kitos 1f19bd8432 fix(security): replace python-jose with PyJWT to eliminate ecdsa CVEs ...

Snyk scan found 3 High severity vulns: two in ecdsa (pulled by python-jose)
and one in diskcache (pulled by pySigma, never imported). Remove both
vulnerable dependencies and migrate JWT handling to PyJWT. Fix
test_logout_revokes_token which broke because test stubs sys.modules[jose]
with a MagicMock at collection time; test now uses PyJWT directly.

2026-06-11 11:06:56 +02:00

..

fixtures

feat(phase-32): add automated tests V3 for data sources, scoring, campaigns and snapshots (T-235 to T-237)

2026-02-10 09:07:43 +01:00

__init__.py

feat(phase-9): implement MVP polishing and closure

2026-02-06 16:30:35 +01:00

conftest.py

feat(security): extend rate limits on sync, tests, evidence and reports [FASE-3.4]

2026-05-18 14:16:53 +02:00

test_analytics_advanced_metrics.py

fix(analytics): restrict operators endpoint to admin [FASE-2.5]

2026-05-18 14:00:47 +02:00

test_audit_trail.py

feat(audit): enhanced audit trail with IP, user-agent and integrity hash [FASE-3.1]

2026-05-18 14:16:18 +02:00

test_auth_login_audit.py

feat(auth): audit login success and failure attempts [FASE-3.2]

2026-05-18 14:16:53 +02:00

test_auth.py

fix(security): replace python-jose with PyJWT to eliminate ecdsa CVEs

2026-06-11 11:06:56 +02:00

test_campaign_entity.py

feat: add Campaign/Compliance domain entities and extract users/audit/data_sources to services (LP-2 through LP-6)

2026-02-20 13:28:14 +01:00

test_campaigns_and_snapshots.py

feat(phase-34): resolve blocking tech debt — Redis, domain exceptions, indexes, CI

2026-02-17 15:43:05 +01:00

test_compliance_entity.py

feat: add Campaign/Compliance domain entities and extract users/audit/data_sources to services (LP-2 through LP-6)

2026-02-20 13:28:14 +01:00

test_data_classification.py

feat(compliance): data classification fields and retention policies job [FASE-3.5]

2026-05-18 14:17:29 +02:00

test_data_sources.py

feat(phase-32): add automated tests V3 for data sources, scoring, campaigns and snapshots (T-235 to T-237)

2026-02-10 09:07:43 +01:00

test_domain_enums.py

feat(domain): add domain layer foundation -- enums, value objects, TechniqueEntity, repository ports

2026-02-18 19:10:31 +01:00

test_health.py

feat(phase-9): implement MVP polishing and closure

2026-02-06 16:30:35 +01:00

test_heatmap_layer_registry.py

feat: make heatmap layers extensible via LayerRegistry (OCP)

2026-02-20 16:07:36 +01:00

test_heatmap_service.py

feat: make heatmap layers extensible via LayerRegistry (OCP)

2026-02-20 16:07:36 +01:00

test_import_service_protocol.py

feat: add ImportService protocol and registry for OCP-compliant import extensibility (LP-7)

2026-02-20 13:31:18 +01:00

test_integration_v2.py

test: stabilize Phase 0 API and workflow tests [FASE-0.4]

2026-05-18 13:19:27 +02:00

test_jira_link.py

test(jira): add JiraLink model and jira_service tests [FASE-1.1]

2026-05-18 12:02:21 +02:00

test_jira_router.py

test(jira): add hourly sync job tests [FASE-1.7]

2026-05-18 13:33:40 +02:00

test_jira_service.py

test(jira): add jira_service unit tests [FASE-1.2]

2026-05-18 13:33:27 +02:00

test_jira_sync_job.py

test(jira): add hourly sync job tests [FASE-1.7]

2026-05-18 13:36:26 +02:00

test_metrics_v2.py

refactor(metrics): extract query logic to metrics_query_service, thin down router to HTTP adapter

2026-02-19 17:06:07 +01:00

test_osint_enrichment_service.py

test(intel): verify OSINT enrichment and stale coverage detection [FASE-4]

