feat(security): implement end-to-end security pillar#34

Merged

Arzu-N merged 50 commits into

mainfrom

feature/security-pillar

Jun 30, 2026

Commits on Jun 28, 2026

Commits on Jun 29, 2026

test: decouple SpringBootTest from the integration base and remove redundant exclude configurations
Arzu-N
committed
test: refactor integration tests with active profiles and testcontainers
Arzu-N
committed
test: isolate test context with application-test.yml and disable auto-configuration for CI
Arzu-N
committed
test: add classes parameter to @SpringBootTest in worker module
Arzu-N
committed
test: add @ComponentScan annotation to CleatWorkerApplicationTests
Arzu-N
committed
test: add @ComponentScan annotation to CleatApiApplicationTests
Arzu-N
committed
test: clean integration test context and remove redundant mock beans
Arzu-N
committed
test: remove auto-configuration exclusion to allow Testcontainers to manage datasource
Arzu-N
committed
test: resolve NoUniqueBeanDefinitionException by providing primary datasource in test configuration
Arzu-N
committed
test: remove redundant application-test.properties configurations to rely on @ServiceConnection
Arzu-N
committed
test: add @EnableJpaRepository and @EntityScan to fix multi-module bean discovery
Arzu-N
committed
test: remove @EntityScan and @EnableJpaRepositories from integration tests
Arzu-N
committed
test: add @EntityScan and @EnableJpaRepositories to CleatWorkerApllicationTests
Arzu-N
committed
test: add @EntityScan and @EnableJpaRepositories(basePackages=dev.cleat) to CleatWorkerApllicationTests(basePackages=dev.cleat)
Arzu-N
committed
fix(test): resolve Spring context wiring issues in multi-module build
Arzu-N
committed
test: add properties parameter to @SpringBootTest
Arzu-N
committed
test: add classes parameter to @SpringBootTest in CleatApiApplication
Arzu-N
committed
test: isolate test contexts via ComponentScan filters
Arzu-N
committed
test: isolate test contexts with dedicated TestConfigs
Arzu-N
committed
fix(tests): resolve bean conflicts with context isolation
Arzu-N
committed
fix(tests): resolve context contamination with DirtiesContext
Arzu-N
committed
test: add webEnvironment parameter to @SpringBootTest
Arzu-N
committed
test: add static modifier to containers in AbstractIntegrationTest
Arzu-N
committed
fix(spring-context): scope scanBasePackages in api and worker apps
Arzu-N
committed
fix(spring-context): add dev.cleat.common package to @SpringBootApplication in worker apps
Arzu-N
committed
fix(spring-context): add @EntityScan and @EnableJpaRepositories to CleatWorkerApplication in worker module
Arzu-N
committed
refactor(exception): improve security and logging in GlobalExceptionHandler
Arzu-N
committed
refactor(dto): remove 'priority' field from VulnerabilityRequestDto to prevent client manipulation
Arzu-N
committed
refactor(domain): add canonical contructor to Vulnerability record to enforce non-null cvss and severity
Arzu-N
committed
fix(test): update test data in VulnerabilityScannerTest to provide valid,non-null arguments for Vulnerability constructor
Arzu-N
committed
fix(test): provide mandatory 'cvss','kev' and 'severity' values in test entities to satisfy Vulnerability constructor constraints
Arzu-N
committed
fix(scanning): correct typo causing compilation error
Arzu-N
committed
refactor(persistence): add @PrePersist to populate detectedAt automatically
Arzu-N
committed
refactor(api): improve exception handling in GlobalExceptionHandler
Arzu-N
committed
refactor(migration): remove DEFAULT 'main' from code_scan_alerts.branch column
Arzu-N
committed
fix(migartion): remove DEFAULT from code_scan_alerts.branch column
Arzu-N
committed
fix(scanning): delete verify() method from CodeScanAlertScannerTest to resolve test problem
Arzu-N
committed
refactor(scanning): input validation moved out of try block to improve error handling
Arzu-N
committed
test(scanning): update unit test to verify persistence calls via verify()
Arzu-N
committed
test(scanning): refine unit test in VulnerabilityScannerTest
Arzu-N
committed

Commits on Jun 30, 2026