No longer used; the job failed on every PR because the CLAUDE_API_KEY
secret is unset, producing no findings.json and a red X on all open
Dependabot PRs. Other security checks (CodeQL, Snyk, bandit in ci.yml)
remain in place.
Cherry-picked from master (e82cda6)
- Fix login test that fails because registration auto-authenticates
- Add modular test structure with clear pass/fail reporting
- Skip moderation tests in CI (detects test-key, no real OpenAI)
- Actually run all test functions (some were defined but never called)
- Early exit on critical failures instead of running useless tests
- Clean up CI workflow env vars
Updated GitHub Actions workflow and test suite to run only core platform tests, removing OpenAI-dependent moderation tests and related environment variables. This streamlines CI validation to ensure platform deployment and basic functionality without external dependencies.
Updated the workflow to use the GPT-5 model with larger context and output token limits. Enhanced e2e_test.py with clearer test content, stricter pass/fail logic for moderation, improved error handling, and more detailed logging for both safe and suspicious content moderation cases.
Refactored e2e test logic to separate core infrastructure, moderation, and stats tests. Moderation tests now run only if core tests pass, and failures in moderation are reported with more context. The suite now considers core infrastructure passing as the main success criterion, improving CI reliability and diagnostics. Also added SQL_DEBUG env var to workflow.
Adds the CI environment variable to the e2e-test workflow and updates run.py to allow unsafe Werkzeug when running in testing or CI environments. This change ensures compatibility with automated test setups.
Introduces a GitHub Actions workflow for end-to-end testing and adds a comprehensive e2e test script. Refactors input handling in API and auth routes by removing unnecessary HTML escaping, relying on validation and normalization instead.
Introduced a GitHub Actions CI workflow for testing, linting, and security checks. Expanded .gitignore to cover more environment, editor, and OS files. Updated README.md to reflect the new default port (6217) and revised example API endpoints. Reorganized requirements.txt for clarity and added comments for dependency grouping.
Introduces chunking logic to AI moderation for handling large content, ensuring token limits are respected and results are combined for final decisions. Adds retry logic for database initialization to handle connection pool issues, and refines SQLAlchemy pool configuration for different environments. Improves logging for rule processing and moderation orchestration. Adds tiktoken dependency for token counting.
Bentlybro