End-to-end software delivery: scan, fix, test, containerize, deploy, verify, report
OWASP Top 10 scan across all source files. Injection, XSS, broken auth, data exposure, misconfig.
Code smells, bugs, anti-patterns. Type safety, error handling, performance, dead code, API design.
Reads both audit reports. Fixes ALL issues by severity: Critical → Warning → Info. Applies fixes directly to source code.
Writes unit tests for every fix. Edge cases, security regression tests. Runs ALL tests, iterates until 100% pass.
Verify Playwright installed. Run full test suite: auth flows, CRUD operations, user management, order lifecycle, security (XSS, auth bypass, data leaks).
Verify all views tested (login, dashboard). All CRUD covered. Error states tested. Write additional tests for gaps. Re-run and verify.
docker compose build — validate image size, non-root user, health check, no secrets in layers. Security scan if available.
docker compose up -d — wait for health check, test key endpoints with curl. Collect container ID, IP, ports, network, resource usage.
Full test suite against live container: auth flow, CRUD, orders, security, edge cases, container health. Records every request/response.
Compiles all reports into a single master HTML report with 8 sections: security audit, code quality, fixes applied, test results, Docker build, deployment info, integration tests, and recommendations.
All phases passed. Container running. Report generated.