Skip to content

fix(ci): resolve failing workflows across rust, web, and vscode #2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
chojuninengu merged 8 commits into from
Apr 4, 2026
Merged

fix(ci): resolve failing workflows across rust, web, and vscode #2

Show file tree
Hide file tree
Changes from 5 commits
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
f2feabb
feat: implement Axum API server and premium SvelteKit 5 dashboard wit…
chojuninengu Apr 2, 2026
c63dc1a
docs: update AGENTS.md and add CHANGELOG.md for Phase 2 completion
chojuninengu Apr 2, 2026
c18eb62
style: reformat code and imports for consistency across the codebase
chojuninengu Apr 4, 2026
667982e
chore: add ESLint flat config and update dependencies for improved li…
chojuninengu Apr 4, 2026
dfc9e5f
refactor: add keyed each blocks, configure Vitest, and update ESLint …
chojuninengu Apr 4, 2026
6e64795
perf: optimize regex initialization using OnceLock and implement secr…
chojuninengu Apr 4, 2026
e8d07a3
chore: bump version to v0.1.1-rc.1
chojuninengu Apr 4, 2026
0c2432e
fix(scanner): implement FromStr for Language to resolve clippy error
chojuninengu Apr 4, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .gitignore
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,10 +5,10 @@

# Rust
/target
Cargo.lock

# Node / Next.js
# Node / SvelteKit
node_modules
.svelte-kit
.next
out
dist
Expand Down
7 changes: 5 additions & 2 deletions AGENTS.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -25,6 +25,7 @@ zenvra/
│ └── web/ # SvelteKit 5 frontend — scanner UI, dashboard, auth, billing
├── crates/
│ ├── scanner/ # Rust core: SAST engine, SCA, secrets detection, CVE lookup, AI provider layer
│ ├── server/ # Rust API: Axum-based REST server for web integration
│ └── cli/ # Rust CLI: `zenvra scan`, `zenvra report`, `zenvra auth`
├── extensions/
│ └── vscode/ # VS Code extension: inline diagnostics, hover fixes
Expand Down Expand Up @@ -219,9 +220,11 @@ STRIPE_WEBHOOK_SECRET=whsec_...

## Current Status

This repository is in **active MVP development**. The scan engine foundation, multi-AI provider system, and secrets detection are being built. First milestone: working CLI scanner + web paste UI.
This repository is in **active MVP development**.
- **Phase 1 (Core Foundation)**: COMPLETE. Includes scan engine, AI provider system, and secrets detection.
- **Phase 2 (Frontend & API Integration)**: COMPLETE. Includes Axum API server and SvelteKit 5 dashboard.

When in doubt about a decision, open a GitHub Discussion rather than assuming. We build deliberately.
Next milestone: Phase 3 (SSE Streaming & Backend Polish).

---

Expand Down
22 changes: 22 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,22 @@
# Changelog

All notable changes to this project will be documented in this file.

The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

## [0.1.0-mvp] - 2026-04-02

### Added
- **API Server (`crates/server`)**: A new Axum-based REST API to bridge the scanner with the web.
- **SvelteKit 5 Frontend (`apps/web`)**: A premium, dark-mode dashboard with glassmorphism aesthetics.
- **Multi-AI Provider UI**: Support for switching AI providers (Anthropic, OpenAI, Google, Custom) directly from the scan interface.
- **Interactive Scan Workbench**: A code editor area for real-time vulnerability analysis.
- **Secrets Detection Engine**: Integrated 17+ regex patterns for cloud/API secrets with redaction.
- **Expanded SAST Rules**: Initial rules for SQL Injection and OS Command Injection.
- **Automated Release Workflow**: GitHub Actions to build and release the CLI binary on tag.

### Fixed
- **Vite 6 / Svelte 5 SSR**: Resolved CSS compilation and SSR "css is not a function" errors by optimizing Tailwind v4 usage and disabling SSR in dev mode.
- **Security**: Sanitized dummy secrets in test fixtures to comply with GitHub Push Protection.
- **Project Structure**: Consolidated workspace members and synchronized dependency versions.
Loading
Loading