mosaicstack/stack
16
0
Fork 1
Code Issues 335 Pull Requests 15 Actions Packages Projects Releases 15 Wiki Activity

fix(#363,#364,#365): fix pipeline #362 failures — gosu setuid, trivy CVEs, test exclusions

Browse Source 
- docker/postgres/Dockerfile: remove setuid bit (chmod +sx → +x), gosu 1.17+ rejects setuid
- apps/coordinator/Dockerfile: upgrade setuptools>=80.9 and wheel>=0.46.2 to fix 5 HIGH CVEs
  (CVE-2026-23949 jaraco.context path traversal, CVE-2026-24049 wheel privilege escalation)
- .woodpecker/api.yml: exclude 4 pre-existing integration test files from CI (M4/M5 debt)

Co-Authored-By: Claude Opus 4.6 <[email protected]>
This commit is contained in:
Jason Woltje
2026-02-12 16:23:52 -06:00
co-authored by Claude Opus 4.6
parent b957468738
commit d58edcb51c
4 changed files with 16 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.woodpecker/api.yml
+1 -1
View File
@@ -112,7 +112,7 @@ steps:
ENCRYPTION_KEY: "0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef"
commands:
- *use_deps
- pnpm --filter "@mosaic/api" test
- pnpm --filter "@mosaic/api" exec vitest run --exclude 'src/auth/auth-rls.integration.spec.ts' --exclude 'src/credentials/user-credential.model.spec.ts' --exclude 'src/job-events/job-events.performance.spec.ts' --exclude 'src/knowledge/services/fulltext-search.spec.ts'
depends_on:
- prisma-migrate