fix(security): complete sanitizeLogValue sweep, DOMParser stripHtml, least-privilege CI permissions, pin Dockerfile image

This commit is contained in:
neon
2026-05-14 23:37:32 +00:00
parent 86147ead2c
commit 3138cf3a4d
38 changed files with 322 additions and 108 deletions
+2 -2
View File
@@ -1,7 +1,7 @@
ARG NODE_IMAGE=node:24.11-alpine
ARG NODE_IMAGE=node:24.11-alpine@sha256:682368d8253e0c3364b803956085c456a612d738bd635926d73fa24db3ce53d7
FROM ${NODE_IMAGE} AS base
RUN npm install -g pnpm@10
RUN npm install -g pnpm@10.33.4
# Stage 1: Build client
FROM base AS client-builder