Commit Graph

86 Commits

Author SHA1 Message Date
Sacha Al Himdani
a9a5f9cf49 Add fulltext search on risks, documents, and measures
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-06-09 15:11:36 -07:00
Sacha Al Himdani
df3b43cd18 Change data enum
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-06-09 13:50:09 -07:00
Sacha Al Himdani
67cc9d9ddc Add control fulltext search
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-06-07 13:01:06 -07:00
Sacha Al Himdani
4b34157ba3 Add controls crud
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-06-06 13:50:58 -07:00
Sacha Al Himdani
7a3c782e1a Format tasks code
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-06-05 11:41:10 -07:00
Andreas Reußner
fc008c27f4 Add deadline on task
Signed-off-by: Andreas Reußner <andreas.reussner@outlook.de>
2025-06-05 11:32:46 -07:00
Sacha Al Himdani
b54cb6d3fc Change document version
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-06-04 16:53:55 -07:00
Sacha Al Himdani
21e7891f9b Remove default values in db
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-06-03 15:46:22 -07:00
Sacha Al Himdani
ca62749ba8 Add data inventory
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-06-03 15:16:40 -07:00
Sacha Al Himdani
fa1cd6fb51 Add assets
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-06-02 15:44:20 -07:00
Sacha Al Himdani
2391b19db3 Add type to document
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-05-30 13:54:07 -07:00
Sacha Al Himdani
e1b4079e1f Rename policy to document
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-05-30 13:53:14 -07:00
Sacha Al Himdani
6eb3332103 Add new url fields to vendors
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-05-28 17:58:32 -07:00
Sacha Al Himdani
1254487eb4 Add category field
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-05-28 15:04:52 -07:00
Sacha Al Himdani
c3fc9c6b9b Fix position by adding migration
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-05-25 17:48:11 -07:00
Sacha Al Himdani
cc89e76cf8 Add contract dates to people
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-05-25 11:12:12 -07:00
Bryan Frimin
62a0fb96b7 Use generated column for risk score
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-05-22 16:13:19 -07:00
Bryan Frimin
046c42eb48 Add tasks page
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-05-05 22:34:04 -07:00
Bryan Frimin
c93e795da5 Fix cannot delete measure linked to risk
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-05-05 18:19:13 -07:00
Bryan Frimin
1f250976d1 Fix cannot delete measure with evidences
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-05-04 22:45:15 -07:00
Bryan Frimin
3bfb3ba485 Move evidence to measure level
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-05-03 17:35:03 -07:00
Bryan Frimin
83aee67419 Remove start and end service date
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-05-01 09:13:07 -07:00
Bryan Frimin
1cac29f8ef Fix typo on measure
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-04-30 14:07:14 -07:00
Bryan Frimin
3a942cdbfb Fix migration when start from zero
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-04-29 16:47:03 -07:00
Bryan Frimin
beb9dc81b3 Fix pull request comments
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-04-28 16:26:01 -07:00
Bryan Frimin
a7cd94956a Refatcor policies management
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-04-28 16:03:42 -07:00
Bryan Frimin
748f9c584c Fix cannot delete measure with linked risk
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-04-27 22:04:25 -07:00
Bryan Frimin
230ae1130f Add delete measure
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-04-27 21:01:08 -07:00
Bryan Frimin
9471c38a67 Remove measure importance
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-04-27 20:22:24 -07:00
Bryan Frimin
cece072619 Add note to risk
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-04-24 17:47:39 -07:00
Bryan Frimin
7cac9130db Fix people without user_id
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-04-24 16:46:41 -07:00
Bryan Frimin
3c412e6de4 Fix base64 encoding
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-04-23 14:09:39 -07:00
Bryan Frimin
c8d45b85e2 Fix base64 decode
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-04-23 13:48:09 -07:00
Bryan Frimin
29f96792af Fix version does not exist
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-04-23 13:43:20 -07:00
Bryan Frimin
1ec8d74132 Fix not null user_id
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-04-23 13:38:00 -07:00
Bryan Frimin
173c0a537a Fix migration name
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-04-23 13:28:51 -07:00
Bryan Frimin
e813fd8acf Fix fk people
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-04-23 09:36:45 -07:00
Bryan Frimin
ca1b7e8f42 Expire vendor risk assement
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-04-22 16:03:09 -07:00
Bryan Frimin
e2e8f38f97 Add vendor risk assement
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-04-22 16:03:08 -07:00
Bryan Frimin
f038642ece Add first risk assememnt implementation
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-04-22 16:02:59 -07:00
Bryan Frimin
44a05be1af Encrypt connector sensitive data
Add database field level encryption level to sensitive data to reduce
the risk in term of data leak. I dedice to have only one key for now in
a near future I may move to one master key and one encryption key per
organization to make rotation easiest.

I don't use built-in pg_crypto function to have clear seperation and
avoid any encryption key leak.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-04-20 21:16:18 -07:00
Bryan Frimin
9063ff705e Add connector table
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-04-20 21:16:14 -07:00
Antoine Bouchardy
b137ec6bdf Add categories on risk
Signed-off-by: Antoine Bouchardy <antoine@getprobo.com>
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-04-20 20:04:09 -07:00
Bryan Frimin
0fa49e4763 Fix migration order
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-04-20 20:04:09 -07:00
gearnode
7f1d6322da Fix migration
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-15 20:53:15 -07:00
gearnode
a90de1fdde Update risk matrix
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-15 11:16:24 -07:00
gearnode
7ff083e339 Remove policy verison column
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-15 00:37:12 -07:00
gearnode
b3919aa8c1 Fix stale framework controls
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-14 16:37:40 -07:00
gearnode
3711bb4bbb Rename mitigation into mesure
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-12 21:09:49 -07:00
gearnode
9b868220f6 Add vendor business and security owner
Signed-off-by: gearnode <bryan@frimin.fr>
2025-04-12 14:53:16 -07:00