-
Notifications
You must be signed in to change notification settings - Fork 8
lots of stuff #138
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Merged
lots of stuff #138
Changes from all commits
Commits
Show all changes
123 commits
Select commit
Hold shift + click to select a range
37b5de4
feat(ci): release drafter
itschip fe4ee9e
feat(app): wip organization
itschip ef3a1a3
feat(app/tokens): fix token dialog
itschip bab8f31
fix(ci): correct release config file
itschip 93eaad3
feat(app): update go to 1.24
itschip 9c44a75
fix(app): patch CVE-2025-30204
itschip b3b1143
feat(app): serve react app
itschip fd147ed
ci: remove template-name
itschip f2716d9
feat(web/organization): new org route
itschip d4d7b2a
feat: wip create organization
itschip 9db37c1
fix: migration issues
itschip c5c10df
feat(organization): fix org tables, session check
itschip d6cc5cd
update readme
itschip 37f98e6
fix readme
itschip 5fdb6c5
Update README.md
itschip dcdeb6e
feat(app/storage): storage table, storage api
itschip 65f9f3f
hey, you can upload files now
itschip c7a3070
feat: lies, now you can upload
itschip e85129a
ci(cd): attempt 1
itschip 810351b
ci(cd): attempt 2
itschip b3e2ad8
fix(ci): attempt 3
itschip ed91ecf
fix(web/organization): correct api endpoint
itschip da2aa61
Merge pull request #4 from fivemanage/fix/current-org-hook
itschip e7d8e1a
fix(web/data): ui imports
itschip f986a05
Merge pull request #5 from fivemanage/fix/imports
itschip 4422088
fix(ci): downgrade action
itschip ae98a68
fix(ci): v5 prerelease
itschip 99a33ff
fix(ci): attempt 4
itschip c8d8482
fix: now?
itschip 2ea6080
fix(ci): prelease test
itschip e277947
fix(ci): this should actually fix it
itschip 330645c
chore(web): clean up imports
itschip e4bc049
Merge pull request #6 from fivemanage/chore/imports
itschip 89dd9e7
feat(docker): update base image
itschip 45e312e
Merge pull request #7 from fivemanage/feat/dockerfile
itschip edcb74a
feat(ci/docker): this might work
itschip a2dfa5a
fix(docker): push dev image
itschip 44f7faa
feat(web/ui): rename these
itschip a3dcd21
Merge pull request #8 from fivemanage/feat/ui-renames
itschip 216ef2a
fix: conflicting files
itschip f9efc14
fix: rest of the conflicting files
itschip 1b448dc
feat(ci/docker): annotations
itschip b72ccaf
Merge pull request #9 from fivemanage/feat/more-docker
itschip 0c10ff7
ci(pre-release): update build-and-push
itschip b2a3333
Merge pull request #10 from fivemanage/fix/docker-action
itschip 29e5b62
fix(app): patch CVE-2025-22872
itschip 67ade47
ci(pre-release): remove arm64 platform
itschip 736481f
fix(ci): hopefully correct tag action
itschip 85ff4f3
Merge pull request #12 from fivemanage/tweak/remove-arm
itschip 7dc0731
Merge pull request #11 from fivemanage/chore/update-x-net
itschip 30200b4
ci(pre-release): actually set prerelease to true
itschip 7a432eb
Merge pull request #13 from fivemanage/fix/ci-preleae
itschip 0c7dfec
ci(prerelease): create annotations
itschip 73bce12
Merge pull request #14 from fivemanage/feat/docker-annotations
itschip d0345c7
update docs
itschip 3981cd3
ci(prerelease): sbom and provenance
itschip dfacd01
Merge pull request #15 from fivemanage/feat/make-docker-happy
itschip 7a677b3
feat(ci): add linux/arm64
itschip 975d1fa
Merge pull request #16 from fivemanage/feat/arm-image
itschip 5069462
add dependabot config