2026-05-18 14:50:31 +02:00

test_phase5_snapshots.py

feat(scoring): composite recency decay and severity weights persisted in DB [FASE-5.1]

2026-05-18 15:07:12 +02:00

test_professional_reports_router.py

feat(reports): add quarterly and technique download routes [FASE-2.4]

2026-05-18 14:00:46 +02:00

test_rate_limits.py

feat(security): extend rate limits on sync, tests, evidence and reports [FASE-3.4]

2026-05-18 14:16:53 +02:00

test_redis_client.py

feat(infra): add Redis service and client for Phase 0 [FASE-0.1]

2026-05-18 13:18:45 +02:00

test_report_engine.py

test(reports): add ReportEngine unit tests [FASE-2.1]

2026-05-18 14:00:37 +02:00

test_report_generation_service.py

feat(reports): extend report generation service [FASE-2.3]

2026-05-18 14:00:42 +02:00

test_repositories.py

feat(infra): add repository implementations, mappers, FastAPI wiring, and technique indexes

2026-02-18 19:10:50 +01:00

test_scoring_and_compliance.py

feat(scoring): composite recency decay and severity weights persisted in DB [FASE-5.1]

2026-05-18 15:07:12 +02:00

test_security_validators.py

fix(api): return 422 for validation errors with serializable payloads [FASE-3.3]

2026-05-18 14:16:53 +02:00

test_stale_detection_service.py

test(intel): verify OSINT enrichment and stale coverage detection [FASE-4]

2026-05-18 14:50:31 +02:00

test_t106_workflow_service.py

test: stabilize Phase 0 API and workflow tests [FASE-0.4]

2026-05-18 13:19:27 +02:00

test_t107_status_service.py

test: add TestEntity tests and fix test infrastructure (222 green)

2026-02-18 15:29:24 +01:00

test_t108_atomic_import.py

test: add TestEntity tests and fix test infrastructure (222 green)

2026-02-18 15:29:24 +01:00

test_t109_tests_router.py

test: add TestEntity tests and fix test infrastructure (222 green)

2026-02-18 15:29:24 +01:00

test_t110_evidence_router.py

refactor(evidence): extract permission validation and queries to evidence_service, use domain exceptions

2026-02-19 19:02:36 +01:00

test_t111_test_templates_router.py

test: add TestEntity tests and fix test infrastructure (222 green)

2026-02-18 15:29:24 +01:00

test_t112_system_import.py

test: add TestEntity tests and fix test infrastructure (222 green)

2026-02-18 15:29:24 +01:00

test_technique_entity.py

feat(domain): add domain layer foundation -- enums, value objects, TechniqueEntity, repository ports

2026-02-18 19:10:31 +01:00

test_techniques.py

feat(phase-9): implement MVP polishing and closure

2026-02-06 16:30:35 +01:00

test_templates_crud.py

refactor(tests): extract CRUD/query logic to test_crud_service, router delegates to service with domain exceptions

2026-02-19 18:35:09 +01:00

test_tempo_service.py

feat(tempo): harden worklog sync and add tests [FASE-1.4]

2026-05-18 13:36:26 +02:00

test_test_entity.py

test: add TestEntity tests and fix test infrastructure (222 green)

2026-02-18 15:29:24 +01:00

test_tests.py

test: stabilize Phase 0 API and workflow tests [FASE-0.4]

2026-05-18 13:19:27 +02:00

test_threat_actor_entity.py

feat: add ThreatActorEntity domain entity with coverage analysis (Tier 4)

2026-02-20 15:02:38 +01:00

test_user_api_validation.py

fix(api): return 422 for validation errors with serializable payloads [FASE-3.3]

2026-05-18 14:16:53 +02:00

test_value_objects.py

feat(scoring): composite recency decay and severity weights persisted in DB [FASE-5.1]

2026-05-18 15:07:12 +02:00

test_workflow.py

refactor(evidence): extract permission validation and queries to evidence_service, use domain exceptions

2026-02-19 19:02:36 +01:00

test_worklog_service.py

test(jira): add hourly sync job tests [FASE-1.7]

2026-05-18 13:33:40 +02:00