rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
784 Commits 1 Branch 0 Tags
05063570c5bc876bfca4e3260c42272d9204406e
Commit Graph

65 Commits

Author SHA1 Message Date
Bryan Frimin
44a05be1af Encrypt connector sensitive data 
Add database field level encryption level to sensitive data to reduce
the risk in term of data leak. I dedice to have only one key for now in
a near future I may move to one master key and one encryption key per
organization to make rotation easiest.

I don't use built-in pg_crypto function to have clear seperation and
avoid any encryption key leak.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-20 21:16:18 -07:00
Bryan Frimin
5370d59451 Add connector service and http handlers 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-20 21:16:16 -07:00
Antoine Bouchardy
b137ec6bdf Add categories on risk 
Signed-off-by: Antoine Bouchardy <antoine@getprobo.com>
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-20 20:04:09 -07:00
gearnode
a90de1fdde Update risk matrix 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-15 11:16:24 -07:00
gearnode
3711bb4bbb Rename mitigation into mesure 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-12 21:09:49 -07:00
gearnode
9b868220f6 Add vendor business and security owner 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-12 14:53:16 -07:00
gearnode
8bbb4f59f1 Add risk ownership 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-12 11:18:20 -07:00
gearnode
e3c7194afc Add risk treatment 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-12 10:39:05 -07:00
gearnode
16efab774a Refactor risk management 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-12 00:18:31 -07:00
gearnode
9fa33726e7 Enhance vendor management with extended data fields 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-10 17:19:35 -07:00
gearnode
41861f2c9f Improve framework import error handling 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-09 22:21:34 -07:00
gearnode
7e6fa44923 Add vendor compliance reports 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-09 09:32:48 -07:00
gearnode
4ce72c03f7 Add control-policy mappings and rename control APIs 
This introduces the ability to map controls to policies alongside the
existing control-mitigation mappings. The feature adds bidirectional
relationships with new GraphQL fields on Control and Policy types.

Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-08 21:14:11 -07:00
gearnode
fd9442f6a3 Fix fulfill missing upload 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-02 11:57:15 +02:00
gearnode
c145125b1a Add requested evidence 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-02 10:10:49 +02:00
gearnode
0ec0c7d6c3 Add mapping between risk and mitigation 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-01 07:39:29 +02:00
gearnode
d0fc5cd439 Add mapping between control and mitigation 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-31 22:01:09 +02:00
gearnode
7d38882e1f Add risk proba and impact 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-31 09:49:35 +02:00
gearnode
5e601a0ef0 Add risk list and create risk 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-30 16:51:24 +02:00
gearnode
4e4e2369fc Add import mitigations 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-30 15:02:46 +02:00
gearnode
47dd3b329a Style 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-28 15:27:36 +01:00
Émile Ré
f04e11866f Framework view with control list and view 
Signed-off-by: Émile Ré <nemile.re@gmail.com>
 2025-03-28 17:36:54 +04:00
gearnode
1867c79aad Add mitigation views 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-28 14:19:36 +01:00
gearnode
7321862ba9 First step of mitigation migration 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-27 23:34:35 +01:00
gearnode
483a620fe7 Rename control to mitigation 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-27 13:07:27 +01:00
gearnode
cc7c1db6c3 Fix panic in GraphQL resolver not hit httpserver recover 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-25 07:04:04 +01:00
gearnode
5887144054 Allow to edit time estimate 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-24 11:09:50 +01:00
gearnode
7b6c1100ec Add GraphQL tracing 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-24 10:23:42 +01:00
gearnode
b8ddb110b3 Omit gqlgen panic handler 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-23 23:45:11 +01:00
gearnode
5d770c160c Fix panic print non json log line 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-23 23:44:33 +01:00
gearnode
b8bbeaba11 Add evidence type link 
close #44

Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-20 17:25:29 +01:00
gearnode
7117c6a210 Add forget/reset password 
close #50

Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-20 16:17:47 +01:00
gearnode
ef8e62d488 Fix nil panic when tenantID is nil 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-20 15:36:46 +01:00
gearnode
ffa4c93bfd Add configuration option to disable signup 
close #51

Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-19 16:43:49 +01:00
gearnode
7efae81113 Make task time estimate optional 
close #38

Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-19 13:08:27 +01:00
gearnode
c66974733a Change vendor and people default order 
Close #35

Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-19 08:13:36 +01:00
gearnode
1505e5b096 Expose new cursor over GraphQL API 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-19 00:20:35 +01:00
gearnode
c73e417e5c Refactor model cursor to use orderBy 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-18 18:16:14 +01:00
gearnode
257ea563a9 Add service account people kind 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-16 18:44:17 +01:00
gearnode
c9b58010f7 Use REST API for confirm endpoint 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-14 13:48:29 +01:00
gearnode
7153831fb2 Remove user from organization 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-14 11:17:28 +01:00
gearnode
ebc88ec7e8 Add user invitation system 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-14 10:43:34 +01:00
gearnode
87f7654b10 Add organization member list 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-14 09:38:01 +01:00
gearnode
03f621ec8d Add framework import 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-13 16:32:30 +01:00
gearnode
2f229fc27d Fix organization creation failed 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-13 13:47:57 +01:00
gearnode
ab739d9bda Add update organziation 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-13 11:15:13 +01:00
gearnode
8cbe08d136 Add assigned people to a task 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-13 10:08:31 +01:00
gearnode
376edd927d Add task time estimate 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-13 09:14:08 +01:00
gearnode
3255e32eac Fix create conrtrol importance is missing 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-13 08:54:48 +01:00
gearnode
d4280b1111 Add control importance 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-13 08:46:51 +01:00