itschip 07eab7f
fix: update docker dir for dependabot
itschip 75cc966
chore(web): remove geist
itschip bd1f290
chore(deps): bump react-router from 7.1.5 to 7.6.0 in /web
dependabot[bot] 4a28722
chore(deps-dev): bump @typescript-eslint/eslint-plugin in /web
dependabot[bot] 6dd9020
Merge pull request #19 from fivemanage/dependabot/npm_and_yarn/web/re…
dependabot[bot] 9a115a2
chore(deps-dev): bump tailwindcss from 4.1.6 to 4.1.7 in /web
dependabot[bot] 9a62008
Merge pull request #27 from fivemanage/dependabot/npm_and_yarn/web/ty…
dependabot[bot] 021c6af
Merge pull request #17 from fivemanage/dependabot/npm_and_yarn/web/ta…
dependabot[bot] a23ba98
fea(app): update mimetype
itschip 0cd9502
fix(web): eslint config
itschip de76204
Merge pull request #29 from fivemanage/fix/typescript-eslint
itschip b0df980
ci(lint): lint web and go code
itschip 67a6b02
ci(lint): fix syntax error for working dir
itschip b78ceef
ci(lint): this should be the correct syntax
itschip e08d88a
ci(lint): correct working dir
itschip aee2fa3
ci(lint): set dep path for node setup
itschip 5e6cb5b
feat: cache stuff
itschip 9987b46
feat: add orgId to tokens
itschip 1efddc0
feat: logger
itschip 3be51fa
feat(database): retry connection
itschip 75cb5b2
fix(internal/database): pg connection error handling
itschip 5f34632
Merge pull request #36 from fivemanage/db-startup
itschip 57dd770
fix(token): hmac for api token hash
itschip 52a3280
feat(app): media api working
itschip 0a6a78f
feat(deployments): update docker-compose file
itschip b0b85ef
feat(database): remove mysql
itschip 63d9e4c
Merge pull request #43 from fivemanage/feat/add-pg
itschip 115c3a4
feat(cmd): update default dsn value
itschip 7f6bac8
feat(app): add logs api and kafka queue
itschip 6766c58
Merge pull request #42 from fivemanage/feat/logs-api
itschip 09d365a
fix(logs): kafka & clickhouse connections
itschip 75437e3
fix(web): build errors
itschip 4aa8bac
fix: remove debug prints
itschip 0c8df1a
Merge pull request #55 from fivemanage/fix/debug-prints
itschip 86a8487
feat: clickhouse logs w/ kafka
itschip 5a4c10a
feat(service/log): break if we cant generate key
itschip aca0640
Merge pull request #61 from fivemanage/feat/clickhouse-logs
itschip 436db0e
chore: update readme & env.template
itschip 4547769
Merge pull request #63 from fivemanage/chore/update-readme
itschip aab5599
feat(http): add default dist
itschip b92a43b
chore(web): turn off only-export-components eslint
itschip d5d880d
Merge pull request #64 from fivemanage/fix/web-lint
itschip b3c257c
fix: go lint issues
itschip 5ee5d95
feat: update LICENSE to FSL
itschip 847e0ae
chore: update LICENSE to md
itschip 7702b88
feat(app): log ingest and query
itschip fb8d252
Merge pull request #68 from fivemanage/feat/dataset-and-logs
itschip 7d8c9ee
feat(app): improve auth
itschip 63ed8f5
Merge pull request #70 from fivemanage/feat/improve-auth
itschip a1c382e
Update the Login page (#71)
henkie2543545 ff4738d
chore(deps): bump react-hook-form from 7.56.4 to 7.60.0 in /web
dependabot[bot] ca513d7
Organization select clean (#72)
henkie2543545 4d4c4e0
Sidebar update (#73)
henkie2543545 f85c250
Add MinIO to the docker compose and .env.template (#74)
henkie2543545 3741208
Fix isLoading/isPending and also delete the redirect if already a org…
henkie2543545 6533d6f
Merge pull request #66 from fivemanage/dependabot/npm_and_yarn/web/re…
