7 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Sharang ParnerkarandClaude Fable 5	cbe07261b1	feat(pipeline): unified run_target execution behind UNIFIED_PIPELINE (#133 part 2) ... Wire the scan-plan builder into a runnable pipeline that scans an OnboardedTarget: - AgentConfig.unified_pipeline (env UNIFIED_PIPELINE, default off). agent.run_scan dispatches to run_target when set, else the legacy run(). - orchestrator::run_target: loads the target from onboarded_targets, creates a ScanRun, and runs run_target_pipeline; run_target_pipeline builds the scan plan and, for a code (git) artifact, reuses the full legacy pipeline via a TrackedRepository view (clone → SAST umbrella → triage → persist → issues → DAST) then syncs findings_count + the git watermark back to the target. Firmware/PLC/mobile scanners are follow-ups (#128/#129/#130); URL-only targets attempt DAST. - repo_view_from_target: inverse of the migration's repo_to_target, _id-preserving. Additive + flag-gated: the legacy path is unchanged and default. Unit tests for repo_view_from_target (+ the part-1 build_scan_plan tests). Full E2E verification is via UNIFIED_PIPELINE=1 on a running instance. Closes #133. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-12 23:24:45 +02:00
Sharang ParnerkarandClaude Fable 5	27d20ed11c	feat(pipeline): scan-plan builder for the unified pipeline (#133 part 1) ... build_scan_plan(target) turns an OnboardedTarget into the ordered set of scans to run, each bound to the artifact it consumes: matrix defaults (applicable_scans) intersected with the target's scan_config enable/disable overrides. Pure and fully unit-tested; the decision engine that run_target will execute next. Refs #133. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-12 23:16:44 +02:00
Sharang Parnerkar	5cafd13f44	ci: log orca webhook response so deploy steps arent silent	2026-04-08 15:09:27 +02:00
Sharang ParnerkarandClaude Opus 4.6	69209649a5	ci: trigger first orca build for all services ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-08 10:10:07 +02:00
Sharang ParnerkarandClaude Opus 4.6	d5439adc0d	ci: trigger build of dashboard, docs, mcp images for orca ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-08 10:09:49 +02:00
Sharang ParnerkarandClaude Opus 4.6	bc7cdd35e4	ci: replace coolify webhook with orca deploy ... Each deploy job now builds the per-service image, pushes to the private registry as :latest and :sha, then triggers an HMAC-signed orca redeploy webhook. Coolify webhooks are no longer used. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-08 10:06:11 +02:00
Sharang ParnerkarandClaude Opus 4.6	c062d834a1	fix: downgrade dotenv missing file from FAILED to info message ... Non-fatal in Docker where env vars come from container config. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-30 15:33:24 +02:00