[PR #236] [MERGED] Fix/security audit #313

New issue

Closed

opened 2026-05-06 12:16:22 +02:00 by BreizhHardware · 0 comments

BreizhHardware commented

2026-05-06 12:16:22 +02:00

Owner

📋 Pull Request Information

Original PR: https://github.com/BreizhHardware/portfolio/pull/236
Author: @BreizhHardware
Created: 12/8/2025
Status: ✅ Merged
Merged: 12/8/2025
Merged by: @BreizhHardware

Base: dev ← Head: fix/security-audit

📝 Commits (3)

da882e7 chore(security): Add daily security audit
7b27c8f chore(security): Remove githubStatSection
438beaf chore(security): Update package version to imporve security

📊 Changes

7 files changed (+506 additions, -1116 deletions)

View changed files

➕ .devcontainer/devcontainer.json (+14 -0)
➕ .github/workflows/audit.yml (+47 -0)
📝 package.json (+9 -9)
📝 pnpm-lock.yaml (+436 -869)
📝 src/App.tsx (+0 -3)
➖ src/components/GitHubStatsSection.tsx (+0 -234)
📝 src/components/Menu.tsx (+0 -1)

📄 Description

This pull request removes the GitHub statistics section from the application UI and navigation, and introduces new configuration for development containers and automated security auditing. The main changes are grouped below by theme.

UI and Feature Removal:

Removed the GitHubStatsSection component, all related code, and its display from src/App.tsx, eliminating the GitHub statistics feature from the UI. [1] [2] [3]
Removed the "GitHub" section link from the navigation menu in src/components/Menu.tsx, reflecting the removal of the statistics section.

Development and CI Improvements:

Added a .devcontainer/devcontainer.json configuration to support development environments with Node.js, pnpm, and Git LFS.
Introduced a .github/workflows/audit.yml GitHub Actions workflow for automated daily and scheduled security audits, with issue creation on failure.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/BreizhHardware/portfolio/pull/236 **Author:** [@BreizhHardware](https://github.com/BreizhHardware) **Created:** 12/8/2025 **Status:** ✅ Merged **Merged:** 12/8/2025 **Merged by:** [@BreizhHardware](https://github.com/BreizhHardware) **Base:** `dev` ← **Head:** `fix/security-audit` --- ### 📝 Commits (3) - [`da882e7`](https://github.com/BreizhHardware/portfolio/commit/da882e70c790f8935992306bdc7fe8904ad275b1) chore(security): Add daily security audit - [`7b27c8f`](https://github.com/BreizhHardware/portfolio/commit/7b27c8f715ad7fbc8f4862ccbf3010149f685a4a) chore(security): Remove githubStatSection - [`438beaf`](https://github.com/BreizhHardware/portfolio/commit/438beaf56d897698767b6d79312e99023d651101) chore(security): Update package version to imporve security ### 📊 Changes **7 files changed** (+506 additions, -1116 deletions) <details> <summary>View changed files</summary> ➕ `.devcontainer/devcontainer.json` (+14 -0) ➕ `.github/workflows/audit.yml` (+47 -0) 📝 `package.json` (+9 -9) 📝 `pnpm-lock.yaml` (+436 -869) 📝 `src/App.tsx` (+0 -3) ➖ `src/components/GitHubStatsSection.tsx` (+0 -234) 📝 `src/components/Menu.tsx` (+0 -1) </details> ### 📄 Description This pull request removes the GitHub statistics section from the application UI and navigation, and introduces new configuration for development containers and automated security auditing. The main changes are grouped below by theme. **UI and Feature Removal:** * Removed the `GitHubStatsSection` component, all related code, and its display from `src/App.tsx`, eliminating the GitHub statistics feature from the UI. [[1]](diffhunk://#diff-26ad4b834941d9b19ebf9db8082bd202aaf72ea0ddea85f5a8a0cb3c729cc6f2L21) [[2]](diffhunk://#diff-26ad4b834941d9b19ebf9db8082bd202aaf72ea0ddea85f5a8a0cb3c729cc6f2L86-L87) [[3]](diffhunk://#diff-b143cdc4863956a057c47e1b262d486b45607a355a30486bbd43444f84b9da6eL1-L234) * Removed the "GitHub" section link from the navigation menu in `src/components/Menu.tsx`, reflecting the removal of the statistics section. **Development and CI Improvements:** * Added a `.devcontainer/devcontainer.json` configuration to support development environments with Node.js, pnpm, and Git LFS. * Introduced a `.github/workflows/audit.yml` GitHub Actions workflow for automated daily and scheduled security audits, with issue creation on failure. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>