dependabot[bot] 8b04cdc
fix(web): OrganzationSelect colors
itschip edc044b
fix(web): set pnpm version, install deps
itschip b8f97cc
some logger stuff, minio support
itschip 59ae164
fix(storage): use s3 provider config flag (#85)
itschip dc8e4e2
fix(deployments): update docker-compose.yml
itschip 2b9d933
feat: dataset overview, logs stuff
itschip 8735c1a
OTel trace table
itschip File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1 @@ | ||
| web/node_modules |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,19 @@ | ||
| ADMIN_PASSWORD=password | ||
| DSN=postgres://postgres:root@localhost:5432/fivemanage-lite-dev?sslmode=disable | ||
|
|
||
| API_TOKEN_HMAC_SECRET=<32 bytes secret> | ||
|
|
||
| S3_PROVIDER=minio # minio, r2, s3 | ||
| AWS_ACCESS_KEY_ID=minioadmin | ||
| AWS_SECRET_ACCESS_KEY=minioadmin123 | ||
| AWS_ENDPOINT=http://localhost:9000 | ||
| AWS_BUCKET=lite-dev | ||
| AWS_REGION=eu-west-1 | ||
|
|
||
| CLICKHOUSE_HOST=localhost:19000 | ||
| CLICKHOUSE_DATABASE=default | ||
| CLICKHOUSE_USERNAME=default | ||
| CLICKHOUSE_PASSWORD=password | ||
|
|
||
| VERSION=dev # dev only | ||
| ENV=dev # dev only |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,14 @@ | ||
| version: 2 | ||
| updates: | ||
| - package-ecosystem: "npm" | ||
| directory: "/web" | ||
| schedule: | ||
| interval: "weekly" | ||
| - package-ecosystem: "docker" | ||
| directory: "/build/package" | ||
| schedule: | ||
| interval: "weekly" | ||
| - package-ecosystem: "gomod" | ||
| directory: "/" | ||
| schedule: | ||
| interval: "weekly" |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,20 @@ | ||
| name-template: 'Nightly Release' | ||
| categories: | ||
| - title: 'Features' | ||
| labels: | ||
| - 'feature' | ||
| - 'feat' | ||
| - 'enhancement' | ||
| - title: 'Bug Fixes' | ||
| labels: | ||
| - 'fix' | ||
| - 'bugfix' | ||
| - 'bug' | ||
| - title: 'Maintenance' | ||
| label: 'chore' | ||
| change-template: '- $TITLE @$AUTHOR (#$NUMBER)' | ||
| change-title-escapes: '\<*_&' # You can add # and @ to disable mentions, and add ` to disable code blocks. | ||
| template: | | ||
| ## Changes | ||
|
|
||
| $CHANGES |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,57 @@ | ||
| name: Lint | ||
|
|
||
| on: | ||
| pull_request: | ||
| types: | ||
| - opened | ||
| - synchronize | ||
|
|
||
| jobs: | ||
| lint_frontend: | ||
| name: Lint frontend | ||
| runs-on: ubuntu-latest | ||
| defaults: | ||
| run: | ||
| working-directory: ./web | ||
|
|
||
| strategy: | ||
| matrix: | ||
| node-version: [22] | ||
|
|
||
| steps: | ||
| - uses: actions/checkout@v4 | ||
|
|
||
| - name: Install pnpm | ||
| uses: pnpm/action-setup@v4 | ||
| with: | ||
| version: 10 | ||
|
|
||
| - name: Use Node.js ${{ matrix.node-version }} | ||
| uses: actions/setup-node@v4 | ||
| with: | ||
| node-version: ${{ matrix.node-version }} | ||
| cache-dependency-path: ./web/pnpm-lock.yaml | ||
| cache: 'pnpm' | ||
|
|
||
| - name: Install dependencies | ||
| run: pnpm install | ||
|
|
||
| - name: Run lint | ||
| run: pnpm lint | ||
|
|
||
| lint_backend: | ||
| name: Lint backend | ||
| runs-on: ubuntu-latest | ||
| permissions: | ||
| contents: read | ||
|
|
||
| steps: | ||
| - name: Checkout code | ||
| uses: actions/checkout@v4 | ||
| - uses: actions/setup-go@v5 | ||
