CI/CD
CI runs frontend, backend, Docker, security, and E2E checks.
Webapp checks
npm run lint --workspace=apps/webapp
npm run test --workspace=apps/webapp
npm run build --workspace=apps/webapp
CI also runs Vitest coverage from apps/webapp.
Backend checks
Backend CI uses Python 3.11 with Redis/Postgres services and runs unit and integration tests.
Representative commands:
cd backend/core-api
python -m pytest tests/test_tasks_api.py -v
python -m pytest tests/test_*_api.py -v
python -m pytest -m integration tests/integration/ -v
Security checks
Current security workflows include:
- CodeQL
- ZAP DAST
- npm audit
- Python dependency safety audit
- Trivy Docker image scans
- Dependabot