infra/.woodpecker
Viktor Barzin 410c893647 fix(provision): security hardening from code review
- Add input validation: username regex + email format check in pipeline
- Quote variables in .provision-env to prevent shell injection
- Remove dead source command (each Woodpecker command is separate shell)
- Use jq to build JSON payloads (prevents injection via group names)
- Clean up git-crypt key on failure (use ; instead of &&)
- Add Kyverno ndots lifecycle ignore to webhook-handler deployment
2026-03-18 21:25:03 +00:00
..
build-cli.yml fix: CI pipeline - disable corrupted cache, add pull before push 2026-03-15 22:51:08 +00:00
default.yml extract remaining 19 modules from platform, complete stack split [ci skip] 2026-03-17 21:42:16 +00:00
k8s-portal.yml add generic multi-user cluster onboarding system 2026-03-15 22:23:36 +00:00
provision-user.yml fix(provision): security hardening from code review 2026-03-18 21:25:03 +00:00
renew-tls.yml [ci skip] phase 5+6: update CI pipelines for SOPS, add sensitive=true to secret vars 2026-03-07 14:30:36 +00:00