131868bdca
Major security, observability, and configuration improvements:
## Security Hardening
- Implemented configurable CORS (no more wildcards)
- Added comprehensive auth middleware for admin endpoints
- Enhanced webhook HMAC validation
- Added input validation and rate limiting
- Security headers and CSP policies
## Configuration Management
- Made N8N webhook URL configurable (WHOOSH_N8N_BASE_URL)
- Replaced all hardcoded endpoints with environment variables
- Added feature flags for LLM vs heuristic composition
- Gitea fetch hardening with EAGER_FILTER and FULL_RESCAN options
## API Completeness
- Implemented GetCouncilComposition function
- Added GET /api/v1/councils/{id} endpoint
- Council artifacts API (POST/GET /api/v1/councils/{id}/artifacts)
- /admin/health/details endpoint with component status
- Database lookup for repository URLs (no hardcoded fallbacks)
## Observability & Performance
- Added OpenTelemetry distributed tracing with goal/pulse correlation
- Performance optimization database indexes
- Comprehensive health monitoring
- Enhanced logging and error handling
## Infrastructure
- Production-ready P2P discovery (replaces mock implementation)
- Removed unused Redis configuration
- Enhanced Docker Swarm integration
- Added migration files for performance indexes
## Code Quality
- Comprehensive input validation
- Graceful error handling and failsafe fallbacks
- Backwards compatibility maintained
- Following security best practices
🤖 Generated with [Claude Code](https://claude.ai/code)
Co-Authored-By: Claude <noreply@anthropic.com>
121 lines
4.4 KiB
Makefile
121 lines
4.4 KiB
Makefile
SOURCE ?= file go_bindata github github_ee bitbucket aws_s3 google_cloud_storage godoc_vfs gitlab
|
|
DATABASE ?= postgres mysql redshift cassandra spanner cockroachdb yugabytedb clickhouse mongodb sqlserver firebird neo4j pgx pgx5 rqlite
|
|
DATABASE_TEST ?= $(DATABASE) sqlite sqlite3 sqlcipher
|
|
VERSION ?= $(shell git describe --tags 2>/dev/null | cut -c 2-)
|
|
TEST_FLAGS ?=
|
|
REPO_OWNER ?= $(shell cd .. && basename "$$(pwd)")
|
|
COVERAGE_DIR ?= .coverage
|
|
|
|
build:
|
|
CGO_ENABLED=0 go build -ldflags='-X main.Version=$(VERSION)' -tags '$(DATABASE) $(SOURCE)' ./cmd/migrate
|
|
|
|
build-docker:
|
|
CGO_ENABLED=0 go build -a -o build/migrate.linux-386 -ldflags="-s -w -X main.Version=${VERSION}" -tags "$(DATABASE) $(SOURCE)" ./cmd/migrate
|
|
|
|
build-cli: clean
|
|
-mkdir ./cli/build
|
|
cd ./cmd/migrate && CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -a -o ../../cli/build/migrate.linux-amd64 -ldflags='-X main.Version=$(VERSION) -extldflags "-static"' -tags '$(DATABASE) $(SOURCE)' .
|
|
cd ./cmd/migrate && CGO_ENABLED=0 GOOS=linux GOARCH=arm GOARM=7 go build -a -o ../../cli/build/migrate.linux-armv7 -ldflags='-X main.Version=$(VERSION) -extldflags "-static"' -tags '$(DATABASE) $(SOURCE)' .
|
|
cd ./cmd/migrate && CGO_ENABLED=0 GOOS=linux GOARCH=arm64 go build -a -o ../../cli/build/migrate.linux-arm64 -ldflags='-X main.Version=$(VERSION) -extldflags "-static"' -tags '$(DATABASE) $(SOURCE)' .
|
|
cd ./cmd/migrate && CGO_ENABLED=0 GOOS=darwin GOARCH=amd64 go build -a -o ../../cli/build/migrate.darwin-amd64 -ldflags='-X main.Version=$(VERSION) -extldflags "-static"' -tags '$(DATABASE) $(SOURCE)' .
|
|
cd ./cmd/migrate && CGO_ENABLED=0 GOOS=windows GOARCH=386 go build -a -o ../../cli/build/migrate.windows-386.exe -ldflags='-X main.Version=$(VERSION) -extldflags "-static"' -tags '$(DATABASE) $(SOURCE)' .
