Initial commit: Compliance Scanner Agent

Autonomous security and compliance scanning agent for git repositories.
Features: SAST (Semgrep), SBOM (Syft), CVE monitoring (OSV.dev/NVD),
GDPR/OAuth pattern detection, LLM triage, issue creation (GitHub/GitLab/Jira),
PR reviews, and Dioxus fullstack dashboard.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

compliance-dashboard/src/infrastructure/findings.rs

@@ -0,0 +1,71 @@
+use dioxus::prelude::*;
+use serde::{Deserialize, Serialize};
+
+use compliance_core::models::Finding;
+
+#[derive(Debug, Clone, Serialize, Deserialize, Default)]
+pub struct FindingsListResponse {
+    pub data: Vec<Finding>,
+    pub total: Option<u64>,
+    pub page: Option<u64>,
+}
+
+#[server]
+pub async fn fetch_findings(
+    page: u64,
+    severity: String,
+    scan_type: String,
+    status: String,
+    repo_id: String,
+) -> Result<FindingsListResponse, ServerFnError> {
+    let state: super::server_state::ServerState =
+        dioxus_fullstack::FullstackContext::extract().await?;
+
+    let mut url = format!("{}/api/v1/findings?page={page}&limit=20", state.agent_api_url);
+    if !severity.is_empty() {
+        url.push_str(&format!("&severity={severity}"));
+    }
+    if !scan_type.is_empty() {
+        url.push_str(&format!("&scan_type={scan_type}"));
+    }
+    if !status.is_empty() {
+        url.push_str(&format!("&status={status}"));
+    }
+    if !repo_id.is_empty() {
+        url.push_str(&format!("&repo_id={repo_id}"));
+    }
+
+    let resp = reqwest::get(&url).await.map_err(|e| ServerFnError::new(e.to_string()))?;
+    let body: FindingsListResponse = resp.json().await.map_err(|e| ServerFnError::new(e.to_string()))?;
+    Ok(body)
+}
+
+#[server]
+pub async fn fetch_finding_detail(id: String) -> Result<Finding, ServerFnError> {
+    let state: super::server_state::ServerState =
+        dioxus_fullstack::FullstackContext::extract().await?;
+    let url = format!("{}/api/v1/findings/{id}", state.agent_api_url);
+
+    let resp = reqwest::get(&url).await.map_err(|e| ServerFnError::new(e.to_string()))?;
+    let body: serde_json::Value = resp.json().await.map_err(|e| ServerFnError::new(e.to_string()))?;
+    let finding: Finding = serde_json::from_value(body["data"].clone())
+        .map_err(|e| ServerFnError::new(e.to_string()))?;
+    Ok(finding)
+}
+
+#[server]
+pub async fn update_finding_status(id: String, status: String) -> Result<(), ServerFnError> {
+    let state: super::server_state::ServerState =
+        dioxus_fullstack::FullstackContext::extract().await?;
+    let url = format!("{}/api/v1/findings/{id}/status", state.agent_api_url);
+
+    let client = reqwest::Client::new();
+    client
+        .patch(&url)
+        .json(&serde_json::json!({ "status": status }))
+        .send()
+        .await
+        .map_err(|e| ServerFnError::new(e.to_string()))?;
+
+    Ok(())
+}