rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
845 Commits 1 Branch 0 Tags
ae2ca41d35908ab4170f73bbdfe71cd7a64e1732
Commit Graph

98 Commits

Author SHA1 Message Date
Bryan Frimin
3a942cdbfb Fix migration when start from zero 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-29 16:47:03 -07:00
Bryan Frimin
beb9dc81b3 Fix pull request comments 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-28 16:26:01 -07:00
Bryan Frimin
a7cd94956a Refatcor policies management 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-28 16:03:42 -07:00
Bryan Frimin
748f9c584c Fix cannot delete measure with linked risk 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-27 22:04:25 -07:00
Bryan Frimin
7c71bad32d Fix SQL column error 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-27 21:38:39 -07:00
Bryan Frimin
f5a76435f3 Fix measure risks 5xx 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-27 21:09:10 -07:00
Bryan Frimin
230ae1130f Add delete measure 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-27 21:01:08 -07:00
Bryan Frimin
9471c38a67 Remove measure importance 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-27 20:22:24 -07:00
Bryan Frimin
cece072619 Add note to risk 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-24 17:47:39 -07:00
Bryan Frimin
7cac9130db Fix people without user_id 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-24 16:46:41 -07:00
Bryan Frimin
3c412e6de4 Fix base64 encoding 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-23 14:09:39 -07:00
Bryan Frimin
c8d45b85e2 Fix base64 decode 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-23 13:48:09 -07:00
Bryan Frimin
29f96792af Fix version does not exist 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-23 13:43:20 -07:00
Bryan Frimin
1ec8d74132 Fix not null user_id 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-23 13:38:00 -07:00
Bryan Frimin
173c0a537a Fix migration name 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-23 13:28:51 -07:00
Bryan Frimin
80ad4f643a Add business and data impact on list 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-23 11:23:28 -07:00
Bryan Frimin
b65524d60b Style 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-23 11:15:23 -07:00
Bryan Frimin
e813fd8acf Fix fk people 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-23 09:36:45 -07:00
Bryan Frimin
ca1b7e8f42 Expire vendor risk assement 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-22 16:03:09 -07:00
Bryan Frimin
e2e8f38f97 Add vendor risk assement 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-22 16:03:08 -07:00
Bryan Frimin
f038642ece Add first risk assememnt implementation 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-22 16:02:59 -07:00
Bryan Frimin
3f6990b622 Fix missing cursor key order 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-20 21:24:16 -07:00
Bryan Frimin
9aeed6da4a Add settins connector view 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-20 21:16:49 -07:00
Bryan Frimin
ca4d14ca13 Add dedicated error when no connection 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-20 21:16:18 -07:00
Bryan Frimin
05063570c5 Fix type not updated 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-20 21:16:18 -07:00
Bryan Frimin
44a05be1af Encrypt connector sensitive data 
Add database field level encryption level to sensitive data to reduce
the risk in term of data leak. I dedice to have only one key for now in
a near future I may move to one master key and one encryption key per
organization to make rotation easiest.

I don't use built-in pg_crypto function to have clear seperation and
avoid any encryption key leak.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-20 21:16:18 -07:00
Bryan Frimin
9063ff705e Add connector table 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-20 21:16:14 -07:00
Antoine Bouchardy
b137ec6bdf Add categories on risk 
Signed-off-by: Antoine Bouchardy <antoine@getprobo.com>
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-20 20:04:09 -07:00
Bryan Frimin
0fa49e4763 Fix migration order 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-20 20:04:09 -07:00
gearnode
7f1d6322da Fix migration 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-15 20:53:15 -07:00
gearnode
a90de1fdde Update risk matrix 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-15 11:16:24 -07:00
gearnode
7ff083e339 Remove policy verison column 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-15 00:37:12 -07:00
gearnode
b3919aa8c1 Fix stale framework controls 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-14 16:37:40 -07:00
gearnode
3711bb4bbb Rename mitigation into mesure 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-12 21:09:49 -07:00
gearnode
9b868220f6 Add vendor business and security owner 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-12 14:53:16 -07:00
gearnode
8bbb4f59f1 Add risk ownership 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-12 11:18:20 -07:00
gearnode
e3c7194afc Add risk treatment 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-12 10:39:05 -07:00
gearnode
16efab774a Refactor risk management 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-12 00:18:31 -07:00
gearnode
9fa33726e7 Enhance vendor management with extended data fields 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-10 17:19:35 -07:00
gearnode
1196b791dd Add ability to link policies to controls 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-10 10:01:26 -07:00
gearnode
c63e2756ba Add vendor compliance reports UI 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-10 09:31:44 -07:00
gearnode
9bad69a362 Simplify policy update mechanism 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-09 22:12:57 -07:00
gearnode
7e6fa44923 Add vendor compliance reports 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-09 09:32:48 -07:00
gearnode
4ce72c03f7 Add control-policy mappings and rename control APIs 
This introduces the ability to map controls to policies alongside the
existing control-mitigation mappings. The feature adds bidirectional
relationships with new GraphQL fields on Control and Policy types.

Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-08 21:14:11 -07:00
gearnode
1034927424 Add evidence request support 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-03 10:03:28 +02:00
gearnode
fd9442f6a3 Fix fulfill missing upload 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-02 11:57:15 +02:00
gearnode
c145125b1a Add requested evidence 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-02 10:10:49 +02:00
gearnode
e8dc868edf Add mitigation with task and mapping import 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-01 18:02:43 +02:00
gearnode
1ee0c3beb7 Fix vendor update 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-01 16:03:53 +02:00
gearnode
543958175b Add risk list to mitigations 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-01 10:19:01 +02:00