3 Commits

Author	SHA1	Message	Date
Jonathan Flatt	c51eba4f0f	Add deployment workflow and scripts for self-hosted runner ... - Add GitHub Actions deployment workflow for staging and production - Add deployment scripts for automated deployments - Add GitHub runner management scripts - Add staging docker-compose configuration - Enable automatic deployments on push to main (staging) and version tags (production)	2025-05-23 23:39:33 +00:00
Jonathan Flatt	7e545475d0	security: Implement comprehensive credential protection system ... Replace environment variable credentials with secure file-based mounting to prevent runtime credential exposure that was causing security leaks. Key security improvements: - Docker secrets integration for credential mounting - Secure credential loader utility (secureCredentials.js) - Enhanced logging redaction for all credential types - Pre-commit security scanning with multiple tools - Automated security audit workflow and scripts - File-based credentials with proper 600 permissions Services updated: - githubController.js: Use secure credentials for webhook verification - claudeService.js: Use secure credentials for GitHub/Anthropic APIs - githubService.js: Use secure credentials for GitHub API calls - logger.js: Enhanced redaction patterns for all credential types New security infrastructure: - ./scripts/setup/setup-secure-credentials.sh: Setup script for secure credentials - ./scripts/security/credential-audit.sh: Comprehensive security audit - .github/workflows/security-audit.yml: Automated security scanning - docker-compose.yml: Updated to use Docker secrets by default - k8s/secrets.yaml: Kubernetes secrets configuration - systemd/claude-webhook.service: Systemd service configuration This eliminates credential exposure in: - Environment variables and process lists - Container logs and debug output - Git commits and PR comments - Runtime error messages 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>	2025-05-21 23:03:07 -05:00
Jonathan Flatt	4cdad828c4	Reorganize scripts into structured directory layout and consolidate functionality ... This commit reorganizes all scripts in the repository into a more structured directory layout for better maintainability: - Categorizes scripts by functionality (setup, build, aws, runtime, security, utils) - Organizes test scripts into logical categories - Consolidates redundant scripts with unified interfaces - Adds backward compatibility wrappers - Adds detailed SCRIPTS.md documentation 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>	2025-05-21 00:19:07 +00:00