fix: Remove car_id property from adminAddVehicle call to fix TypeScript error

This commit is contained in:
AutonetSellCar Deploy
2026-02-01 21:16:03 +09:00
parent 5881126408
commit b340d338ff
31 changed files with 7071 additions and 1 deletions

View File

@@ -0,0 +1,24 @@
#!/bin/bash
# Git Pre-Push Hook - Security Audit
# Install: cp scripts/git-hooks/pre-push .git/hooks/ && chmod +x .git/hooks/pre-push
echo "Running security audit before push..."
cd frontend
AUDIT=$(npm audit --json 2>/dev/null || true)
CRITICAL=$(echo "$AUDIT" | grep -o '"critical":[0-9]*' | head -1 | cut -d: -f2)
if [ "${CRITICAL:-0}" -gt 0 ]; then
echo ""
echo "========================================"
echo " PUSH BLOCKED: Critical vulnerabilities found!"
echo "========================================"
npm audit 2>/dev/null | grep -A 3 "critical"
echo ""
echo "Run 'npm audit fix' or update packages manually."
echo "To bypass: git push --no-verify"
exit 1
fi
echo "Security check passed."
exit 0

61
scripts/security-audit.sh Normal file
View File

@@ -0,0 +1,61 @@
#!/bin/bash
# Security Audit Script for AutonetSellCar.com
# Run: ./scripts/security-audit.sh
set -e
echo "=========================================="
echo " Security Audit - $(date '+%Y-%m-%d %H:%M')"
echo "=========================================="
# Colors
RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
NC='\033[0m'
CRITICAL=0
HIGH=0
# Frontend audit
echo -e "\n${YELLOW}[1/2] Frontend (Next.js)${NC}"
cd frontend
AUDIT_RESULT=$(npm audit --json 2>/dev/null || true)
FRONT_CRITICAL=$(echo "$AUDIT_RESULT" | grep -o '"critical":[0-9]*' | head -1 | cut -d: -f2)
FRONT_HIGH=$(echo "$AUDIT_RESULT" | grep -o '"high":[0-9]*' | head -1 | cut -d: -f2)
if [ "${FRONT_CRITICAL:-0}" -gt 0 ] || [ "${FRONT_HIGH:-0}" -gt 0 ]; then
echo -e "${RED}VULNERABILITIES FOUND:${NC}"
npm audit --omit=dev 2>/dev/null | grep -A 5 "Severity:"
CRITICAL=$((CRITICAL + ${FRONT_CRITICAL:-0}))
HIGH=$((HIGH + ${FRONT_HIGH:-0}))
else
echo -e "${GREEN}No critical/high vulnerabilities${NC}"
fi
cd ..
# Backend audit (pip-audit)
echo -e "\n${YELLOW}[2/2] Backend (Python)${NC}"
cd backend
if command -v pip-audit &> /dev/null; then
pip-audit 2>/dev/null || echo "pip-audit check complete"
else
echo "pip-audit not installed. Run: pip install pip-audit"
fi
cd ..
# Summary
echo -e "\n=========================================="
echo " Summary"
echo "=========================================="
if [ "$CRITICAL" -gt 0 ]; then
echo -e "${RED}CRITICAL: $CRITICAL${NC}"
fi
if [ "$HIGH" -gt 0 ]; then
echo -e "${RED}HIGH: $HIGH${NC}"
fi
if [ "$CRITICAL" -eq 0 ] && [ "$HIGH" -eq 0 ]; then
echo -e "${GREEN}All clear - No critical/high vulnerabilities${NC}"
fi
exit $((CRITICAL + HIGH))

View File

@@ -0,0 +1,32 @@
#!/bin/bash
# Weekly Security Check - Run via cron
# Crontab: 0 9 * * 1 /opt/autonet/scripts/weekly-security-check.sh >> /var/log/security-audit.log 2>&1
PROJECTS=(
"/opt/autonet/production/frontend"
"/opt/autonet/staging/frontend"
)
DATE=$(date '+%Y-%m-%d %H:%M')
echo "=========================================="
echo "Weekly Security Audit - $DATE"
echo "=========================================="
for PROJECT in "${PROJECTS[@]}"; do
if [ -d "$PROJECT" ]; then
echo -e "\nChecking: $PROJECT"
cd "$PROJECT"
# Check if npm is available
if command -v npm &> /dev/null; then
npm audit --omit=dev 2>/dev/null | grep -E "(critical|high|Severity)" | head -20
elif [ -f "package-lock.json" ]; then
# Use npx if npm not in PATH
npx --yes npm-audit-ci --critical 2>/dev/null || echo "Audit complete"
fi
fi
done
echo -e "\n=========================================="
echo "Audit complete"
echo "=========================================="