Compare commits
merge into: eho/register-referentie:main
eho/register-referentie:main
eho/register-referentie:docs/195-stale-outdated-pr
eho/register-referentie:feat/192-scan-uploads
eho/register-referentie:build/191-clamav
eho/register-referentie:feat/186-otel-endpoint
eho/register-referentie:ci/173-mkdocs-build
eho/register-referentie:docs/177-adr-labs-caddy
eho/register-referentie:ci/verify-stack-main-only
eho/register-referentie:fix/keycloak-proxy-headers
eho/register-referentie:feat/demo-otp-autofill
eho/register-referentie:fix/182-celery-concurrency
eho/register-referentie:feat/public-host-caddy
eho/register-referentie:ci/175-deploy-on-merge
eho/register-referentie:feat/177-public-tls-edge
eho/register-referentie:ci/168-helm-chart-ci-gate
eho/register-referentie:docs/169-mkdocs-nav
eho/register-referentie:feat/25-helm-kubernetes-caddy
eho/register-referentie:fix/161-e2e-bounded-and-diagnosable
eho/register-referentie:feat/162-werkbak-live-refresh
eho/register-referentie:feat/132-medewerker-mfa
eho/register-referentie:fix/156-tempo-ingester-healthcheck
eho/register-referentie:feat/153-projection-sourced-from-objecten
eho/register-referentie:feat/152-objecten-publishes-to-nrc
eho/register-referentie:feat/149-acl-writes-registerrecord
eho/register-referentie:feat/141-registerrecord-objecttype
eho/register-referentie:perf/verify-stack-uwsgi-oz-nrc
eho/register-referentie:fix/144-verify-stack-uwsgi
eho/register-referentie:feat/140-objecten-up
eho/register-referentie:feat/139-objecttypen-up
eho/register-referentie:feat/131-default-fill-crud
eho/register-referentie:chore/136-ci-job-summaries
eho/register-referentie:fix/134-verify-stack-scheduling
eho/register-referentie:feat/130-beheer-catalogi
eho/register-referentie:feat/124-metrics-dashboards
eho/register-referentie:ci/127-parallel-jobs
eho/register-referentie:feat/123-distributed-traces
eho/register-referentie:feat/111-self-service-resume
eho/register-referentie:feat/113-acl-zaaktype-by-identificatie
eho/register-referentie:fix/110-compose-local-flow
eho/register-referentie:fix/115-e2e-single-worker
eho/register-referentie:docs/111-backlog-s26
eho/register-referentie:feat/106-close-zaak-on-timeout
eho/register-referentie:feat/103-diploma-upload-documenten
eho/register-referentie:feat/102-document-wait-timeout
eho/register-referentie:feat/14-dmn-diploma-eligibility
eho/register-referentie:feat/15-beoordeling-escalation
eho/register-referentie:fix/portal-nginx-resolver
eho/register-referentie:fix/local-eventsubscriber-acl
eho/register-referentie:feat/12-withdrawal-portal
eho/register-referentie:fix/91-local-compose-parity
eho/register-referentie:feat/12-withdrawal-bff
eho/register-referentie:feat/12-withdrawal-workflow
eho/register-referentie:feat/12-withdrawal
eho/register-referentie:feat/13-behandel-portal
eho/register-referentie:feat/13-behandel-decide
eho/register-referentie:feat/13-behandel-bff-auth-werkbak
eho/register-referentie:feat/13-workflow-user-tasks
eho/register-referentie:feat/13-behandel-decision-model
eho/register-referentie:chore/release-2026.07.0
eho/register-referentie:feat/78-reference-correlation
eho/register-referentie:feat/75-approval-flow
eho/register-referentie:feat/10-openbaar-portal
eho/register-referentie:chore/73-ci-speedups
eho/register-referentie:feat/68-e2e
eho/register-referentie:feat/67-self-service-form
eho/register-referentie:feat/66-api-client
eho/register-referentie:feat/65-nx-workspace
eho/register-referentie:feat/8-bff
eho/register-referentie:feat/6-domain-service
eho/register-referentie:feat/7-event-subscriber-projection
eho/register-referentie:feat/56-nrc-notification-wiring
eho/register-referentie:test/46-acl-openzaak-integration
eho/register-referentie:feat/47-acl-mutation-baseline
eho/register-referentie:ci/30-gitea-actions-ci
eho/register-referentie:feat/5-acl-open-zaak
eho/register-referentie:feat/4-flowable
eho/register-referentie:feat/3-keycloak
eho/register-referentie:feat/2-opennotificaties
eho/register-referentie:feat/2-catalogus-seed
eho/register-referentie:feat/10-openzaak-compose
eho/register-referentie:feat/32-docs-scaffold
eho/register-referentie:feat/31-contributor-workflow
eho/register-referentie:feat/30-gitea-actions-ci
eho/register-referentie:feat/29-bff-docker-compose
eho/register-referentie:chore/remove-bootstrap-scripts
eho/register-referentie:feat/28-bff-health
eho/register-referentie:docs/split-s00
..
