Commit Graph

297 Commits

Author SHA1 Message Date
Bryan Frimin
34de088ec7 Add connector config validation
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-04-20 21:16:17 -07:00
Bryan Frimin
868c45b15d Fix empty string secret for state token
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-04-20 21:16:17 -07:00
Bryan Frimin
86cc9240bd Add connector request validation
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-04-20 21:16:17 -07:00
Bryan Frimin
fd698d8485 Fix no error with duplicate connector name
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-04-20 21:16:17 -07:00
Bryan Frimin
7d3a9e6d3b Remove debug log
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-04-20 21:16:17 -07:00
Bryan Frimin
5370d59451 Add connector service and http handlers
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-04-20 21:16:16 -07:00
Bryan Frimin
cdedf656d1 Add connector config support
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-04-20 21:16:16 -07:00
Bryan Frimin
8c516c1689 Add connector with OAuth2 support
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-04-20 21:16:16 -07:00
Bryan Frimin
9063ff705e Add connector table
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-04-20 21:16:14 -07:00
Antoine Bouchardy
b137ec6bdf Add categories on risk
Signed-off-by: Antoine Bouchardy <antoine@getprobo.com>
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-04-20 20:04:09 -07:00
Bryan Frimin
0fa49e4763 Fix migration order
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-04-20 20:04:09 -07:00
gearnode
7f1d6322da Fix migration
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-15 20:53:15 -07:00
gearnode
a90de1fdde Update risk matrix
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-15 11:16:24 -07:00
gearnode
7ff083e339 Remove policy verison column
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-15 00:37:12 -07:00
gearnode
b3919aa8c1 Fix stale framework controls
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-14 16:37:40 -07:00
gearnode
4cce21b7f5 Remove dead file
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-14 12:31:07 -07:00
gearnode
3711bb4bbb Rename mitigation into mesure
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-12 21:09:49 -07:00
gearnode
9b868220f6 Add vendor business and security owner
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-12 14:53:16 -07:00
gearnode
8bbb4f59f1 Add risk ownership
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-12 11:18:20 -07:00
gearnode
e3c7194afc Add risk treatment
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-12 10:39:05 -07:00
gearnode
16efab774a Refactor risk management
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-12 00:18:31 -07:00
gearnode
9fa33726e7 Enhance vendor management with extended data fields
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-10 17:19:35 -07:00
gearnode
1196b791dd Add ability to link policies to controls
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-10 10:01:26 -07:00
gearnode
c63e2756ba Add vendor compliance reports UI
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-10 09:31:44 -07:00
gearnode
41861f2c9f Improve framework import error handling
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-09 22:21:34 -07:00
gearnode
1f1c133a9d Remove debug printf
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-09 22:14:19 -07:00
gearnode
9bad69a362 Simplify policy update mechanism
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-09 22:12:57 -07:00
gearnode
85a5f3a514 Add pre-configured framework templates
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-09 11:28:55 -07:00
gearnode
7e6fa44923 Add vendor compliance reports
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-09 09:32:48 -07:00
gearnode
4ce72c03f7 Add control-policy mappings and rename control APIs
This introduces the ability to map controls to policies alongside the
existing control-mitigation mappings. The feature adds bidirectional
relationships with new GraphQL fields on Control and Policy types.

Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-08 21:14:11 -07:00
gearnode
a6da14d885 Fix duplicated request evidence on import
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-03 17:36:25 +02:00
gearnode
ddc4cd45a4 Fix import uniq violation
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-03 11:08:42 +02:00
gearnode
1034927424 Add evidence request support
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-03 10:03:28 +02:00
gearnode
fd9442f6a3 Fix fulfill missing upload
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-02 11:57:15 +02:00
gearnode
c145125b1a Add requested evidence
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-02 10:10:49 +02:00
gearnode
e8dc868edf Add mitigation with task and mapping import
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-01 18:02:43 +02:00
gearnode
1ee0c3beb7 Fix vendor update
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-01 16:03:53 +02:00
gearnode
543958175b Add risk list to mitigations
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-01 10:19:01 +02:00
gearnode
747ed7ec9b Fix missing tenant_id
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-01 10:14:00 +02:00
gearnode
40d281e8d5 Add UI for risk mapping
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-01 09:27:05 +02:00
gearnode
bd428cb109 Add risks_mitigations table
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-01 08:09:23 +02:00
gearnode
34ed32f6a4 Fix load risk error
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-01 08:09:11 +02:00
gearnode
0ec0c7d6c3 Add mapping between risk and mitigation
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-01 07:39:29 +02:00
gearnode
f145181228 Remove dead code
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-31 22:29:16 +02:00
gearnode
d0fc5cd439 Add mapping between control and mitigation
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-31 22:01:09 +02:00
gearnode
5a7b0c8ec9 Make framework reference id uniq
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-31 15:28:43 +02:00
gearnode
c582a105b0 Add control reference id
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-31 14:47:07 +02:00
gearnode
fd126b9414 Support importance in mitigation import
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-31 10:31:39 +02:00
gearnode
7d38882e1f Add risk proba and impact
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-31 09:49:35 +02:00
gearnode
5e601a0ef0 Add risk list and create risk
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-30 16:51:24 +02:00