sharang/compliance-scanner-agent
1
0
Fork 0
Code Issues 79 Pull Requests 1 Actions Packages Projects Releases 1 Wiki Activity

ONB-08 · Wizard screen 3 — scan selection + scope/auth #126

New Issue
Closed
opened 2026-07-10 08:34:45 +00:00 by sharang · 0 comments
sharang commented 2026-07-10 08:34:45 +00:00
Owner
Copy Link
Copy Source

Part of #118.

Context

Step 3: choose the scans and configure scope/credentials. Applicable scans are pre-selected from the applicability matrix (ONB-04).

Scope

  • Render applicable scans with default-on/off state + rationale; blocked scans shown greyed with a reason.
  • DAST config: auth (form/token/headers), excluded paths, max crawl depth, rate limit, allow-destructive — reuse DastAuthConfig.
  • Pentest config: scope inclusions/exclusions, Environment (dev/staging/prod), AuthMode (none/manual/auto-register), IdentityProvider — reuse the existing pentest wizard config.
  • Repo/tracker config (auth token, tracker type/owner/repo/token) folded in where relevant.

Acceptance criteria

  • Pre-selection matches the matrix for the chosen target+artifacts.
  • DAST and pentest sub-configs validate before continuing.
  • Production environment surfaces an explicit confirmation for destructive/active tests.

Depends on

ONB-05, ONB-04. Reuses DastAuthConfig, PentestConfig.

Part of #118. ## Context Step 3: choose the scans and configure scope/credentials. Applicable scans are pre-selected from the applicability matrix (ONB-04). ## Scope - Render applicable scans with default-on/off state + rationale; blocked scans shown greyed with a reason. - DAST config: auth (form/token/headers), excluded paths, max crawl depth, rate limit, allow-destructive — reuse `DastAuthConfig`. - Pentest config: scope inclusions/exclusions, `Environment` (dev/staging/prod), `AuthMode` (none/manual/auto-register), `IdentityProvider` — reuse the existing pentest wizard config. - Repo/tracker config (auth token, tracker type/owner/repo/token) folded in where relevant. ## Acceptance criteria - Pre-selection matches the matrix for the chosen target+artifacts. - DAST and pentest sub-configs validate before continuing. - Production environment surfaces an explicit confirmation for destructive/active tests. ## Depends on ONB-05, ONB-04. Reuses `DastAuthConfig`, `PentestConfig`.
sharang added this to the Onboarding v1 milestone 2026-07-10 08:34:45 +00:00
sharang added the enhancementonboarding labels 2026-07-10 08:34:45 +00:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
P0-demo
CERTifAI P0 demo build tickets (CS-*)
 bug
critical
enhancement
epic
Tracking issue spanning multiple sub-issues
 high
infrastructure
onboarding
Multi-target onboarding wizard redesign
 performance
security
v0.3.0
No labels enhancement onboarding
Milestone
No items
No Milestone Onboarding v1
Projects
Clear projects
No projects
Assignees
Clear assignees
Benjamin_Boenisch sharang (Sharang Parnerkar)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: sharang/compliance-scanner-agent#126