trending/ever-gauzy
1
0
Fork 0
mirror of https://github.com/ever-co/ever-gauzy.git synced 2026-10-02 01:54:50 +08:00
Code Issues Packages Projects Releases Wiki Activity
27,951 Commits 123 Branches 4,485 Tags
develop
Commit Graph
6 Commits
Author SHA1 Message Date
Ruslan Konviser 4c00bbf440 fix(downloads): address SonarCloud findings in the R2 mirror 
- Sort signed headers and manifest keys with an explicit byte comparator.
  SigV4 needs byte order; localeCompare (what Sonar suggested) is locale-aware
  and would order some headers differently from the server, breaking signing.
- Copy before sorting the manifest keys instead of mutating in place.
- Sanitise remote-derived strings before logging them: release tags, asset names
  and error bodies come from outside this script, and a newline in one of them
  can forge log lines in the CI output.

Re-verified after the change: signed PUT + HEAD round-trip succeeds with valid
credentials and still fails with SignatureDoesNotMatch on a bad secret.
 2026-08-30 19:45:45 +02:00
Ruslan Konviser 72ad0bae47 feat(downloads): mirror desktop installers to R2 behind downloads.ever.co 
Adds scripts/mirror-releases-to-r2.mjs.
 2026-08-30 19:10:32 +02:00
Ruslan Konviser 0161d0128b fix: bound profile activity aggregation across databases 2026-08-24 23:29:36 +02:00
Ruslan Konviser 383787e8a6 refactor(timesheet): address profile activity review 2026-08-24 22:27:07 +02:00
Ruslan Konviser ec18672d64 fix(timesheet): harden profile concurrency proof 2026-08-24 22:26:47 +02:00
Ruslan Konviser 8eafdda89d test(timesheet): verify profile activity concurrency 2026-08-24 22:26:45 +02:00