feat: security and architecture improvements #183

Open

phbaer wants to merge 73 commits from feat-security-and-architecture-improvements into main

pull from: feat-security-and-architecture-improvements

merge into: phbaer:main

phbaer:main

phbaer:feat/support-ssvc-add-filter

phbaer:renovate/node-26.x-lockfile

phbaer:renovate/dependencytrack-frontend-4.x

phbaer:renovate/vitest-coverage-v8-5.x-lockfile

phbaer:renovate/vitejs-plugin-vue-6.x-lockfile

phbaer:renovate/vitest-5.x-lockfile

phbaer:renovate/vue-test-utils-2.x-lockfile

phbaer:renovate/dependencytrack-apiserver-4.x

phbaer:renovate/astral-sh-setup-uv-10.x

phbaer:renovate/typescript-7.x

phbaer:renovate/actions-setup-node-7.x

phbaer:feat-move-agentyzer

phbaer:feat-jira-create-ticket

phbaer:integrate-vscorer-wizard

phbaer:add-more-status-info

phbaer:rescoring-improvements

phbaer:cve-filter-dashboard

phbaer:bearer-token-api-access

Conversation 0 Commits 73 Files changed 259 +31643 -7801

phbaer commented 2026-07-21 15:29:20 +00:00

Owner

Copy link

No description provided.

phbaer added 38 commits 2026-07-21 15:29:20 +00:00

feat: add complete team filter dropdown fdc6bb175e

Improve backend query performance and task isolation d96e216d1e

Document backend capacity estimates 35d5b3d238

Stabilize bulk update workflows 2368643266

Make attribution age test time-independent 15c1cf4216

Harden OIDC and session authentication 11cd7a4729

Centralize and enforce resource authorization e15cd5d0bf

Harden assessment concurrency and team writes 65402810f8

Secure Agentyzer service and isolate jobs bc3a9570de

Constrain Agentyzer network and filesystem access e4059ecdd0

Harden frontend rendering and browser policy 917eef5497

Bound uploads and archive expansion 21f405a7ab

Harden application container boundaries 29e8a7d2a3

Harden CI and release supply chain 9596567555

Persist DTVP analysis queue state 40b707ba0f

Persist and bound Agentyzer job state 10f23f3918

Extract application runtime state coordinators c00a5eff9a

Preserve and isolate analyzer repository caches ccd0aac8c9

Introduce vulnerability backend security boundary 5df2ba468d

Enforce HTTP trust boundaries and security auditing 01b582fa26

Scope state and features by vulnerability backend 588ab98b95

Test backend cache namespace markers b857d7d963

Harden Compose deployment boundaries 9070ecf791

Tighten deployment secret and debug boundaries 0dcc8bf04b

Correct archive helper secret mounts efc1f9f701

Replace JWT verification dependency fdc9baa0da

Load Dependency-Track database password from secret 023b628191

Use native Dependency-Track password files 6449b62258

Enforce software supply chain security gates 9ab1986074

Document local security scan commands 0f9d28bcbd

Harden durable state operations 5cc7d00aae

Correct Dependency-Track image pins 316145bbbc

Harden credential rotation and analyzer admission ec0afab2f6

Consolidate analyzer integration client 1d4ea0566a

Consolidate analyzer integration boundary 6b541b5fb3

Document security threat model a6b407918a

Clarify threat model identity assumptions 692b7a70f9

Pin Dependency-Track 4.14.2 images b0f64a6de7

phbaer added 5 commits 2026-07-22 13:51:45 +00:00

Fix Forgejo test artifact uploads b34e8dccf2

Enforce production coverage baselines ad9b22985c

Harden analyzer input boundaries 09f1ba5e49

Harden project archive apply workflow 7de660325e

Cover frontend classification and queue failures 65a3b1d85c

phbaer added 2 commits 2026-07-23 03:22:29 +00:00

Update dependencies 9c85267d6d

Use Forgejo-compatible artifact uploads 5f5f90e42d

phbaer added 2 commits 2026-07-23 03:34:11 +00:00

Add trivy c5a7c2ca7c

Fix the forgejo pipeline c2633ea00c

phbaer force-pushed feat-security-and-architecture-improvements from c2633ea00c to bc41217d77 2026-07-23 04:03:44 +00:00 Compare

