Commit Graph

  • 22be620665 feat(tests): load-balanced reviewer selection and Jira reviewer sync kitos 2026-07-06 10:56:40 +02:00
  • c41876b62f feat(tests): migration for red_review/blue_review states and review columns kitos 2026-07-06 10:40:39 +02:00
  • 2d98ed5ec6 feat(tests): add review assignment columns to Test model kitos 2026-07-06 10:39:54 +02:00
  • 58d1da93ce feat(tests): add red_review/blue_review states to test state machine kitos 2026-07-06 10:38:15 +02:00
  • af65681179 fix(campaigns): hide direct remove-test button on active campaigns kitos 2026-07-04 11:56:04 +02:00
  • 164ef25393 fix(campaigns): complete ACTION_LABELS map and timeline cache invalidation kitos 2026-07-03 17:25:15 +02:00
  • 83b4d2578a feat(campaigns): audit timeline UI and manager role in role pickers kitos 2026-07-03 17:09:56 +02:00
  • aeaf1cf243 fix(campaigns): reset modification-request modal state on close, not just on success kitos 2026-07-03 16:27:41 +02:00
  • 952b6f27d7 feat(campaigns): modification request UI on campaign detail page kitos 2026-07-03 16:10:41 +02:00
  • b106780102 fix(campaigns): drop dead force param from activateCampaign API client kitos 2026-07-03 16:07:01 +02:00
  • 6b6375ddad feat(campaigns): submit/approve/reject UI on campaign detail page kitos 2026-07-03 15:26:02 +02:00
  • f19d10e19c feat(campaigns): remove lead-set start dates, add pending-approval filter kitos 2026-07-03 14:56:14 +02:00
  • 858dd3e9e7 docs(campaigns): explain why CampaignModificationRequest.test_id can be null kitos 2026-07-03 14:54:45 +02:00
  • 15ef555131 feat(campaigns): API client for approval workflow kitos 2026-07-03 14:29:30 +02:00
  • 108743daa5 docs(campaigns): remove stale docstring reference to deleted scheduling filter kitos 2026-07-03 14:12:30 +02:00
  • 5bc71f677f refactor(campaigns): remove dead future-start_date scheduling code kitos 2026-07-03 13:57:43 +02:00
  • 959def2f49 feat(campaigns): timeline endpoint, admin-only manual activation, remove lead-set dates kitos 2026-07-03 13:30:21 +02:00
  • 6186c246a4 feat(campaigns): modification-request router endpoints kitos 2026-07-03 12:34:18 +02:00
  • 95b5ac50c6 test(campaigns): promote cookie-safe request helper to shared conftest fixture kitos 2026-07-03 12:27:25 +02:00
  • 4f5ffcf3f9 feat(campaigns): submit/approve/reject router endpoints kitos 2026-07-03 12:02:28 +02:00
  • 6749daa7cb feat(campaigns): add get_campaign_timeline service function kitos 2026-07-03 11:23:37 +02:00
  • fd47db7bea fix(campaigns): null-safe test_id serialization, correct stale comments kitos 2026-07-03 11:04:20 +02:00
  • 12a5484003 fix(campaigns): preserve modification-request audit row after test deletion kitos 2026-07-03 10:48:42 +02:00
  • dc5f206bf5 feat(campaigns): gate test edits to draft, add modification request workflow kitos 2026-07-03 10:18:32 +02:00
  • 6eadc7405b test(campaigns): add EntityNotFoundError and reject-clears-approval coverage kitos 2026-07-03 10:05:05 +02:00
  • 385d402a57 feat(campaigns): submit/approve/reject service functions kitos 2026-07-03 09:14:40 +02:00
  • 79b573fb60 test(campaigns): add manager role fixtures kitos 2026-07-02 20:29:54 +02:00
  • 1c91bd543d feat(campaigns): migration for campaign_modification_requests table kitos 2026-07-02 19:43:52 +02:00
  • f6eac1641c feat(campaigns): migration for campaign approval fields kitos 2026-07-02 16:21:05 +02:00
  • a6b46f5f76 feat(campaigns): add approval fields and CampaignModificationRequest model kitos 2026-07-02 16:10:22 +02:00
  • 8e7f98301e refactor(campaigns): fix approve() error message, add terminal-state test kitos 2026-07-02 16:08:46 +02:00
  • a113f3687c feat(campaigns): add pending_approval state to campaign domain entity kitos 2026-07-02 16:00:18 +02:00
  • 62e3bfebe8 docs(campaigns): implementation plan for manager approval workflow kitos 2026-07-02 15:08:32 +02:00
  • 74cb946317 docs(campaigns): design spec for manager approval workflow kitos 2026-07-02 14:53:01 +02:00
  • f1e0e0acf0 fix(tempo): delegate user-token worklog path to log_worklog so tests can mock it kitos 2026-06-25 16:28:16 +02:00
