-
Notifications
You must be signed in to change notification settings - Fork 302
feat(cloud-security): cloud tests v2 — services, remediation, multi-provider adapters #2493
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Merged
Merged
Changes from 4 commits
Commits
Show all changes
52 commits
Select commit
Hold shift + click to select a range
76d2539
feat(cloud-security): cloud tests v2 — services, remediation, and mul…
tofikwest d2a3a20
fix(cloud-security): address Bugbot review findings
tofikwest b76b69a
Merge branch 'main' into tofik/q1-cloud-tests-v2
tofikwest 40d18f8
fix(cloud-security): address CodeQL URL sanitization and role escalation
tofikwest f1c0d1e
fix(cloud-security): address remaining review findings
tofikwest e3d477c
fix(auth): validate x-user-id header against organization membership
tofikwest 8714be2
fix(cloud-security): address final Bugbot review findings
tofikwest 9e6e7ec
fix(cloud-security): fix plan cache key, wildcard IAM, and async poll
tofikwest 0f279a4
fix(cloud-security): scope check result queries by connection
tofikwest 6a95756
fix(cloud-security): catch async poll exceptions in Azure executor
tofikwest 218f386
fix(cloud-security): use composite plan cache key for AWS remediation
tofikwest 3210003
fix(cloud-security): remove unused @UserId from scan, validate subscr…
tofikwest da842d3
fix(cloud-security): fix undeclared userId crash and ARM token for Graph
tofikwest 93a7f80
fix(cloud-security): remove Azure self-healing role grant entirely
tofikwest 7f0fc14
fix(cloud-security): handle malformed AI-generated URLs in GCP preview
tofikwest c4cefd5
fix(cloud-security): validate Azure fix plan URLs before execution
tofikwest 0ce8f53
fix(cloud-security): guard against undefined rollback steps in Azure …
tofikwest 5e69ea3
fix(cloud-security): return correct verification status in API response
tofikwest 6cdf207
fix(cloud-security): handle non-JSON success responses in Azure executor
tofikwest 103e052
fix(cloud-security): handle 'system' user ID in activity service
tofikwest 8121b35
fix(cloud-security): validate all step URLs in executors and add cach…
tofikwest c50e8c0
Merge branch 'main' into tofik/q1-cloud-tests-v2
tofikwest de30e65
fix(cloud-security): validate poll URLs and fix audit log FK violation
tofikwest 952eef1
Merge branch 'main' into tofik/q1-cloud-tests-v2
tofikwest 85f9fa6
fix(cloud-security): don't re-enable user-disabled services on scan
tofikwest 8077963
fix(cloud-security): fix no-op auto-enable and undefined step in vali…
tofikwest 2edb05e
fix(cloud-security): write scan audit logs for session users
tofikwest 33eab2e
fix(cloud-security): map 'info' severity to 'low' risk in fallback plans
tofikwest 0cdd2f1
fix(cloud-security): tighten Azure provider namespace regex
tofikwest 96a5e0c
fix: restore .superpowers/* gitignore and separate .claude/worktrees
tofikwest 96b20ac
Merge branch 'main' into tofik/q1-cloud-tests-v2
tofikwest 0fdf078
fix: remove root-level AWS SDK pins that break app's s3-request-presi…
tofikwest 75b66e0
fix: align app AWS SDK versions to prevent @smithy/types mismatch
tofikwest 5a122c1
fix(cloud-security): fix IAM baseline service ID mismatch
tofikwest 00e5d2d
Merge branch 'main' into tofik/q1-cloud-tests-v2
tofikwest 4372e40
fix: pin client-s3 and s3-request-presigner to 3.1013.0
tofikwest cc7f2a2
Merge branch 'main' into tofik/q1-cloud-tests-v2
tofikwest 0def030
fix(cloud-security): clone rollback step params before execution
tofikwest bde6fcc
fix: workaround S3 presigner type mismatch from duplicate @smithy copies
tofikwest efdfac4
fix: cast getSignedUrl through unknown to bypass private property check
tofikwest c2eec97
fix(cloud-security): type batch-fix API response to fix Vercel build
tofikwest ee9ba3e
fix(cloud-security): add needs_permissions to FindingStatus type
tofikwest 31339c5
fix(cloud-security): add retrying and waiting_for_permissions to Batc…
tofikwest d9f7577
fix(cloud-security): add all missing fields to BatchRemediationDialog…
tofikwest f27402d
Merge branch 'main' into tofik/q1-cloud-tests-v2
tofikwest 02efe58
fix(cloud-security): replace undeclared findingsResponse with onComplete
tofikwest dcce094
fix(cloud-security): fix PROVIDER_FIELDS type for multi-provider support
tofikwest c3b6828
fix: centralize S3 presigner workaround for all files
tofikwest 827ca8d
fix(cloud-security): use @db/server import in remediate-batch task
tofikwest aef367b
fix(cloud-security): remove redundant needs_permissions check in retr…
tofikwest 1689394
Merge branch 'main' into tofik/q1-cloud-tests-v2
tofikwest 7920e9b
fix(portal): apply S3 presigner type workaround for portal build
tofikwest File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Some comments aren't visible on the classic Files Changed page.
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -95,4 +95,4 @@ scripts/sync-release-branch.sh | |
|
|
||
| .claude/audit-findings.md | ||
|
|
||
| .superpowers/* | ||
| .superpowers/*.claude/worktrees/ | ||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Uh oh!
There was an error while loading. Please reload this page.