feat(ci): phase C — authenticated ZAP scan + flaky test quarantine - #325

Merged

paruff merged 14 commits into

mainfrom

feat/top01-phase-c

Jul 28, 2026

Commits on Jul 28, 2026

feat(ci): add idempotent seed_zap_scan_user management command

paruff
and
claude
committed
6637839
feat(ci): add authenticated OWASP ZAP scan against ephemeral CI instance

paruff
and
claude
committed
d3771a3
feat(test): add flaky test detection, quarantine, and ledger

paruff
and
claude
committed
60197c8
feat(ci): wire flaky test reporting into PR and main-branch jobs

paruff
and
claude
committed
edd1a7f
docs(feature-flow): archive Phase A, regenerate root spec for Phase C

paruff
and
claude
committed
5588598
fix(ci): pin zaproxy/action-full-scan to v0.13.0, stop hardcoding ZAP scan credentials
paruff
committed
32fa904
fix(ci): correct ZAP auth-context parser config and user auth-method id
paruff
committed
5d423a0
chore(docs): trim stale stack line and extract GitOps principles skill
paruff
committed
1ea0ba6
ci: retrigger PR checks
paruff
committed
ff41ac2
docs(phase-b): archive spec/design/tasks before phase C merge
paruff
committed
0f4589c
chore(merge): resolve phase B/C spec conflicts merging main into feat/top01-phase-c
paruff
committed
1d662c2
fix(ci): add missing basic block to ZAP context authorization
paruff
committed
2e3ad8d
fix(ci): base64-encode the ZAP context user name
paruff
committed
5ef7054
fix(ci): don't block PRs on pre-existing ZAP WARN findings
paruff
committed
b0f00e1