  • 7613f5ec8b fix(deps): upgrade form-data 4.0.5 to 4.0.6 (CRLF injection fix) kitos 2026-06-25 14:54:56 +02:00
  • 070b402358 fix(deps): pin urllib3>=2.7.0 and idna>=3.15; apk upgrade in nginx stage; form-data override kitos 2026-06-25 13:26:06 +02:00
  • 6e29c7081f fix(lint): remove unused get_current_user import; lowercase HOLDABLE_STATES kitos 2026-06-25 12:22:58 +02:00
  • 006bdc60e1 feat(tests): containment fields hidden until detected, required datetime validation kitos 2026-06-25 09:40:28 +02:00
  • d7ad981b89 chore(snyk): exclude test fixtures and scripts from Snyk Code SAST scanning kitos 2026-06-24 14:37:46 +02:00
  • 7f990987de fix(sso): block protocol-relative URL redirect bypass by requiring non-empty netloc kitos 2026-06-24 14:32:32 +02:00
  • cef082d0c4 feat(tests): execution start/end times on red team, detection/containment times on blue team kitos 2026-06-24 13:09:13 +02:00
  • 2e45cf1be0 feat(tests): containment_result field on blue team evaluation kitos 2026-06-24 12:35:19 +02:00
  • 18695197e8 feat(jira): admin account replaces per-user tokens for all Jira/Tempo ops kitos 2026-06-24 09:15:35 +02:00
  • bb8b9a6a72 feat(dashboard): time range filter for operational metrics (30d/90d/6m/1y/all) kitos 2026-06-19 10:41:22 +02:00
  • 4e71217dd7 fix(tests): restrict on-hold to techs and admin, remove leads kitos 2026-06-19 10:01:42 +02:00
  • 4e1f35c250 feat(tests): on-hold button with reason modal, Jira comment + On Hold transition kitos 2026-06-19 09:53:05 +02:00
  • 6147f15238 feat(tests): operator assignment — two queues for techs, assign endpoint for leads kitos 2026-06-19 09:07:39 +02:00
  • 30ca709c11 fix(coverage): partial coverage when mix of detected+not_detected; add bulk recalculate endpoint kitos 2026-06-18 17:05:15 +02:00
  • a58f9fd357 feat(techniques): add external_references storage and display MITRE sources with links kitos 2026-06-18 16:26:11 +02:00
  • 263823f290 refactor(settings): move Jira connection test from admin Jira tab to Profile tab kitos 2026-06-18 15:27:19 +02:00
  • 986682aad1 fix(security): replace extractall with per-member extract to satisfy Snyk Tar Slip taint analysis; rename PASS to OK_MARK in verify_gaps.py kitos 2026-06-12 14:42:29 +02:00
  • f8824291a2 fix(tests): patch REPORT_OUTPUT_DIR in report router tests to satisfy path traversal check kitos 2026-06-12 14:27:59 +02:00
  • 443a04befb fix(report_engine): lazy-init output dir to fix CI PermissionError on /app kitos 2026-06-12 14:13:41 +02:00
  • 88c2af472e fix(main): move logger definition after all imports to fix ruff E402 kitos 2026-06-12 14:00:21 +02:00
  • 8ba9790625 fix(main): define module-level logger to fix F821 ruff error kitos 2026-06-12 13:44:56 +02:00
  • af5b6e1cff fix(docker): pin nginx to 1.31.1-alpine3.23-slim to fix libxml2 High CVE-2026-6732 kitos 2026-06-12 13:29:58 +02:00
  • dcd4bebc92 fix(security): resolve Snyk Code findings — Tar Slip, Path Traversal, Open Redirect, XSS kitos 2026-06-12 13:15:36 +02:00
  • f54dc0d342 fix(deps): pin minimum safe versions in requirements.txt to fix Snyk dashboard alerts kitos 2026-06-12 13:02:14 +02:00
  • acc9092baa fix(.bandit): use YAML format for bandit config (was INI, caused parse error) kitos 2026-06-12 12:59:58 +02:00
  • 6d3617938e fix(security): resolve Snyk/bandit code analysis findings kitos 2026-06-12 12:59:11 +02:00
  • 709a810775 fix(docker): apply OS security patches via apt-get upgrade in backend image kitos 2026-06-12 12:48:15 +02:00
  • cf33c69f95 feat(security): add Snyk CI workflow and pinned Python requirements kitos 2026-06-12 12:26:16 +02:00
  • 392ce162dc chore(docker): use npm ci instead of npm install in frontend Dockerfile kitos 2026-06-12 12:10:09 +02:00
  • 5e8b5ee33c fix(deps): update frontend lockfile to resolve 39 Dependabot security alerts kitos 2026-06-12 09:50:31 +00:00
  • ebf47c6142 fix(tests): fix 15 pytest failures across 4 failure groups kitos 2026-06-12 11:36:10 +02:00
  • 0e2e9d0bb0 fix(lint): remove trailing whitespace from blank lines in test files kitos 2026-06-12 11:00:42 +02:00
  • 9472fe91fa fix(lint): resolve 2132 ruff errors to pass CI lint-and-test job kitos 2026-06-12 10:47:48 +02:00
