Sascha Nesterovic nessi
  • Joined on 2025-06-13
nessi closed issue nessi/NexaPG#14 2026-02-15 11:32:02 +00:00
[NX-204] Create production secret management guide
nessi commented on issue nessi/NexaPG#14 2026-02-15 11:32:02 +00:00
[NX-204] Create production secret management guide

NX-204 Completed

Implemented production-focused secret handling guidance and removed ambiguous practices.

What was delivered

  • Added dedicated documentation:
    • `docs/security/sec…
nessi pushed to development at nessi/NexaPG 2026-02-15 11:29:48 +00:00
597579376f [NX-204 Issue] Add secret management guidelines and enhance security notes
nessi closed issue nessi/NexaPG#13 2026-02-15 11:23:56 +00:00
[NX-203] Finalize production CORS and reverse-proxy security profile
nessi commented on issue nessi/NexaPG#13 2026-02-15 11:23:55 +00:00
[NX-203] Finalize production CORS and reverse-proxy security profile

NX-203 Completed

Implemented a secure and repeatable proxy deployment profile with documented CORS policy and HTTPS guardrails.

What was delivered

  • Added production proxy profile…
nessi pushed to development at nessi/NexaPG 2026-02-15 11:20:07 +00:00
f25792b8d8 Adjust Nginx PID file path in Dockerfile
nessi pushed to development at nessi/NexaPG 2026-02-15 11:10:43 +00:00
6093c5dea8 [NX-203 Issue] Add production proxy profile with validation and documentation
nessi pushed to development at nessi/NexaPG 2026-02-15 10:29:13 +00:00
84bc7b0384 Update NEXAPG version to 0.2.4
nessi closed issue nessi/NexaPG#12 2026-02-15 10:27:55 +00:00
[NX-202] Enforce Python dependency security gate (pip audit)
nessi commented on issue nessi/NexaPG#12 2026-02-15 10:27:53 +00:00
[NX-202] Enforce Python dependency security gate (pip audit)

NX-202 Completed

Implemented Python dependency vulnerability enforcement in CI with a documented, auditable exception flow.

Delivered Scope

  • Added dedicated CI workflow for…
nessi pushed to development at nessi/NexaPG 2026-02-15 09:44:37 +00:00
3932aa56f7 [NX-202 Issue] Add pip-audit CI enforcement for Python dependency security
9657bd7a36 Merge branch 'main' of https://git.nesterovic.cc/nessi/NexaPG into development
21a8023bf1 Merge pull request 'Fix CI stability: resolve Docker Scout write/auth issues and harden PG matrix checkout' (#35) from development into main
Compare 3 commits »
nessi pushed to main at nessi/NexaPG 2026-02-15 09:33:58 +00:00
9657bd7a36 Merge branch 'main' of https://git.nesterovic.cc/nessi/NexaPG into development
574e2eb9a5 Ensure valid Docker Hub namespace in release workflow
Compare 2 commits »
nessi pushed to development at nessi/NexaPG 2026-02-15 09:33:23 +00:00
574e2eb9a5 Ensure valid Docker Hub namespace in release workflow
nessi released NexaPG 0.2.3 - Security update at nessi/NexaPG 2026-02-14 22:23:02 +00:00
nessi closed issue nessi/NexaPG#11 2026-02-14 22:18:06 +00:00
[NX-201] Enforce container vulnerability scan gate in CI
nessi commented on issue nessi/NexaPG#11 2026-02-14 22:18:06 +00:00
[NX-201] Enforce container vulnerability scan gate in CI

NX-201 Completed

Implemented CI enforcement to prevent shipping releases with unresolved container risks.

What was delivered

  • Added container image security scanning for both: …
nessi released NexaPG 0.2.3 - Security update at nessi/NexaPG 2026-02-14 22:14:55 +00:00
nessi pushed tag 0.2.3 to nessi/NexaPG 2026-02-14 22:14:54 +00:00
nessi pushed to main at nessi/NexaPG 2026-02-14 22:12:30 +00:00
21a8023bf1 Merge pull request 'Fix CI stability: resolve Docker Scout write/auth issues and harden PG matrix checkout' (#35) from development into main
328f69ea5e Update GitHub Actions workflows for improved functionality
c0077e3dd8 Add -u root flag to container CVE scan workflow
af6ea11079 Refactor Docker Scout integration in CVE scan workflow
5a7f32541f Add Docker Scout login fallback and temporary caching.
Compare 7 commits »
nessi merged pull request nessi/NexaPG#35 2026-02-14 22:12:28 +00:00
Fix CI stability: resolve Docker Scout write/auth issues and harden PG matrix checkout