fix: integrate Bright CI for security tests and remediation

[bram-star-app]

Note

Fixed 7 of 7 vulnerabilities.
Please review the fixes before merging.

Vulnerability	Endpoint	Affected Files	Resolution
Secret Tokens Leak	GET /api/secrets	src/app.controller.ts	Replaced hardcoded secret tokens with environment variables to prevent exposure.
OS Command Injection	GET /api/spawn	src/app.service.ts	Sanitize command input to prevent OS command injection by allowing only alphanumeric and specific safe characters.
XML External Entity (XXE)	POST /api/metadata	src/app.controller.ts	Disabled external entity expansion and DTD validation in the XML parser to prevent XXE attacks.
Cross-Site Scripting	POST /api/metadata	src/app.controller.ts	Sanitize XML input in the 'metadata' endpoint to prevent XSS by removing script tags and event handlers.
Unvalidated Redirect	GET /api/goto	src/app.controller.ts	The fix now ensures that only URLs with allowed domains are redirected, preventing open redirects.
Server Side Template Injection	POST /api/render	src/app.controller.ts	The fix now uses a safe template rendering approach by disabling evaluation, interpolation, and encoding in the template engine to prevent code execution.
Secret Tokens Leak	GET /api/config	src/app.service.ts	Sensitive information in the configuration response is now hidden to prevent exposure of secret tokens.

Workflow execution details

• ✅ Repository Analysis: TypeScript, NestJS
• ✅ Entrypoints Discovery: 9 entrypoints
• ✅ Attack Vectors Identification
• ✅ E2E Security Tests Generation: 9 test files created
• ✅ E2E Security Tests Execution: Found 7 vulnerabilities.
• ✅ Cleanup Irrelevant Test Files: 3 files removed.
• ✅ Applying Security Fixes: Generated 7 security fixes.
• ✅ E2E Security Tests Execution: Found 3 vulnerabilities.
• ✅ Cleanup Irrelevant Test Files: 3 files removed.
• ✅ Applying Security Fixes: Generated 3 security fixes.
• ✅ E2E Security Tests Execution: Found 1 vulnerabilities.
• ✅ Cleanup Irrelevant Test Files: 2 files removed.
• ✅ Applying Security Fixes: Generated 1 security fixes.
• ✅ E2E Security Tests Execution: Found 0 vulnerabilities.
• ✅ Workflow Wrap-Up