admin
12f6a65b80
CI (SIAX Cloud) / security (pull_request) Successful in 14s
CI (SIAX Cloud) / security (push) Successful in 14s
CI (SIAX Cloud) / contracts (pull_request) Successful in 15s
CI (SIAX Cloud) / contracts (push) Successful in 17s
CI (SIAX Cloud) / quality (push) Successful in 1m9s
CI (SIAX Cloud) / quality (pull_request) Successful in 1m10s
- scan worker: atomic claim (FOR UPDATE SKIP LOCKED), Playwright-core + system chromium capture → typed EvidenceRecords (runtime-html/dom/computed-style/ stylesheet/asset/network-request/screenshot), confidence=measured - AUD0 emitter (fire-and-forget, advisory): c0py.registry_created/.scan_created/ .scan_completed/.scan_failed, tenant_id = Zitadel resourceowner (org) - tenant binding: resourceowner claim from introspection (deny-by-default 403), migration 002 tenant_id on registries+scans, all queries tenant+owner scoped - evidence gaps stay explicit (screenshot miss → no screenshot record) - 30/30 tests, canonical validator OK
39 lines
1.1 KiB
Docker
39 lines
1.1 KiB
Docker
# C0PY API Server
|
|
FROM node:22-alpine AS base
|
|
WORKDIR /app
|
|
|
|
RUN corepack enable && corepack prepare pnpm@9.15.9 --activate
|
|
|
|
COPY package.json pnpm-workspace.yaml pnpm-lock.yaml ./
|
|
COPY packages ./packages
|
|
COPY apps ./apps
|
|
|
|
RUN pnpm install --frozen-lockfile
|
|
|
|
FROM node:22-alpine AS runtime
|
|
WORKDIR /app
|
|
|
|
# chromium: deterministic browser capture (scan worker, playwright-core)
|
|
RUN apk add --no-cache wget chromium
|
|
|
|
COPY package.json pnpm-workspace.yaml pnpm-lock.yaml ./
|
|
COPY packages ./packages
|
|
COPY apps ./apps
|
|
|
|
RUN corepack enable && corepack prepare pnpm@9.15.9 --activate && pnpm install --frozen-lockfile && \
|
|
TSX_DIR=$(find /app/node_modules/.pnpm -maxdepth 4 -path '*/node_modules/tsx/package.json' -exec dirname {} \; | head -1) && \
|
|
ln -s "$TSX_DIR" /app/node_modules/tsx 2>/dev/null || true
|
|
|
|
ENV NODE_ENV=production
|
|
ENV PORT=3000
|
|
ENV HOST=0.0.0.0
|
|
|
|
USER node
|
|
|
|
EXPOSE 3000
|
|
|
|
HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
|
|
CMD wget -qO- http://127.0.0.1:3000/health >/dev/null 2>&1 || exit 1
|
|
|
|
CMD ["node", "--import", "tsx/esm", "apps/api/src/index.ts"]
|