fix: Remove car_id property from adminAddVehicle call to fix TypeScript error
This commit is contained in:
24
scripts/git-hooks/pre-push
Normal file
24
scripts/git-hooks/pre-push
Normal file
@@ -0,0 +1,24 @@
|
||||
#!/bin/bash
|
||||
# Git Pre-Push Hook - Security Audit
|
||||
# Install: cp scripts/git-hooks/pre-push .git/hooks/ && chmod +x .git/hooks/pre-push
|
||||
|
||||
echo "Running security audit before push..."
|
||||
|
||||
cd frontend
|
||||
AUDIT=$(npm audit --json 2>/dev/null || true)
|
||||
CRITICAL=$(echo "$AUDIT" | grep -o '"critical":[0-9]*' | head -1 | cut -d: -f2)
|
||||
|
||||
if [ "${CRITICAL:-0}" -gt 0 ]; then
|
||||
echo ""
|
||||
echo "========================================"
|
||||
echo " PUSH BLOCKED: Critical vulnerabilities found!"
|
||||
echo "========================================"
|
||||
npm audit 2>/dev/null | grep -A 3 "critical"
|
||||
echo ""
|
||||
echo "Run 'npm audit fix' or update packages manually."
|
||||
echo "To bypass: git push --no-verify"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
echo "Security check passed."
|
||||
exit 0
|
||||
61
scripts/security-audit.sh
Normal file
61
scripts/security-audit.sh
Normal file
@@ -0,0 +1,61 @@
|
||||
#!/bin/bash
|
||||
# Security Audit Script for AutonetSellCar.com
|
||||
# Run: ./scripts/security-audit.sh
|
||||
|
||||
set -e
|
||||
|
||||
echo "=========================================="
|
||||
echo " Security Audit - $(date '+%Y-%m-%d %H:%M')"
|
||||
echo "=========================================="
|
||||
|
||||
# Colors
|
||||
RED='\033[0;31m'
|
||||
GREEN='\033[0;32m'
|
||||
YELLOW='\033[1;33m'
|
||||
NC='\033[0m'
|
||||
|
||||
CRITICAL=0
|
||||
HIGH=0
|
||||
|
||||
# Frontend audit
|
||||
echo -e "\n${YELLOW}[1/2] Frontend (Next.js)${NC}"
|
||||
cd frontend
|
||||
AUDIT_RESULT=$(npm audit --json 2>/dev/null || true)
|
||||
FRONT_CRITICAL=$(echo "$AUDIT_RESULT" | grep -o '"critical":[0-9]*' | head -1 | cut -d: -f2)
|
||||
FRONT_HIGH=$(echo "$AUDIT_RESULT" | grep -o '"high":[0-9]*' | head -1 | cut -d: -f2)
|
||||
|
||||
if [ "${FRONT_CRITICAL:-0}" -gt 0 ] || [ "${FRONT_HIGH:-0}" -gt 0 ]; then
|
||||
echo -e "${RED}VULNERABILITIES FOUND:${NC}"
|
||||
npm audit --omit=dev 2>/dev/null | grep -A 5 "Severity:"
|
||||
CRITICAL=$((CRITICAL + ${FRONT_CRITICAL:-0}))
|
||||
HIGH=$((HIGH + ${FRONT_HIGH:-0}))
|
||||
else
|
||||
echo -e "${GREEN}No critical/high vulnerabilities${NC}"
|
||||
fi
|
||||
cd ..
|
||||
|
||||
# Backend audit (pip-audit)
|
||||
echo -e "\n${YELLOW}[2/2] Backend (Python)${NC}"
|
||||
cd backend
|
||||
if command -v pip-audit &> /dev/null; then
|
||||
pip-audit 2>/dev/null || echo "pip-audit check complete"
|
||||
else
|
||||
echo "pip-audit not installed. Run: pip install pip-audit"
|
||||
fi
|
||||
cd ..
|
||||
|
||||
# Summary
|
||||
echo -e "\n=========================================="
|
||||
echo " Summary"
|
||||
echo "=========================================="
|
||||
if [ "$CRITICAL" -gt 0 ]; then
|
||||
echo -e "${RED}CRITICAL: $CRITICAL${NC}"
|
||||
fi
|
||||
if [ "$HIGH" -gt 0 ]; then
|
||||
echo -e "${RED}HIGH: $HIGH${NC}"
|
||||
fi
|
||||
if [ "$CRITICAL" -eq 0 ] && [ "$HIGH" -eq 0 ]; then
|
||||
echo -e "${GREEN}All clear - No critical/high vulnerabilities${NC}"
|
||||
fi
|
||||
|
||||
exit $((CRITICAL + HIGH))
|
||||
32
scripts/weekly-security-check.sh
Normal file
32
scripts/weekly-security-check.sh
Normal file
@@ -0,0 +1,32 @@
|
||||
#!/bin/bash
|
||||
# Weekly Security Check - Run via cron
|
||||
# Crontab: 0 9 * * 1 /opt/autonet/scripts/weekly-security-check.sh >> /var/log/security-audit.log 2>&1
|
||||
|
||||
PROJECTS=(
|
||||
"/opt/autonet/production/frontend"
|
||||
"/opt/autonet/staging/frontend"
|
||||
)
|
||||
|
||||
DATE=$(date '+%Y-%m-%d %H:%M')
|
||||
echo "=========================================="
|
||||
echo "Weekly Security Audit - $DATE"
|
||||
echo "=========================================="
|
||||
|
||||
for PROJECT in "${PROJECTS[@]}"; do
|
||||
if [ -d "$PROJECT" ]; then
|
||||
echo -e "\nChecking: $PROJECT"
|
||||
cd "$PROJECT"
|
||||
|
||||
# Check if npm is available
|
||||
if command -v npm &> /dev/null; then
|
||||
npm audit --omit=dev 2>/dev/null | grep -E "(critical|high|Severity)" | head -20
|
||||
elif [ -f "package-lock.json" ]; then
|
||||
# Use npx if npm not in PATH
|
||||
npx --yes npm-audit-ci --critical 2>/dev/null || echo "Audit complete"
|
||||
fi
|
||||
fi
|
||||
done
|
||||
|
||||
echo -e "\n=========================================="
|
||||
echo "Audit complete"
|
||||
echo "=========================================="
|
||||
Reference in New Issue
Block a user