pull from: eho/register-referentie:build/191-clamav
eho/register-referentie:docs/195-stale-outdated-pr
eho/register-referentie:feat/192-scan-uploads
eho/register-referentie:main
eho/register-referentie:build/191-clamav
eho/register-referentie:feat/186-otel-endpoint
eho/register-referentie:ci/173-mkdocs-build
eho/register-referentie:docs/177-adr-labs-caddy
eho/register-referentie:ci/verify-stack-main-only
eho/register-referentie:fix/keycloak-proxy-headers
eho/register-referentie:feat/demo-otp-autofill
eho/register-referentie:fix/182-celery-concurrency
eho/register-referentie:feat/public-host-caddy
eho/register-referentie:ci/175-deploy-on-merge
eho/register-referentie:feat/177-public-tls-edge
eho/register-referentie:ci/168-helm-chart-ci-gate
eho/register-referentie:docs/169-mkdocs-nav
eho/register-referentie:feat/25-helm-kubernetes-caddy
eho/register-referentie:fix/161-e2e-bounded-and-diagnosable
eho/register-referentie:feat/162-werkbak-live-refresh
eho/register-referentie:feat/132-medewerker-mfa
eho/register-referentie:fix/156-tempo-ingester-healthcheck
eho/register-referentie:feat/153-projection-sourced-from-objecten
eho/register-referentie:feat/152-objecten-publishes-to-nrc
eho/register-referentie:feat/149-acl-writes-registerrecord
eho/register-referentie:feat/141-registerrecord-objecttype
eho/register-referentie:perf/verify-stack-uwsgi-oz-nrc
eho/register-referentie:fix/144-verify-stack-uwsgi
eho/register-referentie:feat/140-objecten-up
eho/register-referentie:feat/139-objecttypen-up
eho/register-referentie:feat/131-default-fill-crud
eho/register-referentie:chore/136-ci-job-summaries
eho/register-referentie:fix/134-verify-stack-scheduling
eho/register-referentie:feat/130-beheer-catalogi
eho/register-referentie:feat/124-metrics-dashboards
eho/register-referentie:ci/127-parallel-jobs
eho/register-referentie:feat/123-distributed-traces
eho/register-referentie:feat/111-self-service-resume
eho/register-referentie:feat/113-acl-zaaktype-by-identificatie
eho/register-referentie:fix/110-compose-local-flow
eho/register-referentie:fix/115-e2e-single-worker
eho/register-referentie:docs/111-backlog-s26
eho/register-referentie:feat/106-close-zaak-on-timeout
eho/register-referentie:feat/103-diploma-upload-documenten
eho/register-referentie:feat/102-document-wait-timeout
eho/register-referentie:feat/14-dmn-diploma-eligibility
eho/register-referentie:feat/15-beoordeling-escalation
eho/register-referentie:fix/portal-nginx-resolver
eho/register-referentie:fix/local-eventsubscriber-acl
eho/register-referentie:feat/12-withdrawal-portal
eho/register-referentie:fix/91-local-compose-parity
eho/register-referentie:feat/12-withdrawal-bff
eho/register-referentie:feat/12-withdrawal-workflow
eho/register-referentie:feat/12-withdrawal
eho/register-referentie:feat/13-behandel-portal
eho/register-referentie:feat/13-behandel-decide
eho/register-referentie:feat/13-behandel-bff-auth-werkbak
eho/register-referentie:feat/13-workflow-user-tasks
eho/register-referentie:feat/13-behandel-decision-model
eho/register-referentie:chore/release-2026.07.0
eho/register-referentie:feat/78-reference-correlation
eho/register-referentie:feat/75-approval-flow
eho/register-referentie:feat/10-openbaar-portal
eho/register-referentie:chore/73-ci-speedups
eho/register-referentie:feat/68-e2e
eho/register-referentie:feat/67-self-service-form
eho/register-referentie:feat/66-api-client
