kitos 7ec3c5bc8b feat(tests): auto-propose procedure suggestions from submitted rounds, add lead review workflow ...

When Red or Blue submits a round for a test created from a template,
any extractable command in their procedure text is proposed as an
update to the template's suggested procedure — never written
automatically. Adds GET/approve/reject endpoints scoped so a lead only
reviews their own team's suggestions; approving writes the suggested
text into the template, rejecting leaves it untouched.

2026-07-14 15:22:03 +02:00

..

__init__.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

admin_config.py

fix(security): stop leaking live Jira/Tempo admin tokens in config export

2026-07-08 11:08:09 +02:00

advanced_metrics.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

analytics.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

api_keys.py

fix(lint): resolve 2132 ruff errors to pass CI lint-and-test job

2026-06-12 10:47:48 +02:00

attack_paths.py

fix(lint): resolve 2132 ruff errors to pass CI lint-and-test job

2026-06-12 10:47:48 +02:00

audit.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

auth.py

fix(backend): resolve refresh-token expiry deadlock, missing Jira on normal campaign approval, discarded threat-actor campaign start_date

2026-07-07 13:42:26 +02:00

campaigns.py

fix(backend): resolve refresh-token expiry deadlock, missing Jira on normal campaign approval, discarded threat-actor campaign start_date

2026-07-07 13:42:26 +02:00

compliance.py

fix(compliance): add missing import_nist_800_53_mappings to router imports

2026-06-11 14:29:52 +02:00

d3fend.py

fix(routers+imports): fix missing DetectionRule import and correct -> list return type annotations that actually return paginated dicts

2026-06-11 13:22:51 +02:00

data_sources.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

detection_lifecycle.py

fix(detection-lifecycle): fix timezone naive/aware mismatch and duplicate technique mapping

2026-05-19 16:29:04 +02:00

detection_rules.py

fix(routers+imports): fix missing DetectionRule import and correct -> list return type annotations that actually return paginated dicts

2026-06-11 13:22:51 +02:00

evidence.py

feat(jira): admin account replaces per-user tokens for all Jira/Tempo ops

2026-06-24 09:15:35 +02:00

executive_dashboard.py

fix(lint): resolve 2132 ruff errors to pass CI lint-and-test job

2026-06-12 10:47:48 +02:00

heatmap.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

intel.py

feat(intel): major intel scan improvements + Review Queue integration

2026-05-29 16:04:30 +02:00

jira.py

feat(refactor): PEP8, type annotations, docstrings and PyJWT security fix

2026-06-11 11:09:41 +02:00

knowledge.py

fix(lint): resolve 2132 ruff errors to pass CI lint-and-test job

2026-06-12 10:47:48 +02:00

metrics.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

notifications.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

operational_alerts.py

security: fix 6 vulnerabilities identified in SDLC audit

2026-05-22 09:46:29 +02:00

operational_metrics.py

feat(dashboard): time range filter for operational metrics (30d/90d/6m/1y/all)

2026-06-19 10:41:22 +02:00

osint.py

fix(routers+imports): fix missing DetectionRule import and correct -> list return type annotations that actually return paginated dicts

2026-06-11 13:22:51 +02:00

ownership.py

fix(lint): resolve 2132 ruff errors to pass CI lint-and-test job

2026-06-12 10:47:48 +02:00

procedure_suggestions.py

feat(tests): auto-propose procedure suggestions from submitted rounds, add lead review workflow

2026-07-14 15:22:03 +02:00

professional_reports.py

fix(security): resolve Snyk Code findings — Tar Slip, Path Traversal, Open Redirect, XSS

2026-06-12 13:15:36 +02:00

reports.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

risk_intelligence.py

fix(lint): resolve 2132 ruff errors to pass CI lint-and-test job

2026-06-12 10:47:48 +02:00

scores.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

snapshots.py

fix(routers+imports): fix missing DetectionRule import and correct -> list return type annotations that actually return paginated dicts

2026-06-11 13:22:51 +02:00

sso.py

fix(sso): block protocol-relative URL redirect bypass by requiring non-empty netloc

2026-06-24 14:34:50 +02:00

system.py

fix(jira): expose non-admin jira-config, drop security-test label; catalog paging

2026-07-10 10:24:13 +02:00

techniques.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

test_templates.py

fix(permissions): admin can no longer operate tests — start/submit/edit/create, view only

2026-07-13 09:27:43 +02:00

tests.py

fix(tests): remove blind visibility, both teams always see each other's fields

2026-07-14 13:36:19 +02:00

threat_actors.py

fix(routers+imports): fix missing DetectionRule import and correct -> list return type annotations that actually return paginated dicts

2026-06-11 13:22:51 +02:00

users.py

fix(assign): exclude admin from assignable operators; sync Jira on assign even for first-time users

2026-07-10 13:08:23 +02:00

webhooks.py

fix(security): resolve Snyk/bandit code analysis findings

2026-06-12 12:59:11 +02:00

worklogs.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00