-Token) ruft denselben alleinigen Schreibpfad wie core-interne Aufrufer auf (audit.Log.Record) - kein zweiter, laxerer Validierungspfad ueber REST. Notwendige Grundlage fuer Archive CMP-04 (Audit-Trail-Kopplung an Core-Audit-Log), das per REST an dieses Modul anbindet. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-09-17 16:40:27 +02:00
sysops	3b96d8ef41	AUD-04: backend-authorizer + dev-server + next.js audit-log-ansicht	2026-08-28 00:10:48 +02:00