chore: initial project setup with backend, frontend, and infrastructure
Add complete NexaPantry application structure including: - Docker Compose configuration with PostgreSQL, Redis, FastAPI backend, worker, frontend and Caddy - Environment configuration template with database, auth, and service settings - GitHub Actions CI workflow for backend/frontend linting, testing, auditing and Docker builds - AGPL-3.0 license and comprehensive README with setup, development, and security documentation - Backend
This commit is contained in:
29
scripts/security-checks.sh
Executable file
29
scripts/security-checks.sh
Executable file
@@ -0,0 +1,29 @@
|
||||
#!/usr/bin/env sh
|
||||
set -eu
|
||||
|
||||
cd "$(dirname "$0")/.."
|
||||
|
||||
echo "Backend lint"
|
||||
(cd backend && ruff check app)
|
||||
|
||||
echo "Backend tests"
|
||||
(cd backend && pytest)
|
||||
|
||||
echo "Backend dependency audit"
|
||||
(cd backend && pip-audit)
|
||||
|
||||
echo "Backend static security scan"
|
||||
(cd backend && bandit -q -r app -x app/tests)
|
||||
|
||||
echo "Frontend lint, typecheck, tests and dependency audit"
|
||||
(cd frontend && npm run lint && npm run typecheck && npm test -- --run && npm audit --audit-level=moderate)
|
||||
|
||||
cat <<'INFO'
|
||||
Container scan:
|
||||
docker compose build
|
||||
trivy image nexapantry-backend
|
||||
trivy image nexapantry-frontend
|
||||
|
||||
Secret scan:
|
||||
gitleaks detect --source .
|
||||
INFO
|
||||
Reference in New Issue
Block a user