rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
3,667 Commits 1 Branch 0 Tags
fbdff595fea888ba6bfbab998b2fd04ba2eeb341
Commit Graph

482 Commits

Author SHA1 Message Date
Bryan Frimin
3bfb3ba485 Move evidence to measure level 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-05-03 17:35:03 -07:00
Bryan Frimin
83aee67419 Remove start and end service date 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-05-01 09:13:07 -07:00
Bryan Frimin
7be0d964e2 Fix url not set 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-05-01 00:06:11 -07:00
Bryan Frimin
1cac29f8ef Fix typo on measure 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-30 14:07:14 -07:00
Bryan Frimin
0387987612 Add signature handlers 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-30 00:23:30 -07:00
Bryan Frimin
a2bec08d16 Add policy sign email notif 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-29 22:08:21 -07:00
Bryan Frimin
a7cd94956a Refatcor policies management 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-28 16:03:42 -07:00
Bryan Frimin
230ae1130f Add delete measure 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-27 21:01:08 -07:00
Bryan Frimin
9471c38a67 Remove measure importance 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-27 20:22:24 -07:00
Bryan Frimin
cece072619 Add note to risk 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-24 17:47:39 -07:00
Bryan Frimin
80ad4f643a Add business and data impact on list 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-23 11:23:28 -07:00
Bryan Frimin
ca1b7e8f42 Expire vendor risk assement 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-22 16:03:09 -07:00
Bryan Frimin
e2e8f38f97 Add vendor risk assement 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-22 16:03:08 -07:00
Bryan Frimin
f038642ece Add first risk assememnt implementation 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-22 16:02:59 -07:00
Bryan Frimin
53c326d354 Remove unused types 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-20 21:23:18 -07:00
Bryan Frimin
9aeed6da4a Add settins connector view 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-20 21:16:49 -07:00
Bryan Frimin
85935ac1dc Add redirect back to specific page 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-20 21:16:18 -07:00
Bryan Frimin
44a05be1af Encrypt connector sensitive data 
Add database field level encryption level to sensitive data to reduce
the risk in term of data leak. I dedice to have only one key for now in
a near future I may move to one master key and one encryption key per
organization to make rotation easiest.

I don't use built-in pg_crypto function to have clear seperation and
avoid any encryption key leak.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-20 21:16:18 -07:00
Bryan Frimin
5370d59451 Add connector service and http handlers 
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-20 21:16:16 -07:00
Antoine Bouchardy
b137ec6bdf Add categories on risk 
Signed-off-by: Antoine Bouchardy <antoine@getprobo.com>
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
 2025-04-20 20:04:09 -07:00
gearnode
a90de1fdde Update risk matrix 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-15 11:16:24 -07:00
gearnode
3711bb4bbb Rename mitigation into mesure 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-12 21:09:49 -07:00
gearnode
9b868220f6 Add vendor business and security owner 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-12 14:53:16 -07:00
gearnode
8bbb4f59f1 Add risk ownership 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-12 11:18:20 -07:00
gearnode
e3c7194afc Add risk treatment 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-12 10:39:05 -07:00
gearnode
16efab774a Refactor risk management 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-12 00:18:31 -07:00
gearnode
9fa33726e7 Enhance vendor management with extended data fields 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-10 17:19:35 -07:00
gearnode
41861f2c9f Improve framework import error handling 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-09 22:21:34 -07:00
gearnode
7e6fa44923 Add vendor compliance reports 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-09 09:32:48 -07:00
gearnode
4ce72c03f7 Add control-policy mappings and rename control APIs 
This introduces the ability to map controls to policies alongside the
existing control-mitigation mappings. The feature adds bidirectional
relationships with new GraphQL fields on Control and Policy types.

Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-08 21:14:11 -07:00
gearnode
fd9442f6a3 Fix fulfill missing upload 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-02 11:57:15 +02:00
gearnode
c145125b1a Add requested evidence 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-02 10:10:49 +02:00
gearnode
0ec0c7d6c3 Add mapping between risk and mitigation 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-04-01 07:39:29 +02:00
gearnode
d0fc5cd439 Add mapping between control and mitigation 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-31 22:01:09 +02:00
gearnode
7d38882e1f Add risk proba and impact 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-31 09:49:35 +02:00
gearnode
5e601a0ef0 Add risk list and create risk 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-30 16:51:24 +02:00
gearnode
4e4e2369fc Add import mitigations 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-30 15:02:46 +02:00
gearnode
47dd3b329a Style 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-28 15:27:36 +01:00
Émile Ré
f04e11866f Framework view with control list and view 
Signed-off-by: Émile Ré <nemile.re@gmail.com>
 2025-03-28 17:36:54 +04:00
gearnode
1867c79aad Add mitigation views 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-28 14:19:36 +01:00
gearnode
7321862ba9 First step of mitigation migration 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-27 23:34:35 +01:00
gearnode
483a620fe7 Rename control to mitigation 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-27 13:07:27 +01:00
gearnode
cc7c1db6c3 Fix panic in GraphQL resolver not hit httpserver recover 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-25 07:04:04 +01:00
gearnode
5887144054 Allow to edit time estimate 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-24 11:09:50 +01:00
gearnode
7b6c1100ec Add GraphQL tracing 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-24 10:23:42 +01:00
gearnode
b8ddb110b3 Omit gqlgen panic handler 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-23 23:45:11 +01:00
gearnode
5d770c160c Fix panic print non json log line 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-23 23:44:33 +01:00
gearnode
b8bbeaba11 Add evidence type link 
close #44

Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-20 17:25:29 +01:00
gearnode
7117c6a210 Add forget/reset password 
close #50

Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-20 16:17:47 +01:00
gearnode
ef8e62d488 Fix nil panic when tenantID is nil 
Signed-off-by: gearnode <bryan@frimin.fr>
 2025-03-20 15:36:46 +01:00