  • 675870b469 fix(campaigns): add missing crud_activate and log_action imports; add style comments to previous import fixes kitos 2026-06-11 15:41:59 +02:00
  • 92f4bdcdce fix(compliance): add missing import_nist_800_53_mappings to router imports kitos 2026-06-11 14:29:52 +02:00
  • 3ec51524d6 fix(imports): add missing TestTemplate and DetectionRule imports in lolbas and sigma import services kitos 2026-06-11 14:17:15 +02:00
  • 7ded48bdb7 fix(routers+imports): fix missing DetectionRule import and correct -> list return type annotations that actually return paginated dicts kitos 2026-06-11 13:22:51 +02:00
  • 6ca37f743f fix(caldera): add missing TestTemplate import in caldera_import_service kitos 2026-06-11 13:14:15 +02:00
  • cea518b33c fix(install): reset postgres volume on reconfigure to avoid auth failures kitos 2026-06-11 12:03:33 +02:00
  • 22293804ab fix(install): auto-generate MINIO_ACCESS_KEY instead of leaving default minioadmin kitos 2026-06-11 11:51:12 +02:00
  • 64cc438bcc fix(main): restore missing settings import lost in merge conflict resolution kitos 2026-06-11 11:23:51 +02:00
  • 8fea0c1ada feat(refactor): PEP8, type annotations, docstrings and PyJWT security fix kitos 2026-06-11 11:09:41 +02:00
  • 1f19bd8432 fix(security): replace python-jose with PyJWT to eliminate ecdsa CVEs refactor/pep8-types-docs kitos 2026-06-11 09:06:16 +02:00
  • d2a46feba8 refactor(docs+comments): add Google-style docstrings and inline comments across backend kitos 2026-06-10 12:37:15 +02:00
  • 9ff0f04ba3 refactor(types): add comprehensive type annotations across backend Python codebase kitos 2026-06-09 17:04:51 +02:00
  • 8f98bdd273 refactor(pep8): enforce full PEP8 compliance across backend Python codebase kitos 2026-06-09 16:40:14 +02:00
  • 98fddccd32 chore(gitignore): remove .cursor from tracking and add to gitignore kitos 2026-06-08 16:09:57 +02:00
  • f6d33638fd chore(gitignore): exclude docs/confluence, CLAUDE.md, .claude/, qa scripts kitos 2026-06-08 16:06:23 +02:00
  • 0001b33594 refactor(ui): move SSO, Export/Import, System Info from SystemPage to Settings kitos 2026-06-08 15:01:22 +02:00
  • a7725ba519 feat(sso): Azure AD / Entra ID SAML 2.0 integration kitos 2026-06-08 13:48:36 +02:00
  • 0c9f3051b4 fix(evaluations): fix duplicate substeps and improve eval test format by scenario grouping kitos 2026-06-08 13:20:42 +02:00
  • e2861a08bc feat(evaluations): enrich eval tests with attack path, criteria and data sources kitos 2026-06-08 11:42:08 +02:00
  • 467afc334d fix(evaluations): optional chaining on evalPendingData to fix TS18048 kitos 2026-06-05 16:56:29 +02:00
  • b630cd3210 feat(evaluations): bulk approve evaluation tests with 4-step confirmation modal kitos 2026-06-05 16:53:00 +02:00
  • c0cecab797 fix(evaluations): results API returns list of vendors, not dict kitos 2026-06-05 16:42:27 +02:00
  • 51d86e5436 fix(evaluations): correct fallback rounds + friendlier error messages kitos 2026-06-05 16:24:06 +02:00
  • 8515b8de17 fix(evaluations): bypass Cloudflare 403 with browser headers + hardcoded fallback rounds kitos 2026-06-05 16:10:27 +02:00
  • b037500b7c feat(evaluations): ATT&CK Evaluations importer for CrowdStrike Falcon [FASE-6.1] kitos 2026-06-05 15:57:03 +02:00
  • 6f835c8501 feat(techniques): move legend to top with descriptions and review_required kitos 2026-06-05 13:23:44 +02:00
  • 46ade20d14 feat(rt-import): add Image to Base64 converter utility kitos 2026-06-05 13:08:55 +02:00
  • 5f54396cb6 feat(rt-import): require base64 evidence images per technique kitos 2026-06-05 12:57:22 +02:00
  • f4289249b8 refactor(system): rename Threat Intel Scan to Security Feed Monitor kitos 2026-06-05 10:23:59 +02:00
  • 6ab61c8ace refactor(dashboard): replace security posture claims with programme-scoped language kitos 2026-06-05 09:33:41 +02:00
  • 725cf3406e fix(heatmap): hide empty tactics in threat-actor layer kitos 2026-06-04 17:23:28 +02:00
  • 564eb406aa fix(campaigns): fix start_date modal — interceptor was losing structured detail kitos 2026-06-04 16:22:17 +02:00