johanleroy/arboretum
1
1
Fork 0
Code Issues Pull Requests Actions Packages Releases 5 Activity
Files
073f2cf9caeefb3cd6427737b0446dc2b480b27f
arboretum/packages/server/test/fixtures/dialogs/trust.raw
Johan LEROY 33295a7aaf feat: clean install (Gitea en dur, scan off) + durcissement sécurité entreprise 
Gitea
- lien « Code source » hardcodé (REPO_SOURCE_URL) vers le dépôt, toujours visible
- retrait complet du réglage configurable (api.ts, route+store settings, SettingsView, i18n, help, tests)

Découverte des dépôts
- aucune racine de scan par défaut → pas de scan au premier démarrage (clean install)
- corrige la découverte des dépôts à l'INTÉRIEUR d'une racine qui est elle-même un repo
  (depth 0 = conteneur de scan, on descend ; depth > 0 = feuille)

Sécurité « enterprise-deployable »
- en-têtes HTTP durcis (CSP, X-Frame-Options, nosniff, Referrer-Policy, HSTS conditionnel, no-store API), header Server retiré
- permissions DB 0o600 / dossier de données 0o700 ; error handler sanitisé ; garde Content-Type sur les mutations
- chiffrement au repos AES-256-GCM des secrets (server_secret, clé privée VAPID) via SecretBox
- journal d'audit (migration #7) + endpoint /audit-logs + RGPD export/effacement + UI Réglages
- SECURITY.md, docs/ENTERPRISE_DEPLOYMENT.md, sections README EN/FR, SBOM CycloneDX en CI

CI
- pack-smoke packe depuis le contexte du package (cd packages/server) au lieu de « npm pack -w » :
  corrige l'embarquement de @arboretum/shared dans le tarball

Purge des données personnelles du dépôt public
- suppression de spikes/s4-discovery/result.json, reformulation du VERDICT
- chemin de test générique, anonymisation des 5 fixtures de dialogues
2026-06-18 16:44:25 +02:00

37 lines
9.0 KiB
Plaintext
Raw Blame History

This file contains invisible Unicode characters
This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
78[?25h[?25l[?2004h[?1004h[?2031h[?2026h
────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
Accessingworkspace:
/tmp/spike-s3-trust
Quicksafetycheck:Isthisaprojectyoucreatedoroneyoutrust?(Likeyourowncode,awell-knownopensource
project,orworkfromyourteam).Ifnot,takeamomenttoreviewwhat'sinthisfolderfirst.
ClaudeCode'llbeabletoread,edit,andexecutefileshere.
]8;id=zaxmda;https://code.claude.com/docs/en/securitySecurity guide]8;;
❯1.Yes,Itrustthisfolder
2.No,exit
Entertoconfirm·Esctocancel
[?2026l[>0q[?2026h
Yes, I trust this folder✔
[?2026l]0;✳ Claude Code[?2026h
╭───Claude Codev2.1.173─────────────────────────────────────────────────────────────────────────────────────────────╮
│ │ Tips for getting started │
│ Welcome back Devon!│Run/inittocreateaCLAUDE.mdfilewithinstructionsforCla…│
││───────────────────────────────────────────────────────────────│
│  ▐▛███▜▌│What's new│
│▝▜█████▛▘│FixedFable5modelnameswitha`[1m]`suffixnotbeingnorma…│
│     ▘▘ ▝▝     │ Fixed a spurious "sandbox depenncies missing"startup warnin…│
│ Opus 4.8 (1M context) with xh… · Claude Team ·  │ Sub-agnts can nowspawn their own sub-agents(upto5levels…│
│Example│/release-notes for more│
│   /tmp/spike-s3-trust    │  │
╰──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────╯

────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
❯ Try "create a util logging.py that..."
────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
? for shortcuts · ← for agents◉ xhigh · /effort
[?25h[?2026l[?2026h[?25l

[?25h[?2026l[?2026h[?25l
 ⚠ 2 setup issues: MCP · /doctor

 ▎ Meet Fable 5, our newest model for complex, long-running work. Try anytime with /model.
▎ Included in yourplan limits until Jun 22, then switch to usage credits to continue.
────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
❯ 
────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
?forshortcuts·←foragents◉xhigh·/effort
[?25h[?2026l[?2026h[?25l
────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
❯ 
────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
 ? for shortcuts ·← for agents ◉ xhigh · /effort





[?25h[?2026l[?2026h[?25l
 ⚠ 2 setup issues: MCP · /doctor

 ▎ Meet Fable 5, our newest model for complex, long-running work. Try anytime with /model.
▎ Included in yourplan limits until Jun 22, then switch to usage credits to continue.
────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
❯ 
────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
?forshortcuts·←foragents◉xhigh·/effort
[?25h[?2026l[?1006l[?1003l[?1002l[?1000l(B[>4m[<u[?1004l[?2031l[?2004l[?25h78]0;
Reference in New Issue View Git Blame Copy Permalink