NexaPG

4 Commits

Include renames

Author	SHA1	Message	Date
nessi	597579376f	[NX-204 Issue] Add secret management guidelines and enhance security notes Migration Safety / Alembic upgrade/downgrade safety (push) Successful in 2m43s Details PostgreSQL Compatibility Matrix / PG14 smoke (push) Successful in 8s Details PostgreSQL Compatibility Matrix / PG15 smoke (push) Successful in 8s Details PostgreSQL Compatibility Matrix / PG16 smoke (push) Successful in 8s Details PostgreSQL Compatibility Matrix / PG17 smoke (push) Successful in 7s Details PostgreSQL Compatibility Matrix / PG18 smoke (push) Successful in 7s Details Proxy Profile Validation / validate (push) Successful in 3s Details Python Dependency Security / pip-audit (block high/critical) (push) Successful in 26s Details Docker Publish (Release) / Build and Push Docker Images (release) Successful in 1m41s Details Container CVE Scan (development) / Scan backend/frontend images for CVEs (push) Has been cancelled Details Introduced a comprehensive guide for secure production secret handling (`docs/security/secret-management.md`). Updated `.env.example` files with clearer comments on best practices, emphasizing not hardcoding secrets and implementing rotation strategies. Enhanced README with a new section linking to the secret management documentation.	2026-02-15 12:29:40 +01:00
nessi	6093c5dea8	[NX-203 Issue] Add production proxy profile with validation and documentation Container CVE Scan (development) / Scan backend/frontend images for CVEs (push) Successful in 2m40s Details PostgreSQL Compatibility Matrix / PG14 smoke (push) Successful in 8s Details PostgreSQL Compatibility Matrix / PG15 smoke (push) Successful in 7s Details PostgreSQL Compatibility Matrix / PG16 smoke (push) Successful in 7s Details PostgreSQL Compatibility Matrix / PG17 smoke (push) Successful in 7s Details PostgreSQL Compatibility Matrix / PG18 smoke (push) Successful in 8s Details Proxy Profile Validation / validate (push) Successful in 3s Details Introduced a secure, repeatable production proxy profile for reverse proxy and HTTPS deployment, including NGINX configuration, environment variables, and CORS guidance. Added CI workflow for static validation of proxy guardrails and detailed documentation to ensure best practices in deployment.	2026-02-15 12:10:41 +01:00
nessi	3932aa56f7	[NX-202 Issue] Add pip-audit CI enforcement for Python dependency security Container CVE Scan (development) / Scan backend/frontend images for CVEs (push) Successful in 2m41s Details PostgreSQL Compatibility Matrix / PG14 smoke (push) Successful in 8s Details PostgreSQL Compatibility Matrix / PG15 smoke (push) Successful in 8s Details PostgreSQL Compatibility Matrix / PG16 smoke (push) Successful in 7s Details PostgreSQL Compatibility Matrix / PG17 smoke (push) Successful in 7s Details PostgreSQL Compatibility Matrix / PG18 smoke (push) Successful in 7s Details Python Dependency Security / pip-audit (block high/critical) (push) Successful in 50s Details This commit integrates pip-audit to enforce vulnerability checks in CI. Dependencies with unresolved HIGH/CRITICAL vulnerabilities will block builds unless explicitly allowlisted. The process is documented, with a strict policy to ensure exceptions are trackable and time-limited.	2026-02-15 10:44:33 +01:00
nessi	1bab5cd16d	Add UI previews and NexaPG logo to README PostgreSQL Compatibility Matrix / PG14 smoke (push) Successful in 7s Details PostgreSQL Compatibility Matrix / PG15 smoke (push) Successful in 7s Details PostgreSQL Compatibility Matrix / PG16 smoke (push) Successful in 7s Details PostgreSQL Compatibility Matrix / PG17 smoke (push) Successful in 7s Details PostgreSQL Compatibility Matrix / PG18 smoke (push) Successful in 6s Details Updated the README to include a centralized NexaPG logo and detailed UI previews of key application sections such as dashboard, targets management, query insights, and others. Added new screenshot assets to the `docs/screenshots` directory to support the visual updates.	2026-02-12 16:18:19 +01:00