feat: findings refinement, new scanners, and deployment tooling #6

Merged

sharang merged 6 commits from feat/findings-refinement into main 2026-03-09 12:53:13 +00:00

Conversation 0 Commits 6 Files Changed 40

+2048 -118

sharang commented 2026-03-09 10:06:03 +00:00

Owner

Copy Link

Copy Source

Summary

• Add gitleaks secret detection, lint scanning (clippy/eslint/ruff), and LLM code review scanners to the scan pipeline
• Enhance LLM triage with multi-action support (confirm/downgrade/upgrade/dismiss), surrounding code context, and file-path classification confidence adjustment
• Add text search, column sorting, bulk status update, and developer feedback to findings dashboard
• Fix BSON DateTime deserialization across all models with shared serde helpers
• Add scan progress spinner with polling to repositories page
• Batch OSV.dev queries to avoid rate limit errors
• Add gitleaks, semgrep, and ruff to Dockerfile.agent for deployment

Test plan

• Trigger a scan and verify all new stages run (secret detection, lint, code review)
• Verify findings list search, sort, and bulk status update work
• Verify finding detail page status refresh and developer feedback save
• Verify scan button shows spinner and disables during scan
• Build Dockerfile.agent and confirm gitleaks, semgrep, ruff are available

🤖 Generated with Claude Code

## Summary - Add gitleaks secret detection, lint scanning (clippy/eslint/ruff), and LLM code review scanners to the scan pipeline - Enhance LLM triage with multi-action support (confirm/downgrade/upgrade/dismiss), surrounding code context, and file-path classification confidence adjustment - Add text search, column sorting, bulk status update, and developer feedback to findings dashboard - Fix BSON DateTime deserialization across all models with shared serde helpers - Add scan progress spinner with polling to repositories page - Batch OSV.dev queries to avoid rate limit errors - Add gitleaks, semgrep, and ruff to Dockerfile.agent for deployment ## Test plan - [x] Trigger a scan and verify all new stages run (secret detection, lint, code review) - [x] Verify findings list search, sort, and bulk status update work - [x] Verify finding detail page status refresh and developer feedback save - [x] Verify scan button shows spinner and disables during scan - [x] Build Dockerfile.agent and confirm gitleaks, semgrep, ruff are available 🤖 Generated with [Claude Code](https://claude.com/claude-code)

sharang added 1 commit 2026-03-09 10:06:03 +00:00

feat: add new scanners, enhanced triage, findings refinement, and deployment tooling ... 23ba52276b

- Add gitleaks secret detection, lint scanning (clippy/eslint/ruff), and LLM code review scanners
- Enhance LLM triage with multi-action support (confirm/downgrade/upgrade/dismiss),
  surrounding code context, and file-path classification confidence adjustment
- Add text search, column sorting, and bulk status update to findings dashboard
- Fix finding detail page status refresh and add developer feedback field
- Fix BSON DateTime deserialization across all models with shared serde helpers
- Add scan progress spinner with polling to repositories page
- Batch OSV.dev queries to avoid "Too many queries" errors
- Add gitleaks, semgrep, and ruff to Dockerfile.agent for deployment

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

sharang added 1 commit 2026-03-09 10:53:45 +00:00

feat: add private repository support with SSH key and HTTPS token auth ... 492a93a83e

- Generate SSH ed25519 key pair on agent startup for cloning private repos via SSH
- Add GET /api/v1/settings/ssh-public-key endpoint to expose deploy key
- Add auth_token and auth_username fields to TrackedRepository model
- Wire git2 credential callbacks for both SSH and HTTPS authentication
- Validate repository access before saving (test-connect on add)
- Update dashboard add form with optional auth section showing deploy key and token fields
- Show error toast if private repo cannot be accessed

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

sharang added 1 commit 2026-03-09 11:02:34 +00:00

feat: seed default MCP servers (Findings, SBOM, DAST) on dashboard startup ... b973887754

- Add MCP_ENDPOINT_URL env var to configure MCP server base URL
- Seed three default MCP server configs on dashboard startup if not present
- Each server has its own tool subset: findings (3 tools), SBOM (2 tools), DAST (2 tools)
- Uses upsert-by-name to avoid duplicates on restart

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

sharang added 1 commit 2026-03-09 11:06:05 +00:00

fix: refresh findings list after bulk status update ... d9b21d3410

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

sharang added 1 commit 2026-03-09 11:08:57 +00:00

style: fix cargo fmt formatting ... 3958c1a036

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

sharang added 1 commit 2026-03-09 12:37:34 +00:00

fix: refactor fetch_findings to use FindingsQuery struct to fix clippy too_many_arguments ... b3a284dadd

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

sharang merged commit 46bf9de549 into main 2026-03-09 12:53:13 +00:00

sharang referenced this issue from a commit 2026-03-09 12:53:13 +00:00

feat: findings refinement, new scanners, and deployment tooling (#6)

sharang deleted branch feat/findings-refinement 2026-03-09 12:53:31 +00:00

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

P0-demo

CERTifAI P0 demo build tickets (CS-*)

bug

critical

enhancement

epic

Tracking issue spanning multiple sub-issues

high

infrastructure

onboarding

Multi-target onboarding wizard redesign

performance

security

v0.3.0

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

Benjamin_Boenisch sharang (Sharang Parnerkar)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: sharang/compliance-scanner-agent#6