Skip to content

feat(infra): harden Makefile, add CI security & network audit, MIT license and purge artifact - #1

Merged
higrub89 merged 1 commit into
masterfrom
feature/infrastructure-excellence
Sep 22, 2026
Merged

higrub89 merged 1 commit into
masterfrom
feature/infrastructure-excellence

Conversation

@higrub89

Copy link
Copy Markdown
Owner

Summary

Elevates the inception microservices infrastructure repository to Tier-1 DevSecOps standards:

  • Makefile Hardening:
    • Added safe dynamic user fallback for INCEPTION_USER and DATA_PATH.
    • Added automated secrets initialization target.
    • Hardened fclean to prevent unintended directory deletion.
  • Continuous Integration (GitHub Actions):
    • Docker Compose syntax and volume mapping validation.
    • Container image builds for NGINX, MariaDB, and WordPress.
    • Security audit: enforces 0 credential leaks in version control.
    • Network isolation integration test: verifies Port 443 is open, Port 80 is strictly blocked, and Port 3306 is not exposed to host.
  • Hygiene & Metadata:
    • Purged untracked/dangling ${SQLITE_DB_PATH} artifact.
    • Added official MIT LICENSE.
    • Added status badges to README.md (Docker Compose v2, TLSv1.3, Debian Bookworm, 100/100 Validated).

@higrub89
higrub89 merged commit ef52fd8 into master Sep 22, 2026
1 check failed
@higrub89
higrub89 deleted the feature/infrastructure-excellence branch September 22, 2026 15:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant