edgehog-device-manager · lusergit · Mar 10, 2026 · Mar 10, 2026 · Mar 10, 2026
diff --git a/.github/actions/doc-publish/action.yaml b/.github/actions/doc-publish/action.yaml
@@ -22,6 +22,9 @@ inputs:
   docs:
     description: "The docs project location."
     required: true
+  deploy-key:
+    description: "SSH deploy key for pushing docs."
+    required: true
 
 defaults:
   run:
@@ -41,7 +44,7 @@ runs:
       working-directory: ./docs
       run: |
         eval `ssh-agent -t 60 -s`
-        echo "${{ secrets.DOCS_DEPLOY_KEY }}" | ssh-add -
+        echo "${{ inputs.deploy-key }}" | ssh-add -
         mkdir -p ~/.ssh/
         ssh-keyscan github.com >> ~/.ssh/known_hosts
         git remote add topush "git@github.com:edgehog-device-manager/docs.git"

diff --git a/.github/workflows/backend-audit.yaml b/.github/workflows/backend-audit.yaml
@@ -16,7 +16,7 @@
 #
 # SPDX-License-Identifier: Apache-2.0
 
-name: Mix Audit
+name: backend audit
 on:
   workflow_call:
   workflow_dispatch:

diff --git a/.github/workflows/backend-azurite.yaml b/.github/workflows/backend-azurite.yaml
@@ -16,7 +16,7 @@
 #
 # SPDX-License-Identifier: Apache-2.0
 
-name: Azurite Integration Test
+name: backend azurite integration test
 on:
   workflow_call:
   workflow_dispatch:
@@ -98,7 +98,6 @@ jobs:
         env:
           POSTGRES_USER: postgres
           POSTGRES_PASSWORD: postgres
-          POSTGRES_HOST: postgres
           STORAGE_TYPE: azure
           AZURE_BLOB_ENDPOINT: "http://localhost:10000/devstoreaccount1"
           AZURE_CONTAINER: "edgehog"

diff --git a/.github/workflows/backend-ci.yaml b/.github/workflows/backend-ci.yaml
@@ -63,16 +63,16 @@ jobs:
   coverage:
     needs: [warmup-cache]
     uses: ./.github/workflows/backend-coverage.yaml
-  minio:
+  rustfs:
     needs: [warmup-cache]
-    uses: ./.github/workflows/backend-minio.yaml
+    uses: ./.github/workflows/backend-rustfs.yaml
   azurite:
     needs: [warmup-cache]
     uses: ./.github/workflows/backend-azurite.yaml
   docker-build:
     uses: ./.github/workflows/backend-docker-build.yaml
   docs:
-    uses: ./.github/workflows/docs-workflow.yaml
+    uses: ./.github/workflows/docs-ci.yaml
     with:
       release-made: false
       release-version: snapshot

diff --git a/.github/workflows/backend-coverage.yaml b/.github/workflows/backend-coverage.yaml
@@ -16,7 +16,7 @@
 #
 # SPDX-License-Identifier: Apache-2.0
 
-name: Coverage
+name: backend coverage
 on:
   workflow_call:
   workflow_dispatch:
@@ -55,4 +55,3 @@ jobs:
         env:
           POSTGRES_USER: postgres
           POSTGRES_PASSWORD: postgres
-          POSTGRES_HOST: postgres
diff --git a/.github/workflows/backend-credo.yaml b/.github/workflows/backend-credo.yaml
@@ -16,7 +16,7 @@
 #
 # SPDX-License-Identifier: Apache-2.0
 
-name: Credo
+name: backend credo
 on:
   workflow_call:
   workflow_dispatch:

diff --git a/.github/workflows/backend-dialyzer.yaml b/.github/workflows/backend-dialyzer.yaml
@@ -16,7 +16,7 @@
 #
 # SPDX-License-Identifier: Apache-2.0
 
