7 Commits

Author	SHA1	Message	Date
Sharang Parnerkar	5b07d38907	feat: add E2E test suite with nightly CI, fix dashboard Dockerfile ... E2E Tests: - 17 integration tests covering: health, repos CRUD, findings lifecycle, cascade delete (SAST + DAST + pentest), DAST targets, stats overview - TestServer harness: spins up agent API on random port with isolated MongoDB database per test, auto-cleanup - Added lib.rs to expose agent internals for integration tests - Nightly CI workflow with MongoDB service container (3 AM UTC) Tests verify: - Repository add/list/delete + duplicate rejection + invalid ID handling - Finding creation, filtering by severity/repo, status updates, bulk updates - Cascade delete: repo deletion removes all DAST targets, pentest sessions, attack chain nodes, DAST findings, SAST findings, and SBOM entries - DAST target CRUD and empty finding list - Stats overview accuracy with zero and populated data Also: - Fix Dockerfile.dashboard: bump dioxus-cli 0.7.3 → 0.7.4 (compile fix) - Fix clippy: allow new_without_default for pattern scanners Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-30 11:01:19 +02:00
Sharang Parnerkar	77f1c92c7b	ci: skip check stage on main push since PRs enforce it ... Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-13 11:20:39 +01:00
Sharang Parnerkar	a529e9af0c	ci: consolidate CI into single job; fix sidebar footer (#14)	2026-03-13 09:44:32 +00:00
Sharang Parnerkar	491665559f	feat: per-repo issue tracker, Gitea support, PR review pipeline (#10)	2026-03-11 12:13:59 +00:00
Sharang Parnerkar	32e5fc21e7	feat: add MCP server for exposing compliance data to LLMs (#5) ... New `compliance-mcp` crate providing a Model Context Protocol server with 7 tools: list/get/summarize findings, list SBOM packages, SBOM vulnerability report, list DAST findings, and DAST scan summary. Supports stdio (local dev) and Streamable HTTP (deployment via MCP_PORT). Includes Dockerfile, CI clippy check, and Coolify deploy job. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> Co-authored-by: Sharang Parnerkar <parnerkarsharang@gmail.com> Reviewed-on: #5	2026-03-09 08:21:04 +00:00
Sharang Parnerkar	d13cef94cb	Add Coolify deploy jobs with path-based change detection ... Deploys agent, dashboard, and docs independently based on which files changed. Only triggers on main after tests pass. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-08 19:22:56 +01:00
Sharang Parnerkar	62196e5d74	Add CI pipeline for Gitea Actions ... Format, clippy, security audit, and test stages adapted from certifai. Clippy and tests run per-crate with proper feature gating for the dashboard's server/web split. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-02 17:26:27 +01:00