Sharang Parnerkar sharang
  • Joined on 2026-02-06
sharang pushed to main at sharang/compliance-scanner-agent 2026-03-30 13:34:00 +00:00
c062d834a1 fix: downgrade dotenv missing file from FAILED to info message
sharang opened issue sharang/compliance-scanner-agent#75 2026-03-30 13:31:54 +00:00
Executive compliance posture reports
sharang opened issue sharang/compliance-scanner-agent#76 2026-03-30 13:31:54 +00:00
File splitting refactor — no file over 250 lines
sharang opened issue sharang/compliance-scanner-agent#73 2026-03-30 13:31:53 +00:00
Policy-as-Code: custom compliance rules via YAML
sharang opened issue sharang/compliance-scanner-agent#72 2026-03-30 13:31:53 +00:00
SOC2 and ISO 27001 compliance control mappings
sharang opened issue sharang/compliance-scanner-agent#74 2026-03-30 13:31:53 +00:00
CI/CD pipeline gates — block deploys on critical findings
sharang opened issue sharang/compliance-scanner-agent#70 2026-03-30 13:31:52 +00:00
Webhook delivery tracking and retry
sharang opened issue sharang/compliance-scanner-agent#71 2026-03-30 13:31:52 +00:00
Audit logging for security-sensitive operations
sharang opened issue sharang/compliance-scanner-agent#69 2026-03-30 13:31:51 +00:00
Email notification channel for CVE alerts
sharang opened issue sharang/compliance-scanner-agent#67 2026-03-30 13:29:57 +00:00
license_summary and SBOM export fetch entire dataset without limits
sharang opened issue sharang/compliance-scanner-agent#68 2026-03-30 13:29:57 +00:00
Webhook server port is hardcoded to 3002
sharang opened issue sharang/compliance-scanner-agent#64 2026-03-30 13:29:56 +00:00
sort_by query parameter is a NoSQL injection vector
sharang opened issue sharang/compliance-scanner-agent#65 2026-03-30 13:29:56 +00:00
No graceful shutdown — in-progress scans left in running state
sharang opened issue sharang/compliance-scanner-agent#66 2026-03-30 13:29:56 +00:00
get_attack_chain has no pagination — long sessions return unbounded data
sharang opened issue sharang/compliance-scanner-agent#61 2026-03-30 13:29:55 +00:00
Scheduled scans run sequentially — one slow repo blocks all others
sharang opened issue sharang/compliance-scanner-agent#62 2026-03-30 13:29:55 +00:00
CVE monitor loads entire SBOM collection into memory
sharang opened issue sharang/compliance-scanner-agent#63 2026-03-30 13:29:55 +00:00
Graph endpoints load full node/edge collections without pagination
sharang opened issue sharang/compliance-scanner-agent#59 2026-03-30 13:28:53 +00:00
No request body size limit on API and webhook servers
sharang opened issue sharang/compliance-scanner-agent#60 2026-03-30 13:28:53 +00:00
Health endpoint does not verify database connectivity
sharang opened issue sharang/compliance-scanner-agent#57 2026-03-30 13:28:52 +00:00
JWT audience validation disabled — cross-app token reuse