| .. |
|
bin
|
eb2486a844
feat(M05): reputation engine + internal jobs framework
|
1 hete |
|
config
|
df1a298c82
fix: gate /api/docs and openapi.yaml behind API_DOCS_PUBLIC (SEC_REVIEW F68)
|
3 napja |
|
db
|
947ab89e04
fix: bind admin tokens to issuing user; reject after demote/disable (SEC_REVIEW F16)
|
4 napja |
|
docker
|
3556cd1920
fix: extend Permissions-Policy deny-list to full hardening (SEC_REVIEW F61)
|
3 napja |
|
public
|
d39ab01a7c
fix: validate INTERNAL_JOB_TOKEN entropy at api boot (SEC_REVIEW F35)
|
3 napja |
|
src
|
dd4f688f77
fix: cap /ips/{ip} path length at 80 chars (SEC_REVIEW F72)
|
3 napja |
|
tests
|
dd4f688f77
fix: cap /ips/{ip} path length at 80 chars (SEC_REVIEW F72)
|
3 napja |
|
.dockerignore
|
96eaa10c78
fix: add .dockerignore to api/ui build contexts (SEC_REVIEW F19)
|
4 napja |
|
.php-cs-fixer.dist.php
|
d330d80b8a
feat(M01): monorepo skeleton, toolchain, docker compose builds clean
|
1 hete |
|
CHANGELOG.md
|
717c0a5c2b
feat: subject filter for audit log; show actor-emitted rows on detail
|
1 hete |
|
Dockerfile
|
33179d8bba
fix: drop container root; run api/ui as uid 1000 (SEC_REVIEW F18)
|
4 napja |
|
composer.json
|
244a31b127
chore: license under Apache-2.0
|
1 hete |
|
composer.lock
|
2c14cba864
feat(M11): MMDB enrichment with DB-IP / MaxMind / IPinfo providers
|
1 hete |
|
openapi.php
|
57ab1ba034
fix: audit `GET /auth/users/{id}` lookups to detect enumeration (SEC_REVIEW F17)
|
4 napja |
|
phpstan.neon
|
d330d80b8a
feat(M01): monorepo skeleton, toolchain, docker compose builds clean
|
1 hete |
|
phpunit.xml
|
d330d80b8a
feat(M01): monorepo skeleton, toolchain, docker compose builds clean
|
1 hete |
chiappa
dd4f688f77
fix: cap /ips/{ip} path length at 80 chars (SEC_REVIEW F72)