Commit Graph

42 Commits

Author SHA1 Message Date
Sacha Al Himdani
808fdffc9b Return computed risk scores after update
Add inherentRiskScore and residualRiskScore to the mutation fragment so
the Relay store gets updated scores. On the backend, use RETURNING to
get the recomputed values from the database generated columns.

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2026-04-14 18:09:01 +02:00
Bryan Frimin
f17fb7bf49 Upgrade to kit v0.3.0
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-04-03 11:56:06 +02:00
Bryan Frimin
e74c0a11c6 Update copyright headers to 2025-2026 for modified files
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-03-25 15:19:47 +01:00
Bryan Frimin
d24712344e Add GraphQL dataloaders for batched record lookups
Introduce dataloadgen-based dataloaders to batch individual
record-by-ID fetches in GraphQL resolvers into single SQL
queries. Each entity type (organization, framework, control,
vendor, document, risk, measure, task, file, report, profile)
gets a LoadByIDs method in coredata and a GetByIDs service
method with variadic arguments and dedicated collection return
types. Resolvers now use dataloader.FromContext instead of
direct service calls for single-record lookups.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-03-25 15:19:46 +01:00
Émile Ré
29371662e2 Fix referenced columns used in certain SQL queries + minor front fixes
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-02-12 16:21:13 +04:00
Émile Ré
d7e1703ff3 Fix coredata SQL queries using new FKs columms
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-02-12 16:21:10 +04:00
Émile Ré
e156a428d4 Stop using coredata.People except for people service and people page resolvers
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-02-12 16:21:09 +04:00
Bryan Frimin
4013b00841 Refactor policies document
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 11:37:39 -08:00
Bryan Frimin
74fc3b8cd1 Rewrite identity and access management
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-01-17 10:07:34 -08:00
Sacha Al Himdani
288c59a5f2 Make descriptions nullable
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-11-05 17:58:50 +01:00
Bryan Frimin
59aa332ab5 Move to vanity import url
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-31 17:01:52 +01:00
Sacha Al Himdani
9a33f7b771 Manage errors
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-10-31 15:14:56 +01:00
Sacha Al Himdani
72a581b66b Order risks by owner name
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-09-18 17:51:03 +02:00
Sacha Al Himdani
16ced9638d Add risk snapshots
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-09-03 15:11:22 +02:00
Bryan Frimin
23b54e7517 Fix SQL errors
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-08-10 18:26:02 +04:00
Bryan Frimin
f4f7326ffd Fix SQL query
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-08-10 16:34:38 +04:00
Bryan Frimin
afa5a822aa Refactor SOA generation
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-07-18 16:24:47 +02:00
Bryan Frimin
c791544f34 Fix count measure sql query
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-06-13 13:23:46 -07:00
Sacha Al Himdani
069ff4aa9a Fix search queries
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-06-10 10:45:16 -07:00
Bryan Frimin
c4e6de922c Add risks totalCount support
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-06-09 20:58:49 -07:00
Sacha Al Himdani
a9a5f9cf49 Add fulltext search on risks, documents, and measures
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-06-09 15:11:36 -07:00
Bryan Frimin
98510cb7c4 Fix inherent risk score graphql error
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-06-01 11:18:52 -07:00
Bryan Frimin
b43e61e3b9 Improve data isolation for risks
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-05-23 10:33:57 -07:00
Bryan Frimin
c646808828 Add risk sort keys
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-05-22 16:16:06 -07:00
Bryan Frimin
62a0fb96b7 Use generated column for risk score
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-05-22 16:13:19 -07:00
Bryan Frimin
9c5828b525 Rename severity to score
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-05-22 16:07:40 -07:00
Bryan Frimin
046c42eb48 Add tasks page
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-05-05 22:34:04 -07:00
Bryan Frimin
1cac29f8ef Fix typo on measure
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-04-30 14:07:14 -07:00
Bryan Frimin
f5a76435f3 Fix measure risks 5xx
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-04-27 21:09:10 -07:00
Bryan Frimin
cece072619 Add note to risk
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-04-24 17:47:39 -07:00
Antoine Bouchardy
b137ec6bdf Add categories on risk
Signed-off-by: Antoine Bouchardy <antoine@getprobo.com>
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-04-20 20:04:09 -07:00
gearnode
a90de1fdde Update risk matrix
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-15 11:16:24 -07:00
gearnode
3711bb4bbb Rename mitigation into mesure
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-12 21:09:49 -07:00
gearnode
8bbb4f59f1 Add risk ownership
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-12 11:18:20 -07:00
gearnode
e3c7194afc Add risk treatment
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-12 10:39:05 -07:00
gearnode
16efab774a Refactor risk management
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-12 00:18:31 -07:00
gearnode
543958175b Add risk list to mitigations
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-01 10:19:01 +02:00
gearnode
747ed7ec9b Fix missing tenant_id
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-01 10:14:00 +02:00
gearnode
34ed32f6a4 Fix load risk error
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-01 08:09:11 +02:00
gearnode
0ec0c7d6c3 Add mapping between risk and mitigation
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-01 07:39:29 +02:00
gearnode
7d38882e1f Add risk proba and impact
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-31 09:49:35 +02:00
gearnode
5e601a0ef0 Add risk list and create risk
Signed-off-by: gearnode <bryan@frimin.fr>
2025-03-30 16:51:24 +02:00