compliance-scanner-agent

5 Commits

Include renames

Author	SHA1	Message	Date
Sharang ParnerkarandClaude Fable 5	cbe07261b1	feat(pipeline): unified run_target execution behind UNIFIED_PIPELINE (#133 part 2) CI / Deploy Agent (pull_request) Has been skipped Details CI / Deploy Dashboard (pull_request) Has been skipped Details CI / Deploy Docs (pull_request) Has been skipped Details CI / Deploy MCP (pull_request) Has been skipped Details CI / Check (pull_request) Successful in 5m27s Details CI / Detect Changes (pull_request) Has been skipped Details Wire the scan-plan builder into a runnable pipeline that scans an OnboardedTarget: - AgentConfig.unified_pipeline (env UNIFIED_PIPELINE, default off). agent.run_scan dispatches to run_target when set, else the legacy run(). - orchestrator::run_target: loads the target from onboarded_targets, creates a ScanRun, and runs run_target_pipeline; run_target_pipeline builds the scan plan and, for a code (git) artifact, reuses the full legacy pipeline via a TrackedRepository view (clone → SAST umbrella → triage → persist → issues → DAST) then syncs findings_count + the git watermark back to the target. Firmware/PLC/mobile scanners are follow-ups (#128/#129/#130); URL-only targets attempt DAST. - repo_view_from_target: inverse of the migration's repo_to_target, _id-preserving. Additive + flag-gated: the legacy path is unchanged and default. Unit tests for repo_view_from_target (+ the part-1 build_scan_plan tests). Full E2E verification is via UNIFIED_PIPELINE=1 on a running instance. Closes #133. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-12 23:24:45 +02:00
sharang	ef6ee3dcd1	feat(onboarding): artifact ingest + classifier + native tramiton + suite seams (#138 ) CI / Check (push) Has been skipped Details CI / Detect Changes (push) Successful in 3s Details CI / Deploy Agent (push) Failing after 5s Details CI / Deploy Dashboard (push) Failing after 5s Details CI / Deploy Docs (push) Has been skipped Details CI / Deploy MCP (push) Failing after 4s Details	2026-07-10 16:00:51 +00:00
sharang	ac24ca766a	feat(m7.3): cross-tenant admin HTTP endpoints (#95 ) CI / Check (push) Has been skipped Details CI / Detect Changes (push) Successful in 4s Details CI / Deploy Dashboard (push) Has been cancelled Details CI / Deploy Docs (push) Has been cancelled Details CI / Deploy MCP (push) Has been cancelled Details CI / Deploy Agent (push) Has been cancelled Details GET /api/admin/tenants lists tenant DBs; DELETE /api/admin/tenants/{tenant_id} drops them (GDPR). Behind a separate auth path that rejects customer realm tokens.	2026-06-30 15:23:39 +00:00
Sharang ParnerkarandClaude Opus 4.6	a509bdcb2e	fix: require TLS for IMAP auth, close port 143 (CERT-Bund compliance) CI / Check (push) Has been skipped Details CI / Detect Changes (push) Successful in 7s Details CI / Deploy Agent (push) Successful in 2s Details CI / Deploy Dashboard (push) Successful in 1s Details CI / Deploy Docs (push) Has been skipped Details CI / Deploy MCP (push) Successful in 2s Details - Remove port 143 from mailserver (only expose 993/IMAPS) - Enable SSL_TYPE=manual with Let's Encrypt certs - Set DOVECOT_DISABLE_PLAINTEXT_AUTH=yes - Add pentest_imap_tls config field (defaults to true) Fixes CERT-Bund report: IMAP PLAIN/LOGIN without TLS on 46.225.100.82:143 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-18 09:29:34 +01:00
sharangandSharang Parnerkar	c461faa2fb	feat: pentest onboarding — streaming, browser automation, reports, user cleanup (#16 ) CI / Deploy MCP (push) Successful in 2s Details CI / Check (push) Has been skipped Details CI / Detect Changes (push) Successful in 7s Details CI / Deploy Agent (push) Successful in 2s Details CI / Deploy Dashboard (push) Successful in 2s Details CI / Deploy Docs (push) Successful in 2s Details Complete pentest feature overhaul: SSE streaming, session-persistent browser tool (CDP), AES-256 credential encryption, auto-screenshots in reports, code-level remediation correlation, SAST triage chunking, context window optimization, test user cleanup (Keycloak/Auth0/Okta), wizard dropdowns, attack chain improvements, architecture docs with Mermaid diagrams. Co-authored-by: Sharang Parnerkar <parnerkarsharang@gmail.com> Reviewed-on: #16	2026-03-17 20:32:20 +00:00