252f4f813b
Some checks failed
E2E Tests / Playwright E2E (push) Failing after 14s
CI / Lint → Typecheck → Test → Build (22) (push) Failing after 11s
CI / E2E Tests (push) Has been skipped
Deploy / Build API Image (push) Failing after 16s
Deploy / Build Web Image (push) Failing after 11s
Deploy / Build AI Services Image (push) Failing after 10s
Deploy / Deploy to Staging (push) Has been skipped
Deploy / Smoke Test Staging (push) Has been skipped
Deploy / Deploy to Production (push) Has been skipped
Deploy / Smoke Test Production (push) Has been skipped
Deploy / Rollback Staging (push) Has been skipped
Deploy / Rollback Production (push) Has been skipped
Security Scanning / Dependency Audit (pnpm) (push) Failing after 16s
Security Scanning / Trivy Scan — API Image (push) Failing after 12m39s
Security Scanning / Trivy Scan — Web Image (push) Failing after 50s
Security Scanning / Trivy Scan — AI Services Image (push) Failing after 36s
Security Scanning / Trivy Filesystem Scan (push) Failing after 23s
Security Scanning / Security Gate (push) Failing after 2s
CSP connect-src needs origin (https://api.goodgo.vn), not a URL with path (/api/v1). The path form only matches that exact path, blocking fetch to /api/v1/listings, /api/v1/health etc. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>