-name: Dialyzer
+name: backend dialyzer
 on:
   workflow_call:
   workflow_dispatch:

diff --git a/.github/workflows/backend-docker-build.yaml b/.github/workflows/backend-docker-build.yaml
@@ -16,7 +16,7 @@
 #
 # SPDX-License-Identifier: Apache-2.0
 
-name: Docker build
+name: backend docker build
 on:
   workflow_call:
   workflow_dispatch:

diff --git a/.github/workflows/backend-formatter.yaml b/.github/workflows/backend-formatter.yaml
@@ -16,7 +16,7 @@
 #
 # SPDX-License-Identifier: Apache-2.0
 
-name: Code formatting
+name: backend check format
 on:
   workflow_call:
   workflow_dispatch:

diff --git a/.github/workflows/backend-minio.yaml → .github/workflows/backend-rustfs.yaml b/.github/workflows/backend-minio.yaml → .github/workflows/backend-rustfs.yaml
@@ -16,7 +16,7 @@
 #
 # SPDX-License-Identifier: Apache-2.0
 
-name: Rustfs Integration Test
+name: backend rustfs integration test
 on:
   workflow_call:
   workflow_dispatch:
@@ -87,7 +87,6 @@ jobs:
         env:
           POSTGRES_USER: postgres
           POSTGRES_PASSWORD: postgres
-          POSTGRES_HOST: postgres
           STORAGE_TYPE: s3
           S3_ACCESS_KEY_ID: rustfsadmin
           S3_SECRET_ACCESS_KEY: rustfsadmin

diff --git a/.github/workflows/backend-sobelow.yaml b/.github/workflows/backend-sobelow.yaml
@@ -16,7 +16,7 @@
 #
 # SPDX-License-Identifier: Apache-2.0
 
-name: Mix Sobelow
+name: backend sobelow
 on:
   workflow_call:
   workflow_dispatch:

diff --git a/.github/workflows/backend-test.yaml b/.github/workflows/backend-test.yaml
@@ -16,7 +16,7 @@
 #
 # SPDX-License-Identifier: Apache-2.0
 
-name: Test
+name: backend test
 on:
   workflow_call:
   workflow_dispatch:
@@ -57,4 +57,3 @@ jobs:
         env:
           POSTGRES_USER: postgres
           POSTGRES_PASSWORD: postgres
-          POSTGRES_HOST: postgres
diff --git a/.github/workflows/backend-warmup-cache.yaml b/.github/workflows/backend-warmup-cache.yaml
@@ -16,7 +16,7 @@
 #
 # SPDX-License-Identifier: Apache-2.0
 
-name: Cache warmup
+name: backend warmup cache
 on:
   workflow_call:
   workflow_dispatch:

diff --git a/.github/workflows/commit-lint.yaml b/.github/workflows/commit-lint.yaml
@@ -25,8 +25,6 @@ permissions:
   contents: read
 
 env:
-  RUST_BACKTRACE: 1
-  CARGO_TERM_COLOR: always
   CLICOLOR: 1
 
 concurrency:
@@ -52,9 +50,9 @@ jobs:
         uses: actions/checkout@v6
         with:
           fetch-depth: 0
-      - name: Install Spellchecker
-        run: |
-          wget https://github.com/crate-ci/typos/releases/download/v1.42.3/typos-v1.42.3-x86_64-unknown-linux-musl.tar.gz
-          tar xf typos-v1.42.3-x86_64-unknown-linux-musl.tar.gz
+      - name: Extract commit messages
+        run: git --no-pager log --pretty=%B origin/${{ github.base_ref }}..HEAD > commit-messages.txt
       - name: Spellcheck Commits
-        run: git --no-pager log --pretty=%B origin/${{ github.base_ref }}..HEAD | ./typos -
+        uses: crate-ci/typos@v1.44.0
+        with:
+          files: ./commit-messages.txt
diff --git a/.github/workflows/docs-ci.yaml b/.github/workflows/docs-ci.yaml
@@ -86,3 +86,4 @@ jobs:
         if: ${{ inputs.publish }}
         with:
           docs: docs
+          deploy-key: ${{ secrets.DOCS_DEPLOY_KEY }}
diff --git a/.github/workflows/frontend-build.yaml b/.github/workflows/frontend-build.yaml
@@ -18,7 +18,7 @@
 # SPDX-License-Identifier: Apache-2.0
 #
 
