-
Notifications
You must be signed in to change notification settings - Fork 3
Dev #62
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Open
vsilent
wants to merge
78
commits into
main
Choose a base branch
from
dev
base: main
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Open
Dev #62
Changes from all commits
Commits
Show all changes
78 commits
Select commit
Hold shift + click to select a range
185de0c
limit docker image search with ?name parameter. Find exact tag by name
c8e701a
Add ability to connect on-premise own server
dda0930
Server cloud setting columns like region should allow null for the ow…
02385bf
set provider to 'own' when deal with on-premise or own server conenction
97f5f84
agreement accept, and management for admin api
c91de51
github actions untilities versioning update, agreement funcs added
f1ad3c4
cargo update
5e9ca01
.sqlx added to the repo for offline build
095b7ba
test offline build
0229021
test offline build
96b0f95
Update docker.yml
vsilent 970f876
workflow SQLX_OFFLINE
4225c62
Merge branch 'dev' of https://github.com/trydirect/stacker into dev
715a2cb
workflow SQLX_OFFLINE
c93f16a
workflow SQLX_OFFLINE
bb0c645
workflow SQLX_OFFLINE
70a743d
workflow SQLX_OFFLINE
1c8ea9a
workflow SQLX_OFFLINE
ab16922
workflow SQLX_OFFLINE
2e698bd
workflow SQLX_OFFLINE
a631162
.sqlx files
cbe46b6
.sqlx files
d8dfcaa
Add renovate.json
renovate[bot] 59e1ba5
Merge pull request #63 from trydirect/renovate/configure
vsilent 9079a2f
Update Rust crate sqlx to 0.8.0 [SECURITY]
renovate[bot] df11337
Update Rust crate base64 to v0.22.1
renovate[bot] 2e003f4
Merge pull request #64 from trydirect/renovate/crate-sqlx-vulnerability
vsilent fa66a47
Merge pull request #65 from trydirect/renovate/base64-0.x-lockfile
vsilent 3b3a6c2
Update Rust crate sqlx to 0.8.1 [SECURITY]
renovate[bot] c2ac319
Merge pull request #67 from trydirect/renovate/crate-sqlx-vulnerability
vsilent 3e731e5
initial commands
129bd71
All hardcoded IDs removed, Casbin rules use SERIAL
6c52f29
fixed warnings
1e1e7ca
project.body->metadata, agent registration/commands tests, middleware…
9267f9f
TODO updates
a56c531
take vault creds from .env instead
e7bb6be
agent commander
71e448e
casbin rules for agent, vault for token rotation
8d1b8d5
sqlx step problem in ci/cd
19ee730
sqlx step problem in ci/cd
49a8a75
fmt fail fix
44b4217
clippy fail fix
7cebd2f
Merge branch 'dev'
1e1a51c
cargo.lock re-gen
df6b65d
create linux/macos binaries
0091721
downgrade sqlx
7200fc1
sqlx cache
f64a978
Disable SQLX_OFFLINE for prepare
4e06a2f
sqlx-date.json generate
4e8326b
sqlx-date.json check
7c57cd7
sqlx-date.json check
6b00be7
sqlx-date.json check
32dde92
sqlx-date.json check
66a2d9a
sqlx 0.6 → 0.8 migration
a5e1a57
no console for prod build for now
c7d757b
tests config
81dcd46
config sources for tests
6f457b7
access_control.conf in Dockerfile
c449efd
Added Default implementations for all configuration structs in config…
dfb44a1
test required db running
3a4e071
migration fix, check if table casbin_rule table is created
421b69c
admin access project endpoint
0b09bfe
feat: Implement MCP server foundation
40ad075
root/admin_group user, MCP registry, tools implementation
aedb8b6
MCP server updates, websocker + cookie based auth, server connected
3b06fd3
Marketplace API init
77d8516
new migrations Marketplace added at Stacker
4f4698f
marketplace + product + tests
e1e0809
marketplace + product + tests
3817b21
root inherits user rights
6ac2d5c
category sync/category_code instead of category_id
010c3a5
access categories
922e814
categories endpoint
86d0ec6
categories endpoint
8786027
marketplace, categories import from connectors
7bfbacf
add connector example based on 3-d party auth service
3aba964
build on self-hosted, ssl problem
fb58d39
Casbin rules allow CRUD templates operations to groupd_admin
File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,10 +1,14 @@ | ||
| #BUILDKIT_PROGRESS=plain | ||
| #DOCKER_BUILDKIT=1 | ||
| DATABASE_URL=postgres://postgres:postgres@127.0.0.1:5432/stacker | ||
| DATABASE_URL=postgres://postgres:postgres@stackerdb:5432/stacker | ||
| POSTGRES_USER=postgres | ||
| POSTGRES_PASSWORD=postgres | ||
| POSTGRES_DB=stacker | ||
| POSTGRES_PORT=5432 | ||
| SECURITY_KEY=SECURITY_KEY_SHOULD_BE_OF_LEN_32 | ||
|
|
||
| REDIS_URL=redis://127.0.0.1/ | ||
| REDIS_URL=redis://127.0.0.1/ | ||
| # SQLX_OFFLINE=true | ||
|
|
||
| # Vault Configuration | ||
| VAULT_ADDRESS=http://127.0.0.1:8200 | ||
| VAULT_TOKEN=your_vault_token_here | ||
| VAULT_AGENT_PATH_PREFIX=agent |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -5,3 +5,6 @@ access_control.conf | |
| configuration.yaml | ||
| configuration.yaml.backup | ||
| configuration.yaml.orig | ||
| .vscode/ | ||
| .env | ||
| docs/*.sql | ||
This file was deleted.
Oops, something went wrong.
This file was deleted.
Oops, something went wrong.
This file was deleted.
Oops, something went wrong.
This file was deleted.
Oops, something went wrong.
This file was deleted.
Oops, something went wrong.
This file was deleted.
Oops, something went wrong.
This file was deleted.
Oops, something went wrong.
Oops, something went wrong.
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Check warning
Code scanning / CodeQL
Workflow does not contain permissions Medium
Copilot Autofix
AI 9 days ago
To fix the issue, we should explicitly declare the permissions for the
GITHUB_TOKENused by this workflow and restrict them to the minimum required. This workflow only needs to read repository contents to build and upload artifacts, socontents: readis sufficient. We can setpermissionsat the workflow root so it applies to all jobs (currently onlybuild), or directly under thebuildjob. Root-level is cleaner and recommended.Concretely, in
.github/workflows/rust.yml, add apermissions:block near the top, aftername: Rustand beforeon:. Set it to:No additional imports or dependencies are required, and this does not alter any existing build behavior. It only constrains what the automatically provided
GITHUB_TOKENcan do.