docs: documentation index, architecture overview, contract events reference, and resource budget #98
security-ci.yml
on: pull_request
Ciphertext-only guard + secret-field scan
4m 49s
Crypto dependency CVE audit
22s
Annotations
10 errors and 2 warnings
|
src/__tests__/auth.integration.test.ts > POST /auth/verify > returns 400 when required fields are missing:
apps/backend/src/__tests__/auth.integration.test.ts#L144
Error: Hook timed out in 10000ms.
If this is a long-running hook, pass a timeout value as the last argument or configure it globally with "hookTimeout".
❯ src/__tests__/auth.integration.test.ts:144:3
|
|
src/__tests__/auth.integration.test.ts > POST /auth/verify > returns 401 when device is revoked:
apps/backend/src/__tests__/auth.integration.test.ts#L144
Error: Hook timed out in 10000ms.
If this is a long-running hook, pass a timeout value as the last argument or configure it globally with "hookTimeout".
❯ src/__tests__/auth.integration.test.ts:144:3
|
|
src/__tests__/auth.integration.test.ts > POST /auth/verify > returns 401 when signature verification fails:
apps/backend/src/__tests__/auth.integration.test.ts#L144
Error: Hook timed out in 10000ms.
If this is a long-running hook, pass a timeout value as the last argument or configure it globally with "hookTimeout".
❯ src/__tests__/auth.integration.test.ts:144:3
|
|
src/__tests__/auth.integration.test.ts > POST /auth/verify > returns 401 when nonce is expired or invalid:
apps/backend/src/__tests__/auth.integration.test.ts#L144
Error: Hook timed out in 10000ms.
If this is a long-running hook, pass a timeout value as the last argument or configure it globally with "hookTimeout".
❯ src/__tests__/auth.integration.test.ts:144:3
|
|
src/__tests__/auth.integration.test.ts > POST /auth/verify > returns 200 with JWT for existing wallet and new device:
apps/backend/src/__tests__/auth.integration.test.ts#L144
Error: Hook timed out in 10000ms.
If this is a long-running hook, pass a timeout value as the last argument or configure it globally with "hookTimeout".
❯ src/__tests__/auth.integration.test.ts:144:3
|
|
src/__tests__/auth.integration.test.ts > POST /auth/verify > returns 200 with JWT for existing wallet and existing device (returning user):
apps/backend/src/__tests__/auth.integration.test.ts#L144
Error: Hook timed out in 10000ms.
If this is a long-running hook, pass a timeout value as the last argument or configure it globally with "hookTimeout".
❯ src/__tests__/auth.integration.test.ts:144:3
|
|
src/__tests__/auth.integration.test.ts > POST /auth/verify > returns 200 with JWT token for valid new-user flow:
apps/backend/src/__tests__/auth.integration.test.ts#L144
Error: Hook timed out in 10000ms.
If this is a long-running hook, pass a timeout value as the last argument or configure it globally with "hookTimeout".
❯ src/__tests__/auth.integration.test.ts:144:3
|
|
src/__tests__/auth.integration.test.ts > POST /auth/challenge > returns 400 when body is completely absent:
apps/backend/src/__tests__/auth.integration.test.ts#L109
Error: Hook timed out in 10000ms.
If this is a long-running hook, pass a timeout value as the last argument or configure it globally with "hookTimeout".
❯ src/__tests__/auth.integration.test.ts:109:3
|
|
src/__tests__/auth.integration.test.ts > POST /auth/challenge > returns 400 with error when walletAddress is missing:
apps/backend/src/__tests__/auth.integration.test.ts#L109
Error: Hook timed out in 10000ms.
If this is a long-running hook, pass a timeout value as the last argument or configure it globally with "hookTimeout".
❯ src/__tests__/auth.integration.test.ts:109:3
|
|
src/__tests__/auth.integration.test.ts > POST /auth/challenge > returns 200 with message and nonce for valid walletAddress:
apps/backend/src/__tests__/auth.integration.test.ts#L109
Error: Hook timed out in 10000ms.
If this is a long-running hook, pass a timeout value as the last argument or configure it globally with "hookTimeout".
❯ src/__tests__/auth.integration.test.ts:109:3
|
|
Crypto dependency CVE audit
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-node@v4, pnpm/action-setup@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Ciphertext-only guard + secret-field scan
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-node@v4, pnpm/action-setup@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|