feat: findings refinement, new scanners, and deployment tooling #6

Merged

sharang merged 6 commits from feat/findings-refinement into main 2026-03-09 12:53:13 +00:00

Conversation 0 Commits 6 Files Changed 40 +2048 -118

6 Commits

Author	SHA1	Message	Date
Sharang Parnerkar	b3a284dadd	fix: refactor fetch_findings to use FindingsQuery struct to fix clippy too_many_arguments ... Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-09 13:37:30 +01:00
Sharang Parnerkar	3958c1a036	style: fix cargo fmt formatting ... Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-09 12:08:55 +01:00
Sharang Parnerkar	d9b21d3410	fix: refresh findings list after bulk status update ... Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-09 12:06:03 +01:00
Sharang Parnerkar	b973887754	feat: seed default MCP servers (Findings, SBOM, DAST) on dashboard startup ... - Add MCP_ENDPOINT_URL env var to configure MCP server base URL - Seed three default MCP server configs on dashboard startup if not present - Each server has its own tool subset: findings (3 tools), SBOM (2 tools), DAST (2 tools) - Uses upsert-by-name to avoid duplicates on restart Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-09 12:02:31 +01:00
Sharang Parnerkar	492a93a83e	feat: add private repository support with SSH key and HTTPS token auth ... - Generate SSH ed25519 key pair on agent startup for cloning private repos via SSH - Add GET /api/v1/settings/ssh-public-key endpoint to expose deploy key - Add auth_token and auth_username fields to TrackedRepository model - Wire git2 credential callbacks for both SSH and HTTPS authentication - Validate repository access before saving (test-connect on add) - Update dashboard add form with optional auth section showing deploy key and token fields - Show error toast if private repo cannot be accessed Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-09 11:53:17 +01:00
Sharang Parnerkar	23ba52276b	feat: add new scanners, enhanced triage, findings refinement, and deployment tooling ... - Add gitleaks secret detection, lint scanning (clippy/eslint/ruff), and LLM code review scanners - Enhance LLM triage with multi-action support (confirm/downgrade/upgrade/dismiss), surrounding code context, and file-path classification confidence adjustment - Add text search, column sorting, and bulk status update to findings dashboard - Fix finding detail page status refresh and add developer feedback field - Fix BSON DateTime deserialization across all models with shared serde helpers - Add scan progress spinner with polling to repositories page - Batch OSV.dev queries to avoid "Too many queries" errors - Add gitleaks, semgrep, and ruff to Dockerfile.agent for deployment Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-09 11:05:31 +01:00