3 Commits

Include renames

Author	SHA1	Message	Date
maziggy	53bd4fadb3	Fix safe security findings: hashlib, log injection, broad excepts ... - Add usedforsecurity=False to MD5 (AMS fingerprint) and SHA1 (git blob hash) calls to silence Bandit B303 / CodeQL weak-crypto findings - Convert ~996 f-string logging calls to parameterized %s-style across 55 files to prevent log injection (Bandit G201 / CodeQL log-injection) - Narrow ~199 broad except Exception blocks to specific types: OperationalError for DB migrations, OSError for network/file cleanup, (OSError, ftplib.error_reply) for FTP, and targeted tuples for ZIP/XML/JSON parsing — 36 intentionally left broad (mixed async, re-raise patterns)	2026-02-06 11:37:59 +01:00
maziggy	964be0eb26	Improved Docker tests	2026-02-05 10:28:06 +01:00
maziggy	58c98b1075	Added docker test suite ... Test Summary: - Build tests: 3 passed (image build, backend imports, static files) - Backend unit tests: 378 passed (9 docker tests excluded) - Frontend unit tests: 137 passed - Integration tests: 9 passed (health, API endpoints, persistence, WebSocket) Changes made to fix the Docker test suite: 1. Added curl to the production Dockerfile for integration tests 2. Removed deprecated version attribute from docker-compose.test.yml 3. Added --pull flag to all build commands to ensure fresh images 4. Added explicit build step before starting integration container 5. Fixed WebSocket test to accept 200 as a valid response 6. Excluded docker-marked tests from backend unit test runs (-m "not docker")	2025-12-14 09:15:49 +01:00