|
|
cd ./cmd/migrate && CGO_ENABLED=0 GOOS=windows GOARCH=amd64 go build -a -o ../../cli/build/migrate.windows-amd64.exe -ldflags='-X main.Version=$(VERSION) -extldflags "-static"' -tags '$(DATABASE) $(SOURCE)' .
|
|
cd ./cli/build && find . -name 'migrate*' | xargs -I{} tar czf {}.tar.gz {}
|
|
cd ./cli/build && shasum -a 256 * > sha256sum.txt
|
|
cat ./cli/build/sha256sum.txt
|
|
|
|
|
|
clean:
|
|
-rm -r ./cli/build
|
|
|
|
|
|
test-short:
|
|
make test-with-flags --ignore-errors TEST_FLAGS='-short'
|
|
|
|
|
|
test:
|
|
@-rm -r $(COVERAGE_DIR)
|
|
@mkdir $(COVERAGE_DIR)
|
|
make test-with-flags TEST_FLAGS='-v -race -covermode atomic -coverprofile $$(COVERAGE_DIR)/combined.txt -bench=. -benchmem -timeout 20m'
|
|
|
|
|
|
test-with-flags:
|
|
@echo SOURCE: $(SOURCE)
|
|
@echo DATABASE_TEST: $(DATABASE_TEST)
|
|
|
|
@go test $(TEST_FLAGS) ./...
|
|
|
|
|
|
kill-orphaned-docker-containers:
|
|
docker rm -f $(shell docker ps -aq --filter label=migrate_test)
|
|
|
|
|
|
html-coverage:
|
|
go tool cover -html=$(COVERAGE_DIR)/combined.txt
|
|
|
|
|
|
list-external-deps:
|
|
$(call external_deps,'.')
|
|
$(call external_deps,'./cli/...')
|
|
$(call external_deps,'./testing/...')
|
|
|
|
$(foreach v, $(SOURCE), $(call external_deps,'./source/$(v)/...'))
|
|
$(call external_deps,'./source/testing/...')
|
|
$(call external_deps,'./source/stub/...')
|
|
|
|
$(foreach v, $(DATABASE), $(call external_deps,'./database/$(v)/...'))
|
|
$(call external_deps,'./database/testing/...')
|
|
$(call external_deps,'./database/stub/...')
|
|
|
|
|
|
restore-import-paths:
|
|
find . -name '*.go' -type f -execdir sed -i '' s%\"github.com/$(REPO_OWNER)/migrate%\"github.com/mattes/migrate%g '{}' \;
|
|
|
|
|
|
rewrite-import-paths:
|
|
find . -name '*.go' -type f -execdir sed -i '' s%\"github.com/mattes/migrate%\"github.com/$(REPO_OWNER)/migrate%g '{}' \;
|
|
|
|
|
|
# example: fswatch -0 --exclude .godoc.pid --event Updated . | xargs -0 -n1 -I{} make docs
|
|
docs:
|
|
-make kill-docs
|
|
nohup godoc -play -http=127.0.0.1:6064 </dev/null >/dev/null 2>&1 & echo $$! > .godoc.pid
|
|
cat .godoc.pid
|
|
|
|
|
|
kill-docs:
|
|
@cat .godoc.pid
|
|
kill -9 $$(cat .godoc.pid)
|
|
rm .godoc.pid
|
|
|
|
|
|
open-docs:
|
|
open http://localhost:6064/pkg/github.com/$(REPO_OWNER)/migrate
|
|
|
|
|
|
# example: make release V=0.0.0
|
|
release:
|
|
git tag v$(V)
|
|
@read -p "Press enter to confirm and push to origin ..." && git push origin v$(V)
|
|
|
|
echo-source:
|
|
@echo "$(SOURCE)"
|
|
|
|
echo-database:
|
|
@echo "$(DATABASE)"
|
|
|
|
|
|
define external_deps
|
|
@echo '-- $(1)'; go list -f '{{join .Deps "\n"}}' $(1) | grep -v github.com/$(REPO_OWNER)/migrate | xargs go list -f '{{if not .Standard}}{{.ImportPath}}{{end}}'
|
|
|
|
endef
|
|
|
|
|
|
.PHONY: build build-docker build-cli clean test-short test test-with-flags html-coverage \
|
|
restore-import-paths rewrite-import-paths list-external-deps release \
|
|
docs kill-docs open-docs kill-orphaned-docker-containers echo-source echo-database
|
|
|
|
SHELL = /bin/sh
|
|
RAND = $(shell echo $$RANDOM)
|
|
|