Shallow clone (--depth 1) only gets default branch HEAD. PR SHA
checkout fails silently (|| true), so all jobs run against wrong
commit. Now fetches PR SHA explicitly before checkout.
Closes#45
The docker-build job checked for root-level Dockerfile, but project
Dockerfiles live in docker/Dockerfile.backend, frontend/Dockerfile,
and android/Dockerfile. CI always skipped. Now builds all three.
Closes#45
- Fix vite.config.ts proxy target to localhost:8010 (matches docker-compose)
- Remove unused asyncio import from main.py and discovery.py (ruff F401)
- Add node_modules to bandit exclude in CI workflow
Closes#13