Commit Graph

Select branches

Hide Pull Requests

docs/control-mapping

docs/mcp-loop

docs/plc-runtimes

docs/plc-soft-plc-architecture

feat/b1-cra-semgrep-rules

feat/b2-grounded-surface-checks

feat/b3-architectural-controls

feat/ci-kellnr-sccache

feat/cve-alerts

feat/dashboard-targets-dropdowns

feat/dashboard-token-refresh

feat/dast-http-scheme

feat/e2e-tests

feat/enable-optin-scans

feat/firmware-sbom-repro-build

feat/firmware-sbom-tramiton

feat/grounded-control-check

feat/help-chat-widget

feat/light-mode-theme-toggle

feat/m7.1-agent-wire

feat/m7.1-smoke-harness

feat/m7.1-tenant-claims

feat/onboarding-api

feat/onboarding-foundation

feat/onboarding-ingest-classify

feat/onboarding-migration

feat/onboarding-pipeline

feat/onboarding-scan-detection

feat/onboarding-scan-trigger

feat/onboarding-validation-edit

feat/onboarding-wizard

feat/oscal-assess-live

feat/oscal-assessment

feat/oscal-controls-provider

feat/oscal-emit-unmapped-mcp

feat/pentest-onboarding

feat/plc-control-logic-scanner

feat/plc-provision-and-test

feat/promote-grounded-controls

feat/real-nix-firmware-sbom

feat/refine-llm-prompts

feat/semantic-control-mapping

feat/semantic-index-cache-autowire

feat/tune-semantic-retrieval

feat/werkbank-exec-crate

feat/werkbank-job-contract

feat/werkbank-job-queue

feat/werkbank-runnable-loop

feat/werkbank-runner-endpoints

fix/bump-tramiton-0.4.1

fix/cascade-delete-repo

fix/ci-concurrency-no-cancel-main

fix/ci-docker-tramiton-dashboard-mcp

fix/ci-docker-tramiton-fetch

fix/cve-scan-http-timeout

fix/dashboard-bearer-token

fix/embed-batch-chunking

fix/embedding-build-progress

fix/gitea-pr-review-error-handling

fix/m7.1-jwks-refresh

fix/mcp-tenant-context

fix/multiple-issues

fix/plc-control-mapping

fix/plc-refresh-control-refs

fix/refresh-control-refs

fix/remove-code-review-from-findings

fix/scan-resource-limits-and-script-error

fix/targets-visibility-unified-default

main

migrate/ci-breakpilot-tld

refactor/rip-out-legacy-repository

test/dummy-bad-code

#1

#10

#11

#12

#13

#134

#138

#14

#140

#141

#142

#143

#144

#145

#146

#147

#15

#152

#153

#154

#155

#156

#157

#158

#159

#16

#160

#161

#162

#163

#168

#169

#170

#171

#172

#173

#174

#175

#176

#177

#178

#179

#180

#181

#182

#184

#185

#193

#2

#205

#206

#207

#208

#209

#210

#211

#212

#213

#214

#215

#216

#217

#218

#219

#22

#220

#221

#222

#223

#224

#225

#226

#227

#228

#229

#23

#230

#231

#3

#4

#47

#48

#49

#5

#50

#51

#52

#53

#55

#6

#7

#78

#79

#8

#80

#81

#82

#83

#84

#85

#86

#87

#88

#89

#9

#90

#91

#92

#93

#94

#95

#96

#97

v0.2.0

v0.3.0

Mono Color

• 0834547a74 chore(ci): repoint registry/git/cargo meghsakha.com -> breakpilot.com (#231) main sharang 2026-08-06 08:42:45 +00:00
• 2c03371b18 chore(ci): repoint registry/git/cargo meghsakha.com -> breakpilot.com migrate/ci-breakpilot-tld sharangandClaude Opus 4.8 2026-08-06 10:30:53 +02:00
• effc3080e0 fix(orchestrator): refresh control_refs on PLC re-scans (#230) v0.3.0 sharang 2026-07-22 17:06:08 +00:00
• 731f84d2e5 fix(orchestrator): refresh control_refs on PLC re-scans fix/plc-refresh-control-refs Sharang ParnerkarandClaude Opus 4.8 2026-07-22 18:40:12 +02:00
• 51bab61f77 fix(orchestrator): run semantic control mapping on PLC findings (#229) sharang 2026-07-22 13:16:53 +00:00
