Skip to content

feat: initialize core infrastructure, persistence, and security layers#16

Merged
alxsuv merged 5 commits into
mainfrom
dev
Feb 15, 2026
Merged

feat: initialize core infrastructure, persistence, and security layers#16
alxsuv merged 5 commits into
mainfrom
dev

Conversation

@alxsuv

@alxsuv alxsuv commented Feb 14, 2026

Copy link
Copy Markdown
Member
  • Integrate PostgreSQL with Agroal connection pooling.
  • Add Flyway migration support for schema versioning.
  • Implement a checkpoint mechanism to persist state after node completion.
  • Implement JWT auth, CORS, and TLS configuration.
  • Add global exception mapper for unified error responses
  • Prevent potential injection or malformed input processing.

- Integrate PostgreSQL with Agroal connection pooling.
- Add Flyway migration support for schema versioning.
- Implement a checkpoint mechanism to persist state after node completion.
- Implement JWT auth, CORS, and TLS configuration.
- Add global exception mapper for unified error responses
- Upgrade Testcontainers to 1.21.4 to support new Docker Engine (API 1.44).
- Fix native image build: Added missing -Dquarkus.package.type=native flag to the Gradle build command.
- Apply spotless rules.
- Add @ValidID custom constraint to satisfy CodeQL security requirements.
- Prevent potential injection or malformed input processing.
…itization

- Add @ValidWorkflow and ValidWorkflowValidator for deep structural validation.
- Enforce safe-ID patterns and reject dangerous control characters in nodes.
- Add LogSanitizer to prevent log injection by stripping CRLF from input.
- Resolve CodeQL "Improper Input Validation" and "Log Injection" vulnerabilities.
- Add a custom validator to verify message body integrity, enforce byte-size limits, and strip dangerous control characters at the API boundary.
- Resolve CodeQL "Log Injection" warning
@alxsuv alxsuv merged commit 5404933 into main Feb 15, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants