006bdc60e1
feat(tests): containment fields hidden until detected, required datetime validation
kitos
2026-06-25 09:40:28 +02:00
d7ad981b89
chore(snyk): exclude test fixtures and scripts from Snyk Code SAST scanning
kitos
2026-06-24 14:37:46 +02:00
7f990987de
fix(sso): block protocol-relative URL redirect bypass by requiring non-empty netloc
kitos
2026-06-24 14:32:32 +02:00
cef082d0c4
feat(tests): execution start/end times on red team, detection/containment times on blue team
kitos
2026-06-24 13:09:13 +02:00
2e45cf1be0
feat(tests): containment_result field on blue team evaluation
kitos
2026-06-24 12:35:19 +02:00
18695197e8
feat(jira): admin account replaces per-user tokens for all Jira/Tempo ops
kitos
2026-06-24 09:15:35 +02:00
bb8b9a6a72
feat(dashboard): time range filter for operational metrics (30d/90d/6m/1y/all)
kitos
2026-06-19 10:41:22 +02:00
4e71217dd7
fix(tests): restrict on-hold to techs and admin, remove leads
kitos
2026-06-19 10:01:42 +02:00
4e1f35c250
feat(tests): on-hold button with reason modal, Jira comment + On Hold transition
kitos
2026-06-19 09:53:05 +02:00
6147f15238
feat(tests): operator assignment — two queues for techs, assign endpoint for leads
kitos
2026-06-19 09:07:39 +02:00
30ca709c11
fix(coverage): partial coverage when mix of detected+not_detected; add bulk recalculate endpoint
kitos
2026-06-18 17:05:15 +02:00
a58f9fd357
feat(techniques): add external_references storage and display MITRE sources with links
kitos
2026-06-18 16:26:11 +02:00
263823f290
refactor(settings): move Jira connection test from admin Jira tab to Profile tab
kitos
2026-06-18 15:27:19 +02:00
986682aad1
fix(security): replace extractall with per-member extract to satisfy Snyk Tar Slip taint analysis; rename PASS to OK_MARK in verify_gaps.py
kitos
2026-06-12 14:42:29 +02:00
f8824291a2
fix(tests): patch REPORT_OUTPUT_DIR in report router tests to satisfy path traversal check
kitos
2026-06-12 14:27:59 +02:00
443a04befb
fix(report_engine): lazy-init output dir to fix CI PermissionError on /app
kitos
2026-06-12 14:13:41 +02:00
88c2af472e
fix(main): move logger definition after all imports to fix ruff E402
kitos
2026-06-12 14:00:21 +02:00
8ba9790625
fix(main): define module-level logger to fix F821 ruff error
kitos
2026-06-12 13:44:56 +02:00
af5b6e1cff
fix(docker): pin nginx to 1.31.1-alpine3.23-slim to fix libxml2 High CVE-2026-6732
kitos
2026-06-12 13:29:58 +02:00
dcd4bebc92
fix(security): resolve Snyk Code findings — Tar Slip, Path Traversal, Open Redirect, XSS
kitos
2026-06-12 13:15:36 +02:00
f54dc0d342
fix(deps): pin minimum safe versions in requirements.txt to fix Snyk dashboard alerts
kitos
2026-06-12 13:02:14 +02:00
acc9092baa
fix(.bandit): use YAML format for bandit config (was INI, caused parse error)
kitos
2026-06-12 12:59:58 +02:00
709a810775
fix(docker): apply OS security patches via apt-get upgrade in backend image
kitos
2026-06-12 12:48:15 +02:00
cf33c69f95
feat(security): add Snyk CI workflow and pinned Python requirements
kitos
2026-06-12 12:26:16 +02:00
392ce162dc
chore(docker): use npm ci instead of npm install in frontend Dockerfile
kitos
2026-06-12 12:10:09 +02:00
5e8b5ee33c
fix(deps): update frontend lockfile to resolve 39 Dependabot security alerts
kitos
2026-06-12 09:50:31 +00:00
ebf47c6142
fix(tests): fix 15 pytest failures across 4 failure groups
kitos
2026-06-12 11:36:10 +02:00
0e2e9d0bb0
fix(lint): remove trailing whitespace from blank lines in test files
kitos
2026-06-12 11:00:42 +02:00
9472fe91fa
fix(lint): resolve 2132 ruff errors to pass CI lint-and-test job
kitos
2026-06-12 10:47:48 +02:00
675870b469
fix(campaigns): add missing crud_activate and log_action imports; add style comments to previous import fixes
kitos
2026-06-11 15:41:59 +02:00
92f4bdcdce
fix(compliance): add missing import_nist_800_53_mappings to router imports
kitos
2026-06-11 14:29:52 +02:00
3ec51524d6
fix(imports): add missing TestTemplate and DetectionRule imports in lolbas and sigma import services
kitos
2026-06-11 14:17:15 +02:00
7ded48bdb7
fix(routers+imports): fix missing DetectionRule import and correct -> list return type annotations that actually return paginated dicts
kitos
2026-06-11 13:22:51 +02:00
6ca37f743f
fix(caldera): add missing TestTemplate import in caldera_import_service
kitos
2026-06-11 13:14:15 +02:00
cea518b33c
fix(install): reset postgres volume on reconfigure to avoid auth failures
kitos
2026-06-11 12:03:33 +02:00
22293804ab
fix(install): auto-generate MINIO_ACCESS_KEY instead of leaving default minioadmin
kitos
2026-06-11 11:51:12 +02:00
64cc438bcc
fix(main): restore missing settings import lost in merge conflict resolution
kitos
2026-06-11 11:23:51 +02:00
8fea0c1ada
feat(refactor): PEP8, type annotations, docstrings and PyJWT security fix
kitos
2026-06-11 11:09:41 +02:00