Actions - pixa - git.eeqj.de

Take every setting from PIXA_ variables and PORT (closes #128 )

check #116:Commit 07f3433764 pushed by clawbot

issue-128-env-settings

2026-09-28 11:45:27 +02:00

2m56s

Add a Docker HEALTHCHECK and make docker-smoke (closes #111 )

check #115:Commit 8e82f5759d pushed by clawbot

issue-111-docker-smoke

2026-09-28 11:38:01 +02:00

3m5s

test: every setting from its environment variable (closes #128 )

check #114:Commit 93d41083cd pushed by clawbot

issue-128-env-settings

2026-09-28 11:34:55 +02:00

1m57s

Pin the new signed format in the golden vectors (closes #60 )

check #113:Commit fb9fbf4625 pushed by clawbot

issue-60-sign-quality-fit

2026-09-28 11:18:06 +02:00

3m6s

next -> main (1.0.0 milestone) (#105 )

check #112:Commit 04b5db6fbf pushed by clawbot

prod

2026-09-28 11:08:33 +02:00

5s

Resolve real client IP behind trusted proxies (closes #94 )

check #111:Commit 10eab440e7 pushed by clawbot

2m32s

docs: attach parseCIDRList doc to its own function

check #110:Commit bdfac2b83f pushed by clawbot

issue-94-trusted-proxies

2026-09-22 10:04:30 +02:00

2m52s

docs: describe the rfc1918 trusted_proxies default

check #109:Commit 564049db4f pushed by clawbot

issue-94-trusted-proxies

2026-09-22 09:04:33 +02:00

2m26s

docs: document trusted_proxies and record in TODO.md

check #108:Commit 518e84ce67 pushed by clawbot

issue-94-trusted-proxies

2026-09-22 01:28:57 +02:00

2s

build: stop installing golangci-lint on the host

check #107:Commit f1c1bffb5a pushed by clawbot

issue-104-docker-lint

2026-09-22 00:57:33 +02:00

1s

feat: blocked_networks config and extended SSRF ranges (closes #67 )

check #106:Commit 3cfcda0730 pushed by clawbot

1s

fix: validate dimensions and fit mode on encrypted URLs (closes #62 )

check #105:Commit a663669286 pushed by clawbot

issue-62-enc-validation

2026-09-21 22:24:59 +02:00

2m30s

build: run all linting in Docker via Dockerfile.lint (closes #104 )

check #104:Commit 8dc46af6b7 pushed by clawbot

issue-104-docker-lint

2026-09-21 22:14:59 +02:00

2m36s

Take the image signing key from PIXA_SIGNING_KEY and refuse the example placeholder (closes #110 )

check #103:Commit 1798cba96c pushed by clawbot

1s

docs: use the image name make docker builds in the Docker run example

check #102:Commit c9aa48227d pushed by clawbot

issue-110-docker-config-signing-key

2026-09-21 21:37:41 +02:00

1s

feat: blocked_networks config and extended SSRF ranges (closes #67 )

check #101:Commit fc720bfeee pushed by clawbot

issue-67-blocked-networks

2026-09-21 21:19:58 +02:00

2m28s

Harden http.Server: slowloris timeouts and form body limit (closes #92 )

check #100:Commit 37d49ade11 pushed by clawbot

1s

docs: fix Getting Started local-run example for the refused placeholder

check #99:Commit 11c8a96766 pushed by clawbot

issue-110-docker-config-signing-key

2026-09-21 20:55:44 +02:00

3m32s

feat: add HSTS, CSP, and Permissions-Policy security headers (closes #91 )

check #98:Commit b4e5300feb pushed by clawbot

1s

feat: blocked_networks config and extended SSRF ranges (closes #67 )

check #97:Commit c3a176358f pushed by clawbot

issue-67-blocked-networks

2026-09-21 20:40:46 +02:00

1s

feat: cap form POST body size and return 413 (closes #92 )

check #96:Commit 345a002cc2 pushed by clawbot

issue-92-server-hardening

2026-09-21 20:28:58 +02:00

1s

build: run all linting in Docker via Dockerfile.lint (closes #104 )

check #95:Commit 66bf9a589d pushed by clawbot

issue-104-docker-lint

2026-09-21 20:28:07 +02:00

2m45s

feat: add HSTS, CSP, and Permissions-Policy security headers (closes #91 )

check #94:Commit 3afce48383 pushed by clawbot

issue-91-security-headers

2026-09-21 20:25:07 +02:00

2m48s

docs: document the two container config paths (closes #110 )

check #93:Commit e1044e9037 pushed by clawbot

issue-110-docker-config-signing-key

2026-09-21 20:13:22 +02:00

1s

docs: update TODO.md Workflow and Status for the next branching model (closes #106 )

check #92:Commit 4f95cb6a37 pushed by clawbot

1s

test: cover redirect SSRF and semaphore release in httpfetcher (closes #78 )

check #91:Commit 6f416eac31 pushed by clawbot

1s

fix: script/test conditional-verbose-rerun with -cover (closes #59 )

check #90:Commit b95ef1eb69 pushed by clawbot

3s

test: cover redirect SSRF and semaphore release in httpfetcher (closes #78 )

check #89:Commit 624639c1ec pushed by clawbot

issue-78-httpfetcher-ssrf-tests

2026-09-21 19:41:02 +02:00

1s

docs: update TODO.md Workflow and Status for the next branching model (closes #106 )

check #88:Commit fa1018b614 pushed by clawbot

issue-106-todo-next-workflow

2026-09-21 19:41:23 +02:00

3m23s

CSRF protection on the login and URL-generator forms (closes #93 )

check #87:Commit a96eba8083 pushed by clawbot

2s