kitos 82ac9c7014 feat(templates,campaigns): validate MITRE technique IDs, surface template suggestions first, manager can re-approve rejected campaigns ...

- TestTemplate/TemplateSuggestion creation and updates now reject any
  mitre_technique_id that doesn't match a real, already-synced MITRE
  ATT&CK technique. Frontend swaps the free-text ID input for a
  technique picker.
- Test Catalog now shows pending template suggestions before the
  catalog grid, with full field detail (platform, severity, tool,
  atomic ID, source URL, remediation) instead of just name/procedure.
- A manager can edit and directly re-approve a campaign they previously
  rejected, instead of needing the original lead to resubmit it.

2026-07-16 14:29:01 +02:00

..

__init__.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

admin_config.py

fix(security): stop leaking live Jira/Tempo admin tokens in config export

2026-07-08 11:08:09 +02:00

advanced_metrics.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

analytics.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

api_keys.py

fix(lint): resolve 2132 ruff errors to pass CI lint-and-test job

2026-06-12 10:47:48 +02:00

attack_paths.py

fix(lint): resolve 2132 ruff errors to pass CI lint-and-test job

2026-06-12 10:47:48 +02:00

audit.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

auth.py

fix(backend): resolve refresh-token expiry deadlock, missing Jira on normal campaign approval, discarded threat-actor campaign start_date

2026-07-07 13:42:26 +02:00

campaigns.py

feat(templates,campaigns): validate MITRE technique IDs, surface template suggestions first, manager can re-approve rejected campaigns

2026-07-16 14:29:01 +02:00

compliance.py

fix(compliance): add missing import_nist_800_53_mappings to router imports

2026-06-11 14:29:52 +02:00

d3fend.py

fix(routers+imports): fix missing DetectionRule import and correct -> list return type annotations that actually return paginated dicts

2026-06-11 13:22:51 +02:00

data_sources.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

detection_lifecycle.py

fix(detection-lifecycle): fix timezone naive/aware mismatch and duplicate technique mapping

2026-05-19 16:29:04 +02:00

detection_rules.py

fix(routers+imports): fix missing DetectionRule import and correct -> list return type annotations that actually return paginated dicts

2026-06-11 13:22:51 +02:00

evidence.py

feat(jira): admin account replaces per-user tokens for all Jira/Tempo ops

2026-06-24 09:15:35 +02:00

executive_dashboard.py

fix(lint): resolve 2132 ruff errors to pass CI lint-and-test job

2026-06-12 10:47:48 +02:00

heatmap.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

intel.py

feat(intel): major intel scan improvements + Review Queue integration

2026-05-29 16:04:30 +02:00

jira.py

feat(refactor): PEP8, type annotations, docstrings and PyJWT security fix

2026-06-11 11:09:41 +02:00

knowledge.py

fix(lint): resolve 2132 ruff errors to pass CI lint-and-test job

2026-06-12 10:47:48 +02:00

metrics.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

notifications.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

operational_alerts.py

security: fix 6 vulnerabilities identified in SDLC audit

2026-05-22 09:46:29 +02:00

operational_metrics.py

feat(dashboard): time range filter for operational metrics (30d/90d/6m/1y/all)

2026-06-19 10:41:22 +02:00

osint.py

fix(routers+imports): fix missing DetectionRule import and correct -> list return type annotations that actually return paginated dicts

2026-06-11 13:22:51 +02:00

ownership.py

fix(lint): resolve 2132 ruff errors to pass CI lint-and-test job

2026-06-12 10:47:48 +02:00

procedure_suggestions.py

refactor(tests): merge detect_suggested_procedure into expected_detection

2026-07-15 10:29:13 +02:00

professional_reports.py

fix(security): resolve Snyk Code findings — Tar Slip, Path Traversal, Open Redirect, XSS

2026-06-12 13:15:36 +02:00

reports.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

risk_intelligence.py

fix(lint): resolve 2132 ruff errors to pass CI lint-and-test job

2026-06-12 10:47:48 +02:00

scores.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

snapshots.py

fix(routers+imports): fix missing DetectionRule import and correct -> list return type annotations that actually return paginated dicts

2026-06-11 13:22:51 +02:00

sso.py

fix(sso): block protocol-relative URL redirect bypass by requiring non-empty netloc

2026-06-24 14:34:50 +02:00

system.py

fix(jira): expose non-admin jira-config, drop security-test label; catalog paging

2026-07-10 10:24:13 +02:00

techniques.py

fix(users): grant manager Review Queue access, restrict Webhooks to admin

2026-07-16 10:31:21 +02:00

template_suggestions.py

feat(test-catalog): add template creation and lead-approval workflow

2026-07-16 12:08:23 +02:00

test_templates.py

feat(templates): add pagination with total counts to catalog and campaign picker

2026-07-16 10:01:20 +02:00

tests.py

feat(manager): allow manager to create auto-approved campaigns and tests from templates

2026-07-16 12:57:20 +02:00

threat_actors.py

fix(routers+imports): fix missing DetectionRule import and correct -> list return type annotations that actually return paginated dicts

2026-06-11 13:22:51 +02:00

users.py

fix(assign): exclude admin from assignable operators; sync Jira on assign even for first-time users

2026-07-10 13:08:23 +02:00

webhooks.py

fix(security): resolve Snyk/bandit code analysis findings

2026-06-12 12:59:11 +02:00

worklogs.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00