eho/register-referentie:feat/65-nx-workspace
eho/register-referentie:feat/8-bff
eho/register-referentie:feat/6-domain-service
eho/register-referentie:feat/7-event-subscriber-projection
eho/register-referentie:feat/56-nrc-notification-wiring
eho/register-referentie:test/46-acl-openzaak-integration
eho/register-referentie:feat/47-acl-mutation-baseline
eho/register-referentie:ci/30-gitea-actions-ci
eho/register-referentie:feat/5-acl-open-zaak
eho/register-referentie:feat/4-flowable
eho/register-referentie:feat/3-keycloak
eho/register-referentie:feat/2-opennotificaties
eho/register-referentie:feat/2-catalogus-seed
eho/register-referentie:feat/10-openzaak-compose
eho/register-referentie:feat/32-docs-scaffold
eho/register-referentie:feat/31-contributor-workflow
eho/register-referentie:feat/30-gitea-actions-ci
eho/register-referentie:feat/29-bff-docker-compose
eho/register-referentie:chore/remove-bootstrap-scripts
eho/register-referentie:feat/28-bff-health
eho/register-referentie:docs/split-s00
5
Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
|
|
f93b4a4426 |
docs(arch): ADR-0036 — check %PDF- after the scan, not before (refs #191, refs #190)
CI / lint (pull_request) Successful in 2m0s
CI / k8s (pull_request) Successful in 10s
CI / build (pull_request) Successful in 1m14s
CI / unit (pull_request) Successful in 1m18s
CI / docs (pull_request) Successful in 43s
CI / frontend (pull_request) Successful in 2m22s
CI / mutation (pull_request) Successful in 4m57s
CI / verify-stack (pull_request) Skipped
clamd matches EICAR only at the start of a file, so a type check in front of the scan would report malware as merely not-a-PDF. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> |
||
|
|
d698267fba |
build(infra): run clamd in the local compose stack too (refs #191)
CI / k8s (pull_request) Successful in 8s
CI / build (pull_request) Successful in 1m41s
CI / lint (pull_request) Successful in 1m53s
CI / docs (pull_request) Successful in 55s
CI / unit (pull_request) Successful in 1m22s
CI / frontend (pull_request) Successful in 2m31s
CI / verify-stack (pull_request) Canceled after 0s
CI / mutation (pull_request) Canceled after 8m0s
make local waits on the same WAIT_SVCS, so without it the local stack never turns healthy. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> |
||
|
|
f541254de7 |
docs(arch): ADR-0036 — scan uploads with ClamAV in the domain, fail closed (refs #191, refs #190)
CI / k8s (pull_request) Successful in 8s
CI / build (pull_request) Successful in 1m42s
CI / lint (pull_request) Successful in 1m56s
CI / docs (pull_request) Successful in 53s
CI / unit (pull_request) Successful in 1m21s
CI / frontend (pull_request) Successful in 2m22s
CI / mutation (pull_request) Successful in 4m47s
CI / verify-stack (pull_request) Skipped
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> |
||
|
|
39bc6ee0c5 |
build(infra): run clamd in compose and the Helm chart (refs #191)
Official clamav/clamav:1.4.6 with signatures on a volume, ConcurrentDatabaseReload off to cap memory, health-gated in WAIT_SVCS. verify-clamav is green: EICAR is FOUND, a clean stream is OK. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> |
||
|
|
3e9bda9031 |
test(infra): clamd detects EICAR and passes a clean stream over INSTREAM (refs #191)
Red: no clamav service exists yet, so verify-clamav finds no container. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> |