Add Forgejo CI/CD workflows with self-hosted runners #1

Merged
deco merged 4 commits from forgejo-workflows into main 2025-07-19 12:03:34 +03:00
Owner
No description provided.
deco added 1 commit 2025-07-19 11:42:58 +03:00
Add Forgejo CI/CD workflows with self-hosted runners
Some checks failed
Lint and Build / build (20) (pull_request) Failing after 2m27s
Lint and Build / build (22) (pull_request) Failing after 3m3s
9f019db74f
- Convert GitHub Actions workflow to Forgejo format
- Configure workflows to run on self-hosted runners
- Maintain existing build pipeline with Node.js 20 and 22 matrix
- Include type checking, linting, and build steps
- Upload build artifacts for both Node.js versions

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
deco added 1 commit 2025-07-19 11:47:53 +03:00
Update project documentation with comprehensive architecture details
Some checks failed
Lint and Build / build (22) (pull_request) Failing after 43s
Lint and Build / build (20) (pull_request) Failing after 46s
91ef418b1b
- Enhanced CLAUDE.md with detailed architectural concepts and patterns
- Added dynamic table naming system documentation
- Documented persistent OBS connection management and dual integration
- Explained glass morphism UI architecture and real-time monitoring
- Updated README.md with modern professional presentation
- Added comprehensive setup instructions and feature highlights
- Included all development commands and API endpoint references
- Cross-referenced CLAUDE.md for detailed technical documentation

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
deco added 1 commit 2025-07-19 11:57:59 +03:00
Implement comprehensive security fixes for API protection
Some checks failed
Lint and Build / build (22) (pull_request) Failing after 37s
Lint and Build / build (20) (pull_request) Failing after 48s
afc6f5f3a8
- Add API key authentication middleware for all API endpoints
- Fix path traversal vulnerability with screen parameter validation
- Implement comprehensive input validation and sanitization
- Create centralized security utilities in lib/security.ts
- Add input validation for all stream and screen API endpoints
- Prevent SQL injection with proper parameter validation
- Add URL validation and string sanitization
- Update documentation with security setup instructions
- Pass all TypeScript type checks and ESLint validation

Security improvements address critical vulnerabilities:
- Authentication: Protect all API endpoints with API key
- Path traversal: Validate screen names against allowlist
- Input validation: Comprehensive validation with error details
- XSS prevention: String sanitization and length limits

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
deco added 1 commit 2025-07-19 12:02:18 +03:00
Allow internal network access without API key
Some checks failed
Lint and Build / build (20) (pull_request) Failing after 20s
Lint and Build / build (22) (pull_request) Failing after 33s
6467cdee3c
- Skip API key authentication for localhost and local network IPs
- Maintain security for external access while preserving usability
- Log internal network access for transparency
- Supports localhost, 127.0.0.1, and 192.168.x.x ranges

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
deco merged commit f913e20dec into main 2025-07-19 12:03:34 +03:00
deco deleted branch forgejo-workflows 2025-07-19 12:03:34 +03:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: deco/obs-ss-plugin-webui#1
No description provided.