-name: frontend check types
+name: frontend build
 on:
   workflow_call:
   workflow_dispatch:

diff --git a/.github/workflows/frontend-ci.yaml b/.github/workflows/frontend-ci.yaml
@@ -67,3 +67,9 @@ jobs:
   audit:
     needs: [warmup-cache]
     uses: ./.github/workflows/frontend-audit.yaml
+  codeql:
+    uses: ./.github/workflows/frontend-codeql-analysis.yaml
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
diff --git a/.github/workflows/frontend-coverage.yaml b/.github/workflows/frontend-coverage.yaml
@@ -50,7 +50,7 @@ jobs:
         working-directory: frontend
         run: npm run coverage
       - name: Upload to Coveralls
-        uses: coverallsapp/github-action@master
+        uses: coverallsapp/github-action@v2
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           path-to-lcov: frontend/coverage/lcov.info
diff --git a/.github/workflows/release-ci.yaml b/.github/workflows/release-ci.yaml
@@ -31,15 +31,20 @@ name: Release CI
 jobs:
   make-release:
     runs-on: ubuntu-latest
+    outputs:
+      backend--release_created: ${{ steps.release.outputs.backend--release_created }}
+      backend--version: ${{ steps.release.outputs.backend--version }}
     steps:
       - uses: googleapis/release-please-action@v4
+        id: release
         with:
           config-file: .github/release-please/config.json
           manifest-file: .github/release-please/manifest.json
   publish-docs:
     needs: [make-release]
     uses: ./.github/workflows/docs-ci.yaml
+    secrets: inherit
     with:
       release-made: ${{ needs.make-release.outputs.backend--release_created }}
       release-version: ${{ needs.make-release.outputs.backend--version }}
-      publish: ${{ github.repository_owner }} == 'edgehog-device-manager'
+      publish: ${{ github.repository_owner == 'edgehog-device-manager' }}
diff --git a/docker-compose.yml b/docker-compose.yml
@@ -123,6 +123,12 @@ services:
       RUSTFS_SECRET_KEY: "rustfsadmin"
       RUSTFS_CONSOLE_ENABLE: true
     command: /data
+    healthcheck:
+      test: ["CMD-SHELL", "curl -so /dev/null http://localhost:9000/ || exit 1"]
+      interval: 3s
+      timeout: 3s
+      retries: 15
+      start_period: 3s
     labels:
       - "traefik.enable=true"
       - "traefik.http.routers.edgehog-rustfs-storage.rule=Host(`rustfs-storage.${DOCKER_COMPOSE_EDGEHOG_BASE_DOMAIN}`)"
@@ -137,12 +143,12 @@ services:
   rustfs-init:
     image: minio/mc:RELEASE.2023-01-11T03-14-16Z
     depends_on:
-      - rustfs
+      rustfs:
+        condition: service_healthy
     entrypoint: |
       /bin/sh -c "
-      while ! curl -s http://rustfs:9000 >/dev/null; do sleep 0.1; done;
       /usr/bin/mc alias set rustfs http://rustfs:9000 rustfsadmin rustfsadmin;
-      /usr/bin/mc mb rustfs/edgehog;
+      /usr/bin/mc mb --ignore-existing rustfs/edgehog;
       /usr/bin/mc anonymous set download rustfs/edgehog;
       exit 0;
       "
@@ -151,7 +157,7 @@ services:
     image: registry:3
     restart: on-failure
     environment:
-      REGISTRY_AUTH: htpasswdocker run minio/mc ls playd
+      REGISTRY_AUTH: htpasswd
       REGISTRY_AUTH_HTPASSWD_REALM: Registry-Realm
       REGISTRY_AUTH_HTPASSWD_PATH: /auth/registry.passwd
       REGISTRY_STORAGE_FILESYSTEM_ROOTDIRECTORY: /data