nogueiraguh 7b50767159 security: Fernet encryption, export sanitization, sensitive settings protection ...

- Replace base64 _enc/_dec with Fernet (AES-128-CBC + HMAC-SHA256) derived from APP_SECRET
- Auto-migrate legacy base64 data to Fernet on startup (backward compatible)
- Remove all credentials from config export (private keys, passwords, OCIDs, passphrases)
- Block sensitive settings (oidc_*, secret_*) from non-admin read
- Block sensitive settings import
- Import OCI configs as metadata-only (credentials reconfigured manually)

2026-04-01 10:50:51 -03:00

..

.dockerignore

feat: comprehensive security, performance, UX and deployment audit

2026-03-20 13:48:30 -03:00

app.py

security: Fernet encryption, export sanitization, sensitive settings protection

2026-04-01 10:50:51 -03:00

cis_reports.py

feat: granular CIS MCP server, chat memory compaction, and UX improvements

2026-03-05 08:26:43 -03:00

Dockerfile

fix: remove gosu (Go 1.24.4 CVEs) — use runuser instead, CRITICAL 4→3, HIGH 12→5

2026-03-23 15:25:54 -03:00

gen_tf_reference.py

feat: Terraform resource reference from provider schema, provider alias fixes, and timestamps

2026-03-08 01:00:47 -03:00

mcp_cis_server.py

feat: resource type validation, 100K max tokens, and auto-split improvements

2026-03-09 01:10:33 -03:00

requirements.txt

feat: OCI Services page, compliance report v3, DOCX with camo strip, timezone per-user

2026-03-29 00:43:20 -03:00