BillTracker/tests
null aee23d6025 feat(security): CI secret-scan + dep-audit, SECURITY.md, auth-coverage test (Pillar C)
- CI now runs gitleaks (secret scanning, .gitleaks.toml allowlists
  fixtures/data/generated) and `npm audit --audit-level=critical`.
- SECURITY.md: disclosure policy, the controls in place, operational
  hardening, and the two assessed HIGH audit exceptions (nodemailer `raw`
  unused → not exploitable; xlsx confined to import w/ raw:false + limits).
- tests/securityCoverage.test.js: static invariant that every non-public
  router mount carries requireAuth (+ CSRF for authed, requireAdmin for
  admin) — a new unprotected route now fails CI. 4 tests; suite 236/236.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-06 14:40:17 -05:00
..
amountSuggestionService.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
analyticsService.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
authService.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
backupAndCleanup.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
bankSyncService.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
billMerchantRuleService.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
billReorder.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
billsDeletedRoute.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
billsService.test.js refactor(server): migrate billsService + notificationService to TypeScript (.cts) 2026-07-06 11:12:06 -05:00
calendarFeedService.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
categoryGroups.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
categoryReorder.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
csvTransactionImportService.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
encryptionService.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
eraseUserData.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
exportImportRoundTrip.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
exportRicher.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
migrationModules.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
money.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
notificationDelivery.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
notificationLeadTime.test.js refactor(server): migrate billsService + notificationService to TypeScript (.cts) 2026-07-06 11:12:06 -05:00
ofxImportService.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
paymentAccountingService.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
paymentValidation.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
paymentsQuickRoute.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
paymentsRoute.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
profileRoute.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
reconciliation.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
safeToSpend.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
securityCoverage.test.js feat(security): CI secret-scan + dep-audit, SECURITY.md, auth-coverage test (Pillar C) 2026-07-06 14:40:17 -05:00
seedDemoData.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
snowballMath.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
snowballPlanRoute.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
spendingService.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
spendingSummary.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
statusService.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
subscriptionService.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
summaryBankTracking.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
summarySkipOverride.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
totpService.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
trackerService.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
transactionMatchService.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
transactionMatchState.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00
updateCheckOptOut.test.js style: apply Prettier across client + server (no behavior change) 2026-07-06 14:23:53 -05:00