6 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Sharang ParnerkarandClaude Opus 4.8	6006c14f99	feat(cve): match the CODESYS runtime against NVD by CPE ... OSV-by-purl can't match `pkg:codesys/*` (OSV has no codesys ecosystem), so the CODESYS control-app SBOM produced zero CVE alerts even when the runtime was affected — "No CVE alerts" read as safe when it just meant "not checked" (found live during the demo). Add CveScanner::scan_codesys: find the CODESYS **runtime** component (the version advisories key off), pull `cpe:2.3:a:codesys:*` CVEs from NVD, and keep the ones whose affected-version range (versionStart/End Including/Excluding, or an exact CPE version) covers the runtime version. Wired into persist_control_app_sbom alongside the OSV scan (best-effort, timeout-bounded). Pure logic unit-tested (runtime detection, dotted-version compare, CPE range matching, NVD-config parsing against a fixture): a 4.17.0.0 runtime matches a `<=4.20` CVE but not an old `<4.9` one. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-16 22:04:23 +02:00
Sharang Parnerkar	5cafd13f44	ci: log orca webhook response so deploy steps arent silent	2026-04-08 15:09:27 +02:00
Sharang ParnerkarandClaude Opus 4.6	69209649a5	ci: trigger first orca build for all services ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-08 10:10:07 +02:00
Sharang ParnerkarandClaude Opus 4.6	d5439adc0d	ci: trigger build of dashboard, docs, mcp images for orca ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-08 10:09:49 +02:00
Sharang ParnerkarandClaude Opus 4.6	bc7cdd35e4	ci: replace coolify webhook with orca deploy ... Each deploy job now builds the per-service image, pushes to the private registry as :latest and :sha, then triggers an HMAC-signed orca redeploy webhook. Coolify webhooks are no longer used. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-08 10:06:11 +02:00
Sharang ParnerkarandClaude Opus 4.6	c062d834a1	fix: downgrade dotenv missing file from FAILED to info message ... Non-fatal in Docker where env vars come from container config. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-30 15:33:24 +02:00