Merge pull request #169 from copenhagentruckwash/fix-gateway-auto-provision-deployment-vulnerability

Pin gateway auto-provision deployments to source commit
This commit is contained in:
Jeppe B
2026-06-01 20:53:22 +02:00
committed by GitHub
2 changed files with 10 additions and 3 deletions
@@ -668,6 +668,8 @@ it('defines Coolify schema, route permissions, and replication integration hooks
expect($manager)->toContain('gateway_route_autoprovision');
expect($manager)->toContain('upsertDeploymentTarget');
expect($manager)->toContain('startDeployment');
expect($manager)->toContain("'commit_mode' => \$sourceCommitSha === '' ? 'latest' : 'specific'");
expect($manager)->toContain("\$deploymentInput['commit_sha'] = \$sourceCommitSha;");
expect($manager)->toContain('verifyGatewayRoutes');
expect($manager)->toContain('bootstrapGatewayCertificates');
expect($manager)->toContain('setLoadBalancerIpTargets');