• 6ae5d9a07f fix(orchestrator): run semantic control mapping on PLC findings fix/plc-control-mapping Sharang ParnerkarandClaude Opus 4.8 2026-07-22 15:09:48 +02:00
• 5bdc35ee92 fix(orchestrator): refresh control_refs on existing findings during re-scan (#228) sharang 2026-07-22 12:24:36 +00:00
• 6af84c5216 fix(orchestrator): refresh control_refs on existing findings during re-scan fix/refresh-control-refs Sharang ParnerkarandClaude Opus 4.8 2026-07-22 14:18:04 +02:00
• ea516cc054 docs(control-mapping): MCP emission loop + default-on flags (#227) sharang 2026-07-22 11:23:51 +00:00
• 9c8f864a1d docs(control-mapping): MCP emission loop + flags now default-on docs/mcp-loop Sharang ParnerkarandClaude Opus 4.8 2026-07-22 13:14:59 +02:00
• 7d5c95ddb8 fix(mcp): bind tenant to session — bearer context was lost over HTTP (#226) sharang 2026-07-22 09:30:07 +00:00
• 02c7552725 fix(mcp): bind tenant to session — bearer context was lost over HTTP fix/mcp-tenant-context Sharang ParnerkarandClaude Fable 5 2026-07-22 11:23:25 +02:00
• 3e233da128 feat(controls): promote grounded controls to covered + enable LLM passes by default (#224) sharang 2026-07-22 07:48:51 +00:00
• a72f79e557 ci: fix cosign signing (install fallback, env-style login, portal sign step) (#225) sharang 2026-07-22 07:46:34 +00:00
• 32abbfb7bb feat(controls): promote grounded controls to covered + enable LLM passes by default feat/promote-grounded-controls Sharang ParnerkarandClaude Fable 5 2026-07-22 09:42:06 +02:00
• 182dec69b8 docs(features): compliance control-mapping pipeline (#223) sharang 2026-07-22 07:30:10 +00:00
• d03f027fa1 docs(features): control mapping pipeline (grounded in the C5 live results) docs/control-mapping Sharang ParnerkarandClaude Fable 5 2026-07-22 09:23:04 +02:00
• a25d41c3e5 feat(controls): enrich semantic retrieval query with finding intent + C5 live test (#222) sharang 2026-07-22 07:14:49 +00:00
• 31f1635ee8 feat(controls): enrich semantic retrieval query with finding intent + C5 live test feat/tune-semantic-retrieval Sharang ParnerkarandClaude Fable 5 2026-07-22 09:06:18 +02:00
• 60601d8215 fix(llm): chunk embed() requests under the backend batch cap (#221) sharang 2026-07-21 15:41:07 +00:00
• 617b2df75e fix(llm): chunk embed() requests under the backend batch cap fix/embed-batch-chunking Sharang ParnerkarandClaude Fable 5 2026-07-21 17:34:17 +02:00
• a7ff36edf3 feat(controls): B3 — categorize the rest of needs_tooling (architectural + RBAC) (#220) sharang 2026-07-21 13:15:27 +00:00
• 7cd4ffdaab feat(controls): B3 — categorize the rest of needs_tooling (architectural + RBAC) feat/b3-architectural-controls Sharang ParnerkarandClaude Fable 5 2026-07-21 14:50:50 +02:00
• 4ef257bfe2 feat(controls): B2 — grounded surface checks for absence-based CRA controls (#219) sharang 2026-07-21 12:48:12 +00:00
• 82ed4afd10 feat(controls): B2 — grounded surface checks for absence-based CRA controls feat/b2-grounded-surface-checks Sharang ParnerkarandClaude Fable 5 2026-07-21 14:41:22 +02:00
• 38fedc661b feat(controls): B1 — custom semgrep detectors for 4 CRA controls (#218) sharang 2026-07-21 12:31:20 +00:00
• 563d8afb2a feat(controls): B1 — custom semgrep detectors for 4 CRA controls feat/b1-cra-semgrep-rules Sharang ParnerkarandClaude Fable 5 2026-07-21 14:21:34 +02:00
• 36a49cdeac ci: push images to Harbor (repo.meghsakha.com) + cosign (#216) sharang 2026-07-21 12:08:04 +00:00
