2 Commits

Author	SHA1	Message	Date
curo1305	fd95459fc9	Run pre-commit security check as non-root (UID 1001) ... docker run was using python:3.12-slim's default root user, causing pip to warn about running as root. Fix: add -u 1001:1001, set HOME=/tmp so pip --user has a writable install location, and pass --user to pip. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-13 23:04:32 +02:00
curo1305	61cef2eacd	Add test user seed, password validation, and pre-commit security hook ... - backend/scripts/seed.py: creates test@example.com on dev startup - backend/scripts/start_dev.sh: runs migrations + seed + uvicorn --reload - backend/app/schemas/user.py: password validator (length, case, digit, special char, forbidden words) - scripts/security_check.py: Docker-based scanner for secrets, dangerous patterns, weak crypto, bandit - .githooks/pre-commit: runs security_check.py in python:3.12-slim on every commit Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-12 15:54:23 +02:00