feat: Phase 2 tenant isolation — RLS on 11 session tables #134
5
.github/workflows/ci.yml
vendored
5
.github/workflows/ci.yml
vendored
@@ -31,6 +31,8 @@ jobs:
|
|||||||
SECRET_KEY: ci-test-secret-key-not-for-production
|
SECRET_KEY: ci-test-secret-key-not-for-production
|
||||||
DEBUG: "true"
|
DEBUG: "true"
|
||||||
APP_NAME: ResolutionFlow
|
APP_NAME: ResolutionFlow
|
||||||
|
TEST_DB_NAME: resolutionflow_test
|
||||||
|
DB_APP_ROLE_PASSWORD: app_secret_ci
|
||||||
|
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@v5
|
- uses: actions/checkout@v5
|
||||||
@@ -47,6 +49,9 @@ jobs:
|
|||||||
- name: Install dependencies
|
- name: Install dependencies
|
||||||
run: pip install -r backend/requirements.txt -r backend/requirements-dev.txt
|
run: pip install -r backend/requirements.txt -r backend/requirements-dev.txt
|
||||||
|
|
||||||
|
- name: Run Alembic migrations
|
||||||
|
run: cd backend && alembic upgrade head
|
||||||
|
|
||||||
- name: Check tenant filter enforcement
|
- name: Check tenant filter enforcement
|
||||||
run: cd backend && python scripts/check_tenant_filters.py
|
run: cd backend && python scripts/check_tenant_filters.py
|
||||||
# Warn mode only (exits 0). Switch to --fail after Phase 1 backlog clears.
|
# Warn mode only (exits 0). Switch to --fail after Phase 1 backlog clears.
|
||||||
|
|||||||
Reference in New Issue
Block a user