• 0ef2cd1b23 feat(agent): cache control embedding index + auto-wire semantic pass (gated) (#217) sharang 2026-07-21 11:29:16 +00:00
• 8cf3d09a23 feat(agent): cache control embedding index + auto-wire semantic pass (gated) feat/semantic-index-cache-autowire Sharang ParnerkarandClaude Fable 5 2026-07-21 13:12:01 +02:00
• f516ecf3b5 feat(agent): semantic control mapping — embedding index + region->control retrieval (#215) sharang 2026-07-21 10:50:21 +00:00
• 95c18e7683 feat(agent): C4 — semantic_stamp_findings + provider load_master_controls feat/semantic-control-mapping Sharang ParnerkarandClaude Fable 5 2026-07-21 12:43:58 +02:00
• 30487e4d8f feat(agent): semantic control mapping — embedding index + region->control retrieval Sharang ParnerkarandClaude Fable 5 2026-07-21 12:35:30 +02:00
• 18a23403a1 feat(oscal): emit unmapped findings as-is + MCP oscal_assessment tool (#214) sharang 2026-07-21 09:48:37 +00:00
• 54cf39383c feat(oscal): emit unmapped findings as-is + MCP oscal_assessment tool feat/oscal-emit-unmapped-mcp Sharang ParnerkarandClaude Fable 5 2026-07-21 11:33:09 +02:00
• c6baf72c6d feat: control-driven SAST — LUT + grounded LLM triage over tool findings (#213) sharang 2026-07-21 09:01:51 +00:00
• 753ecefaae fix(semgrep): extract CWE from list-form metadata (was always null) feat/grounded-control-check Sharang ParnerkarandClaude Fable 5 2026-07-21 10:55:00 +02:00
• 075a4cb81b feat(agent): wire control triage into the scan pipeline (end-to-end SAST) Sharang ParnerkarandClaude Fable 5 2026-07-21 10:28:01 +02:00
• f712ba1e60 feat(agent): control triage — LLM false-positive filter over tool findings Sharang ParnerkarandClaude Fable 5 2026-07-21 10:20:31 +02:00
• b7534d1123 feat(control-map): deterministic control->scan LUT crate (CRA, 40 controls) Sharang ParnerkarandClaude Fable 5 2026-07-21 10:15:26 +02:00
• d1f42a1a83 feat(agent): grounded control checker — compose judge -> ground gate Sharang ParnerkarandClaude Opus 4.8 2026-07-20 22:51:57 +02:00
• b0117078f3 feat(agent): control judge — LLM recognize stage (temp 0, verbatim, fail-closed) Sharang ParnerkarandClaude Opus 4.8 2026-07-20 22:50:20 +02:00
• bfeb3f041a feat(core): grounded control-check backbone (ground gate + cache) Sharang ParnerkarandClaude Opus 4.8 2026-07-20 22:47:10 +02:00
• 5285fb67ae feat(oscal): live assessment endpoint POST /api/v1/oscal/assess (#212) sharang 2026-07-20 19:13:47 +00:00
• 2d20ad7a6e feat(agent): live OSCAL assessment endpoint POST /api/v1/oscal/assess feat/oscal-assess-live Sharang ParnerkarandClaude Opus 4.8 2026-07-20 19:04:03 +02:00
• ca4e31cb65 feat(oscal): assessment-results emitter + finding->control linker (#211) sharang 2026-07-20 16:53:39 +00:00
• d5ff60d55a feat(core): OSCAL assessment-results emitter + finding->control linker feat/oscal-assessment Sharang ParnerkarandClaude Opus 4.8 2026-07-20 18:26:01 +02:00
• d4884cfe4f feat(oscal): ingest breakpilot OSCAL catalog via OscalControlsProvider (#210) sharang 2026-07-20 16:19:09 +00:00
• 51aae6665a feat(agent): OscalControlsProvider — pull + snapshot breakpilot OSCAL catalog feat/oscal-controls-provider Sharang ParnerkarandClaude Opus 4.8 2026-07-20 18:01:03 +02:00
• 0e5a2d7e43 feat(core): OSCAL 1.1 catalog types + mapping to controls corpus Sharang ParnerkarandClaude Opus 4.8 2026-07-20 17:56:39 +02:00
• 94c0d51a11 feat(werkbank): make the loop runnable — enqueue + artifact serve/fetch (WB-05b) (#209) sharang 2026-07-17 14:34:00 +00:00
