aitbc

oib/aitbc

Author	SHA1	Message	Date
aitbc	2c2c2df585	feat: comprehensive security remediation - CodeQL fixes and best practices Some checks failed API Endpoint Tests / test-api-endpoints (push) Successful in 11s Details Blockchain Synchronization Verification / sync-verification (push) Failing after 1s Details Documentation Validation / validate-docs (push) Successful in 11s Details Documentation Validation / validate-policies-strict (push) Successful in 4s Details Integration Tests / test-service-integration (push) Successful in 39s Details Multi-Node Blockchain Health Monitoring / health-check (push) Successful in 2s Details P2P Network Verification / p2p-verification (push) Successful in 3s Details Production Tests / Production Integration Tests (push) Failing after 6s Details Python Tests / test-python (push) Successful in 10s Details Security Scanning / security-scan (push) Failing after 10s Details Phase 1: Dependency Vulnerabilities - Resolved 72/72 GitHub Dependabot vulnerabilities (100%) - Updated cryptography, ecdsa, black, orjson, python-multipart Phase 2: CodeQL Static Analysis (25+ categories) - Fixed 100+ information exposure instances (str(e) → generic messages) - Fixed 9 clear-text logging/storage instances - Fixed 9 log injection instances (user data removed from logs) - Fixed 2 hardcoded credential instances - Fixed 15 print statements (replaced with logger) - Added SSRF and path validation (18 alerts with robust validation) - 20+ additional categories scanned (0 issues found) Phase 3: CodeQL Infrastructure - Created GitHub Actions CodeQL workflow - Created CodeQL suppression file for false positives - Moved CodeQL database to /var/lib/aitbc/codeql-db Phase 4: Security Documentation - Updated SECURITY_FIXES_SUMMARY.md with comprehensive details - Documented security best practices for developers Files modified: 48 files across coordinator-api, agent-services, blockchain-node, exchange, wallet, scripts, and infrastructure	2026-04-24 10:42:29 +02:00
aitbc	d72945f20c	network: add hub registration, Redis persistence, and federated mesh join protocol Some checks failed CLI Tests / test-cli (push) Has been cancelled Details Integration Tests / test-service-integration (push) Has been cancelled Details Python Tests / test-python (push) Has been cancelled Details Security Scanning / security-scan (push) Has been cancelled Details Documentation Validation / validate-docs (push) Has been cancelled Details API Endpoint Tests / test-api-endpoints (push) Has been cancelled Details Systemd Sync / sync-systemd (push) Has been cancelled Details - Change default P2P port from 7070 to 8001 in config and .env.example - Add redis_url configuration option for hub persistence (default: redis://localhost:6379) - Implement DNS-based hub registration/unregistration via HTTPS API endpoints - Add Redis persistence for hub registrations with 1-hour TTL - Add island join request/response protocol with member list and blockchain credentials - Add GPU marketplace tracking (offers, bids, providers) in hub manager - Add	2026-04-13 11:47:34 +02:00
oib	15427c96c0	chore: update file permissions to executable across repository - Change file mode from 644 to 755 for all project files - Add chain_id parameter to get_balance RPC endpoint with default "ait-devnet" - Rename Miner.extra_meta_data to extra_metadata for consistency	2026-03-06 22:17:54 +01:00
oib	bb5363bebc	refactor: consolidate blockchain explorer into single app and update backup ignore patterns - Remove standalone explorer-web app (README, HTML, package files) - Add /web endpoint to blockchain-explorer for web interface access - Update .gitignore to exclude application backup archives (.tar.gz, .zip) - Add backup documentation files to .gitignore (BACKUP_INDEX.md, README.md) - Consolidate explorer functionality into main blockchain-explorer application	2026-03-06 18:14:49 +01:00

4 Commits