| with: | ||
| go-version: stable | ||
| - name: golangci-lint | ||
| uses: golangci/golangci-lint-action@v8 | ||
| with: | ||
| version: v2.1 | ||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,85 @@ | ||
| name: Pre Release | ||
|
|
||
| on: | ||
| pull_request: | ||
| types: | ||
| - closed | ||
| branches: | ||
| - develop | ||
|
|
||
| permissions: | ||
| contents: read | ||
|
|
||
| env: | ||
| dockerImage: 'fivemanage/lite' | ||
|
|
||
| jobs: | ||
| release_nightly: | ||
| if: github.event.pull_request.merged == true | ||
| permissions: | ||
| contents: write | ||
| pull-requests: write | ||
| runs-on: ubuntu-latest | ||
|
|
||
| steps: | ||
| - uses: actions/checkout@v4 | ||
| with: | ||
| fetch-depth: '0' | ||
|
|
||
| # Docker stuff | ||
| - name: Login to Docker Hub | ||
| uses: docker/login-action@v3 | ||
| with: | ||
| username: ${{ secrets.DOCKER_USERNAME }} | ||
| password: ${{ secrets.DOCKER_PASSWORD }} | ||
|
|
||
| - name: Set up QEMU | ||
| uses: docker/setup-qemu-action@v3 | ||
|
|
||
| - name: Set up Docker Buildx | ||
| uses: docker/setup-buildx-action@v3 | ||
|
|
||
|
|
||
| - name: Bump version and push tag | ||
| uses: anothrNick/github-tag-action@v1 | ||
| id: tag | ||
| env: | ||
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | ||
| RELEASE_BRANCHES: master | ||
| MAJOR_STRING_TOKEN: "BREAKING*CHANGE|*#major*" | ||
| MINOR_STRING_TOKEN: "*feat*|*#minor*" | ||
| PATCH_STRING_TOKEN: "*fix*|*chore*|*docs*|*update*|#patch|*tweak*" | ||
| DEFAULT_BRANCH: develop | ||
| PRERELEASE: true | ||
|
|
||
| - name: Extract metadata | ||
| id: meta | ||
| uses: docker/metadata-action@v5 | ||
| with: | ||
| images: ${{ env.dockerImage }} | ||
| env: | ||
| DOCKER_METADATA_ANNOTATIONS_LEVELS: manifest,index | ||
|
|
||
| # more docker stuff | ||
| - name: Build and push Docker image | ||
| uses: docker/build-push-action@v6 | ||
| with: | ||
| file: ./build/package/Dockerfile | ||
| platforms: linux/amd64,linux/arm64 | ||
| sbom: true | ||
| push: true | ||
| provenance: mode=max | ||
| annotations: ${{ steps.meta.outputs.annotations }} | ||
| tags: | | ||
| ${{ env.dockerImage }}:${{ steps.tag.outputs.new_tag }} | ||
|
|
||
| - uses: release-drafter/release-drafter@v6 | ||
| with: | ||
| config-name: release-drafter.yml | ||
| name: 'Nightly Release ${{ steps.tag.outputs.new_tag }}' | ||
| tag: ${{ steps.tag.outputs.new_tag }} | ||
| version: ${{ steps.tag.outputs.new_tag }} | ||
| prerelease: true | ||
| publish: true | ||
| env: | ||
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,5 +1,4 @@ | ||
| # Logs | ||
| logs | ||
| *.log | ||
| npm-debug.log* | ||
| yarn-debug.log* | ||
|
|
||
Oops, something went wrong.
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Check warning
Code scanning / CodeQL
Workflow does not contain permissions Medium
Copilot Autofix
AI 2 months ago
To fix the problem, add a
permissionsblock to thelint_frontendjob in.github/workflows/lint.yml, matching the minimal set required for the job:contents: read. This should be placed on the same level as other job keys likeruns-onanddefaults. By settingpermissions: contents: read, we ensure the job cannot inadvertently write to repository contents or access other scopes unnecessarily. No further changes are needed, as this addition does not affect job functionality.