• 32b0435738 feat(werkbank): make the loop runnable — enqueue + artifact serve/fetch (WB-05b) feat/werkbank-runnable-loop Sharang ParnerkarandClaude Fable 5 2026-07-17 16:26:26 +02:00
• 70a4ee55ab refactor(werkbank): extract soft-PLC provisioning + ICS probe into werkbank-exec (WB-04a) (#208) sharang 2026-07-17 12:56:15 +00:00
• e5f4b562c3 refactor(werkbank): extract soft-PLC provisioning + ICS probe into werkbank-exec (WB-04a) feat/werkbank-exec-crate Sharang ParnerkarandClaude Fable 5 2026-07-17 14:25:22 +02:00
• 91a87677bc feat(werkbank): runner queue endpoints + result persistence (WB-05) (#207) sharang 2026-07-17 11:42:29 +00:00
• 420af3af9e feat(werkbank): runner queue endpoints + result persistence (WB-05) feat/werkbank-runner-endpoints Sharang ParnerkarandClaude Fable 5 2026-07-17 12:28:02 +02:00
• 633f945a1e feat(werkbank): Mongo-backed job queue with lease + visibility timeout (WB-02) (#206) sharang 2026-07-17 09:15:23 +00:00
• 25f232774e feat(werkbank): Mongo-backed job queue with lease + visibility timeout (WB-02) feat/werkbank-job-queue Sharang ParnerkarandClaude Fable 5 2026-07-17 11:07:31 +02:00
• 7b218fffef feat(werkbank): job/result contract in compliance-core (WB-01) (#205) sharang 2026-07-17 08:54:11 +00:00
• 463d4f6eb2 feat(werkbank): job/result contract in compliance-core (WB-01) feat/werkbank-job-contract Sharang ParnerkarandClaude Fable 5 2026-07-17 10:24:49 +02:00
• 7ad7bce9db feat(plc): dynamic PLC testing via ephemeral soft-PLC (#193) sharang 2026-07-17 07:47:43 +00:00
• 896a06e8f6 style: apply rustfmt to the provision-and-test modules feat/plc-provision-and-test Sharang ParnerkarandClaude Fable 5 2026-07-17 09:44:36 +02:00
• 69bce2f07c feat(plc): DAST the provisioned WebVisu + enumerate exposed Modbus points (#183) Sharang ParnerkarandClaude Fable 5 2026-07-17 09:35:08 +02:00
• 1ae6025286 feat(plc): ephemeral soft-PLC provisioning + program load (#183) Sharang ParnerkarandClaude Fable 5 2026-07-17 00:39:54 +02:00
• 1aba85b28e docs(plc): PLC Runtime Landscape reference + support watch-list (#185) sharang 2026-07-16 22:05:39 +00:00
• c6a84b327f docs(plc): soft-PLC architecture + CODESYS/Yocto lifecycle diagram (#184) sharang 2026-07-16 22:00:17 +00:00
• 50a54c02bc docs(plc): add PLC Runtime Landscape reference + support watch-list docs/plc-runtimes Sharang ParnerkarandClaude Opus 4.8 2026-07-16 23:59:44 +02:00
• c1e0a80f90 docs(plc): add soft-PLC architecture + CODESYS/Yocto lifecycle diagram docs/plc-soft-plc-architecture Sharang ParnerkarandClaude Opus 4.8 2026-07-16 23:52:47 +02:00
• 0f4c75b6b3 fix(matrix): DAST needs an http(s) endpoint; don't offer/run it on modbus:// (#182) sharang 2026-07-16 21:28:47 +00:00
• 7bba3518d1 fix(matrix): DAST needs an http(s) endpoint; don't offer/run it on modbus:// feat/dast-http-scheme Sharang ParnerkarandClaude Opus 4.8 2026-07-16 23:22:17 +02:00
• cd65fa345c feat(onboarding): enable opt-in scans from the wizard success step (#181) sharang 2026-07-16 20:52:50 +00:00
• 37dac862e8 feat(onboarding): accept modbus:// and opc.tcp:// live-URL refs feat/enable-optin-scans Sharang ParnerkarandClaude Opus 4.8 2026-07-16 22:36:34 +02:00
• 74ced0d740 feat(onboarding): enable opt-in scans from the wizard success step Sharang ParnerkarandClaude Opus 4.8 2026-07-16 22:33:33 +02:00
• 097f86243e feat(cve): match the CODESYS runtime against NVD by CPE (#180) sharang 2026-07-16 20:10:18 +00:00
