Barcode Betty 30fa99a717 ci(auth): add Grype scan step; document provenance/sbom OCI referrer limitation (CAR-1446) ...

- Insert anchore/scan-action@v5 step between Build and Push
- severity-cutoff: high, only-fixed: true (matches monorepo pattern)
- Add inline comment on provenance:false/sbom:false explaining OCI distribution
  spec >=1.1 limitation on git.farh.net registry

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-06-23 02:39:55 +00:00

.gitea/workflows

ci(auth): add Grype scan step; document provenance/sbom OCI referrer limitation (CAR-1446)

2026-06-23 02:39:55 +00:00

src

Add *.farh.net origins back to trustedOrigins

2026-05-25 09:43:43 +00:00

.env.example

feat(auth): enable email verification with Resend

2026-04-15 03:30:44 +00:00

.grype.yaml

Add CI workflow and Grype CVE ignores

2026-04-19 12:57:52 +00:00

.mcp.json

Add .mcp.json

2026-05-25 21:45:18 +00:00

Dockerfile

fix: remediate high-severity CVEs in Docker images

2026-04-14 23:51:42 +00:00

package-lock.json

feat(auth): enable email verification with Resend

2026-04-15 03:30:44 +00:00

package.json

feat(auth): enable email verification with Resend

2026-04-15 03:30:44 +00:00

tsconfig.json

feat: migrate authentication to Better-Auth (Phase 1)

2026-03-28 04:46:10 +00:00

S

Description

CartSnitch auth service — Better-Auth session management

270 KiB

Languages

TypeScript 91%

Dockerfile 9%