bruno
856e654306
pip-audit bloquait sur PYSEC-2026-3910 (outlines) et PYSEC-2026-3911 (XForm), toutes deux atteignables via backend/pdf_reader.py. Le plancher pypdf>=4.0 ne protégeait rien : l'image Act du runner embarque 6.16.0 dans sa toolcache Python, donc pip répondait « already satisfied » sans jamais aligner. Au passage, le garde-fou TestSemgrepStep était en régression depuis la désactivation de semgrep (v2.39.9) et aurait rougi le job `test` : il vérifie désormais que l'étape n'exécute que son avertissement et que bandit et pip-audit restent bloquants. Nouveau TestDependencySecurityFloors pour verrouiller les planchers de sécurité (contre-preuve : pypdf remis à >=4.0). 🤖 Generated with Codebuff Co-Authored-By: Codebuff <[email protected]>
94 lines
2.8 KiB
JSON
94 lines
2.8 KiB
JSON
{
|
|
"$schema": "https://raw.githubusercontent.com/nicedoc/obsigate/main/desktop/tauri.conf.schema.json",
|
|
"productName": "ObsiGate",
|
|
"version": "2.39.10",
|
|
"identifier": "com.obsigate.desktop",
|
|
"build": {
|
|
"frontendDist": "../frontend",
|
|
"devUrl": "http://localhost:17890",
|
|
"beforeDevCommand": "cd .. && python -m uvicorn backend.main:app --host 127.0.0.1 --port 17890 --log-level info",
|
|
"beforeBuildCommand": "echo 'Frontend already built — using static files'"
|
|
},
|
|
"app": {
|
|
"withGlobalTauri": true,
|
|
"windows": [
|
|
{
|
|
"title": "ObsiGate",
|
|
"width": 1200,
|
|
"height": 800,
|
|
"minWidth": 800,
|
|
"minHeight": 600,
|
|
"resizable": true,
|
|
"fullscreen": false,
|
|
"center": true,
|
|
"decorations": true,
|
|
"transparent": false,
|
|
"label": "main"
|
|
}
|
|
],
|
|
"security": {
|
|
"csp": "default-src 'self' http://127.0.0.1:*; script-src 'self' 'unsafe-inline' 'unsafe-eval' http://127.0.0.1:* https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://esm.sh; style-src 'self' 'unsafe-inline' http://127.0.0.1:* https://cdnjs.cloudflare.com https://fonts.googleapis.com; font-src 'self' http://127.0.0.1:* https://fonts.gstatic.com; img-src 'self' data: blob: http://127.0.0.1:* https:; frame-src 'self' http://127.0.0.1:*; connect-src 'self' http://127.0.0.1:* ws://127.0.0.1:*;"
|
|
}
|
|
},
|
|
"bundle": {
|
|
"active": true,
|
|
"targets": "all",
|
|
"createUpdaterArtifacts": true,
|
|
"icon": [
|
|
"icons/32x32.png",
|
|
"icons/128x128.png",
|
|
"icons/[email protected]",
|
|
"icons/icon.icns",
|
|
"icons/icon.ico"
|
|
],
|
|
"resources": [
|
|
"python-embed/**/*",
|
|
"backend/**/*",
|
|
"frontend/**/*"
|
|
],
|
|
"fileAssociations": [
|
|
{
|
|
"ext": ["md", "markdown", "txt"],
|
|
"name": "ObsiGate Markdown",
|
|
"description": "Fichier Markdown ObsiGate",
|
|
"role": "Editor"
|
|
}
|
|
],
|
|
"windows": {
|
|
"nsis": {
|
|
"installMode": "currentUser",
|
|
"installerIcon": "icons/icon.ico",
|
|
"startMenuFolder": "ObsiGate"
|
|
}
|
|
},
|
|
"linux": {
|
|
"deb": {
|
|
"depends": ["libwebkit2gtk-4.1-0", "libgtk-3-0", "libayatana-appindicator3-1"]
|
|
},
|
|
"appimage": {
|
|
"bundleMediaFramework": true
|
|
}
|
|
},
|
|
"macOS": {
|
|
"frameworks": [],
|
|
"minimumSystemVersion": ""
|
|
}
|
|
},
|
|
"plugins": {
|
|
"shell": {
|
|
"open": true
|
|
},
|
|
"single-instance": null,
|
|
"store": null,
|
|
"updater": {
|
|
"endpoints": [
|
|
"https://git.dracodev.net/Projets/ObsiGate/raw/branch/main/desktop/latest.json"
|
|
],
|
|
"pubkey": "dW50cnVzdGVkIGNvbW1lbnQ6IG1pbmlzaWduIHB1YmxpYyBrZXk6IDcwQjU2MDM4QUVEREY3NApSV1IwMysyS0ExWUxCK1RQMUgrYnplQWlpYWU2SHVYajVIUHhzNEFKLzZ2Z2puZW9pSUQ2RE8rUAo=",
|
|
"windows": {
|
|
"installMode": "passive"
|
|
}
|
|
}
|
|
}
|
|
}
|