kitos df49d336f7 fix(security): stop leaking live Jira/Tempo admin tokens in config export ...

_REDACTED_KEYS listed jira.api_token/jira.password/tempo.api_token, but
routers/system.py actually writes admin credentials under
jira.admin_api_token and tempo.admin_token. The mismatch meant every
config export bundle included the live Jira and Tempo admin API tokens
in plaintext instead of redacting them. Found while researching the
Jira/Tempo integration for a service-account request; added a
regression test.

2026-07-08 11:08:09 +02:00

..

__init__.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

admin_config.py

fix(security): stop leaking live Jira/Tempo admin tokens in config export

2026-07-08 11:08:09 +02:00

advanced_metrics.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

analytics.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

api_keys.py

fix(lint): resolve 2132 ruff errors to pass CI lint-and-test job

2026-06-12 10:47:48 +02:00

attack_paths.py

fix(lint): resolve 2132 ruff errors to pass CI lint-and-test job

2026-06-12 10:47:48 +02:00

audit.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

auth.py

fix(backend): resolve refresh-token expiry deadlock, missing Jira on normal campaign approval, discarded threat-actor campaign start_date

2026-07-07 13:42:26 +02:00

campaigns.py

fix(backend): resolve refresh-token expiry deadlock, missing Jira on normal campaign approval, discarded threat-actor campaign start_date

2026-07-07 13:42:26 +02:00

compliance.py

fix(compliance): add missing import_nist_800_53_mappings to router imports

2026-06-11 14:29:52 +02:00

d3fend.py

fix(routers+imports): fix missing DetectionRule import and correct -> list return type annotations that actually return paginated dicts

2026-06-11 13:22:51 +02:00

data_sources.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

detection_lifecycle.py

fix(detection-lifecycle): fix timezone naive/aware mismatch and duplicate technique mapping

2026-05-19 16:29:04 +02:00

detection_rules.py

fix(routers+imports): fix missing DetectionRule import and correct -> list return type annotations that actually return paginated dicts

2026-06-11 13:22:51 +02:00

evidence.py

feat(jira): admin account replaces per-user tokens for all Jira/Tempo ops

2026-06-24 09:15:35 +02:00

executive_dashboard.py

fix(lint): resolve 2132 ruff errors to pass CI lint-and-test job

2026-06-12 10:47:48 +02:00

heatmap.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

intel.py

feat(intel): major intel scan improvements + Review Queue integration

2026-05-29 16:04:30 +02:00

jira.py

feat(refactor): PEP8, type annotations, docstrings and PyJWT security fix

2026-06-11 11:09:41 +02:00

knowledge.py

fix(lint): resolve 2132 ruff errors to pass CI lint-and-test job

2026-06-12 10:47:48 +02:00

metrics.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

notifications.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

operational_alerts.py

security: fix 6 vulnerabilities identified in SDLC audit

2026-05-22 09:46:29 +02:00

operational_metrics.py

feat(dashboard): time range filter for operational metrics (30d/90d/6m/1y/all)

2026-06-19 10:41:22 +02:00

osint.py

fix(routers+imports): fix missing DetectionRule import and correct -> list return type annotations that actually return paginated dicts

2026-06-11 13:22:51 +02:00

ownership.py

fix(lint): resolve 2132 ruff errors to pass CI lint-and-test job

2026-06-12 10:47:48 +02:00

professional_reports.py

fix(security): resolve Snyk Code findings — Tar Slip, Path Traversal, Open Redirect, XSS

2026-06-12 13:15:36 +02:00

reports.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

risk_intelligence.py

fix(lint): resolve 2132 ruff errors to pass CI lint-and-test job

2026-06-12 10:47:48 +02:00

scores.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

snapshots.py

fix(routers+imports): fix missing DetectionRule import and correct -> list return type annotations that actually return paginated dicts

2026-06-11 13:22:51 +02:00

sso.py

fix(sso): block protocol-relative URL redirect bypass by requiring non-empty netloc

2026-06-24 14:34:50 +02:00

system.py

fix(lint): remove unused get_current_user import; lowercase HOLDABLE_STATES

2026-06-25 12:23:04 +02:00

techniques.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00

test_templates.py

feat(refactor): PEP8, type annotations, docstrings and PyJWT security fix

2026-06-11 11:09:41 +02:00

tests.py

feat(backend): enforce campaign scheduling, add reviewer queue filter, tactic order, duplicate-test counts

2026-07-08 08:46:09 +02:00

threat_actors.py

fix(routers+imports): fix missing DetectionRule import and correct -> list return type annotations that actually return paginated dicts

2026-06-11 13:22:51 +02:00

users.py

feat(refactor): PEP8, type annotations, docstrings and PyJWT security fix

2026-06-11 11:09:41 +02:00

webhooks.py

fix(security): resolve Snyk/bandit code analysis findings

2026-06-12 12:59:11 +02:00

worklogs.py

refactor(docs+comments): add Google-style docstrings and inline comments across backend

2026-06-11 11:06:55 +02:00