feat: Oracle CIS report engine, CIS engine auto-update, and granular report params

Replace lightweight cis_runner.py with Oracle's official cis_reports.py engine
(6660 lines, 48 CIS + 11 OBP checks). Add granular execution parameters (Level,
OBP, Raw Data, Redact), per-report file storage with category browser, tenancy
filter in Downloads, and individual file download.

Add CIS Engine auto-update: check/download latest cis_reports.py from Oracle's
GitHub repo with automatic patch reapplication (admin UI card + 3 new endpoints).
Save engine version to app_settings on startup.

Update README to v1.8 with new features, API endpoints, and versioning table.
This commit is contained in:
nogueiraguh
2026-03-05 11:11:31 -03:00
parent 5038403d08
commit 973ff65989
5 changed files with 303 additions and 1435 deletions

View File

@@ -14,7 +14,6 @@ RUN pip install --no-cache-dir -r requirements.txt && \
# Copy app
COPY app.py .
COPY cis_runner.py .
COPY cis_reports.py .
COPY mcp_cis_server.py .