• b7406eca15 feat(onboarding): Project-archive PLC format + auto-detect (#179) sharang 2026-07-16 20:05:05 +00:00
• 4f9e2c2828 fix(plc): scan every PLC-source artifact, not just the first (#178) sharang 2026-07-16 19:59:58 +00:00
• 98357cae10 fix(upload): raise body-size limit to 512 MiB + surface upload errors (#177) sharang 2026-07-16 18:03:40 +00:00
• 55e4117369 fix(dashboard): preselect saved type/kind in edit-target form (#176) sharang 2026-07-16 17:52:27 +00:00
• 7932f60ab9 feat(ics): EtherNet/IP probe + OT service-discovery port scan (#175) sharang 2026-07-16 16:48:22 +00:00
• b96c4d594c feat(ics): OPC UA reachability probe (#174) sharang 2026-07-16 16:35:54 +00:00
• d2003eb3c0 feat(cve): notifications for the PLC control-app SBOM (#173) sharang 2026-07-16 16:30:19 +00:00
• 77eced8314 feat(ics): dynamic Modbus/TCP probe for PLC/SPS devices (#172) sharang 2026-07-16 16:25:04 +00:00
• a3f3f1d4f5 feat(plc): ingest CODESYS projects from a git repo (SAST + SBOM) (#171) sharang 2026-07-16 15:47:04 +00:00
• 7369e031c4 feat(plc): control-application SBOM from CODESYS .projectarchive (#170) sharang 2026-07-16 15:28:42 +00:00
• 386d8457d6 feat(plc): analyse graphical logic (FBD/LD) from PLCopen XML (#169) sharang 2026-07-16 11:43:49 +00:00
• 3a53a1d7f2 feat(matrix): PlcSps composite device target (SBOM/CVE/DAST/pentest) (#168) sharang 2026-07-16 10:56:36 +00:00
• afa5c985ee feat(onboarding): PLC/blob file upload (multipart) + single-file ingest fix (#163) sharang 2026-07-16 09:41:12 +00:00
• 6d02b138c6 feat(pipeline): PLC/SPS control-logic security scanner (IEC 61131-3) (#162) sharang 2026-07-16 08:31:43 +00:00
• f8861419cb test(plc): add realistic OpenPLC-style traffic-light sample feat/plc-control-logic-scanner Sharang ParnerkarandClaude Opus 4.8 2026-07-16 10:25:31 +02:00
• 5e983d699f fix(plc): drop redundant watchdog clause in safety-bypass rule Sharang ParnerkarandClaude Opus 4.8 2026-07-16 10:20:54 +02:00
• fcd49ecdf7 feat(pipeline): PLC/SPS control-logic security scanner (IEC 61131-3) Sharang ParnerkarandClaude Opus 4.8 2026-07-16 09:52:42 +02:00
• a981311413 refactor: rip out the legacy TrackedRepository / repositories path (#161) sharang 2026-07-16 07:25:45 +00:00
• dadccb9264 refactor: rip out the legacy TrackedRepository / repositories path refactor/rip-out-legacy-repository Sharang ParnerkarandClaude Opus 4.8 2026-07-13 21:17:41 +02:00
• 87f240b26f feat(onboarding): input validation + editable targets (#160) sharang 2026-07-13 17:57:48 +00:00
• 96763b7fe9 feat(onboarding): input validation + editable targets feat/onboarding-validation-edit Sharang ParnerkarandClaude Opus 4.8 2026-07-13 19:51:47 +02:00
• 613847d4d3 feat(agent): real nix (sandbox=false) for firmware SBOM, replacing nix-portable (#159) sharang 2026-07-13 16:01:09 +00:00
• c2d43c55e7 feat(agent): real nix (sandbox=false) for firmware SBOM, replacing nix-portable feat/real-nix-firmware-sbom Sharang ParnerkarandClaude Opus 4.8 2026-07-13 17:54:55 +02:00
• 71aceafa26 fix(deps): bump tramiton to v0.4.1 (proot-safe firmware build) (#158) sharang 2026-07-13 11:21:43 +00:00
• fbb557a243 fix(deps): bump tramiton to v0.4.1 (proot-safe firmware build) fix/bump-tramiton-0.4.1 Sharang ParnerkarandClaude Opus 4.8 2026-07-13 13:06:38 +02:00
• b12d18d99d feat(pipeline): firmware SBOM via tramiton reproducible build (phase 2) (#157) sharang 2026-07-13 10:15:06 +00:00