phbaer added 1 commit 2026-07-23 04:19:44 +00:00

Update and switch docker images to alpine only and update uv 652d8ec397

phbaer added 3 commits 2026-07-23 04:55:16 +00:00

Generate integration contracts and split test ownership e90eecbb44

Simplify frontend data flow and domain modules cc6a0ee2c8

Centralize runtime configuration and split service modules 8ff4c96ac4

phbaer added 1 commit 2026-07-23 05:19:35 +00:00

Publish pull request container images dafd54d6b8

phbaer added 2 commits 2026-07-23 14:48:38 +00:00

Fix E2E backend route interception 15e53e7d98

Stabilize Playwright CI lifecycle and reports db6c54aba3

phbaer force-pushed feat-security-and-architecture-improvements from db6c54aba3 to c0cebe129c 2026-07-23 15:25:09 +00:00 Compare

phbaer added 1 commit 2026-07-23 15:41:50 +00:00

Add Compose-native scheduled backups 6d88e4d590

phbaer added 3 commits 2026-07-24 04:15:27 +00:00

Move the dependency track demo our of the main config e840a62076

Introduce arcane demo config 4f97a41320

Add automated OWASP pytm threat analysis 3fd4b3a44f

phbaer force-pushed feat-security-and-architecture-improvements from 3fd4b3a44f to 9f02ee5544 2026-07-24 04:25:08 +00:00 Compare

phbaer force-pushed feat-security-and-architecture-improvements from 9f02ee5544 to 79e4a3c10c 2026-07-24 05:54:37 +00:00 Compare

phbaer force-pushed feat-security-and-architecture-improvements from 79e4a3c10c to ffdfbc67bb 2026-07-24 06:01:06 +00:00 Compare

phbaer force-pushed feat-security-and-architecture-improvements from ffdfbc67bb to 6a69500661 2026-07-30 13:46:07 +00:00 Compare

phbaer force-pushed feat-security-and-architecture-improvements from 6a69500661 to 108aa7daf9 2026-07-31 03:59:06 +00:00 Compare

phbaer added 4 commits 2026-07-31 04:52:52 +00:00

security: bound untrusted repository reads 8d9bf7e831

security: bound analyzer admission and request quotas 79296c7658

security: protect diagnostics and escape SBOM HTML 841515cc41

security: remove vulnerable frontend tooling paths 998f0c886e

phbaer force-pushed feat-security-and-architecture-improvements from 998f0c886e to dbeeaadd70 2026-08-04 09:22:14 +00:00 Compare

phbaer force-pushed feat-security-and-architecture-improvements from dbeeaadd70 to 19b9a1e30a 2026-08-07 13:03:24 +00:00 Compare

phbaer force-pushed feat-security-and-architecture-improvements from 19b9a1e30a to f1d1e37041 2026-08-10 09:28:37 +00:00 Compare

phbaer force-pushed feat-security-and-architecture-improvements from f1d1e37041 to fd37874c80 2026-08-10 13:47:40 +00:00 Compare

phbaer added 4 commits 2026-08-11 04:06:58 +00:00

fix: include Agentyzer startup script in image 4f99db0778

docs: codify security guardrails and principles 82bc04b420

security: harden image and secret boundaries 045f1b21a6

docs: add existing instance upgrade workflow 52ae722b45

phbaer added 1 commit 2026-08-11 04:16:37 +00:00

fix: tag GIL image in pull request builds aabcead535

phbaer added 2 commits 2026-09-09 12:24:16 +00:00

feat: align deployment sample with Arcane templates 2de527b4ee

refactor: extract Arcane healthcheck scripts b28a264197

phbaer force-pushed feat-security-and-architecture-improvements from b28a264197 to ab8f79f30d 2026-09-09 14:16:54 +00:00 Compare

Some checks failed

Hide checks

Build and Publish Docker Images / test-agentyzer (pull_request) Successful in 31s

Details

Build and Publish Docker Images / test-backend (pull_request) Failing after 42s

Details

Build and Publish Docker Images / test-frontend (pull_request) Failing after 43s

Details

Build and Publish Docker Images / test-e2e (pull_request) Successful in 29s

Details

Build and Publish Docker Images / scan-images (pull_request) Has been skipped

Details

Build and Publish Docker Images / check-version (pull_request) Has been skipped

Details

Build and Publish Docker Images / create-tag (pull_request) Has been skipped

Details

Build and Publish Docker Images / build-push-images (pull_request) Has been skipped

Details

Build and Publish Docker Images / release (pull_request) Has been skipped

Details

This pull request has changes conflicting with the target branch.

• .github/workflows/build-publish.yml
• frontend/src/lib/__tests__/vulnListViewModel.spec.ts
• frontend/src/lib/vulnListViewModel.ts
• uv.lock

View command line instructions

Manual merge helper

Use this merge commit message when completing the merge manually.

Merge commit title feat: security and architecture improvements (#183)

Merge commit body Reviewed-on: https://git.baer.one/phbaer/dtvp/pulls/183

feat: security and architecture improvements (#183) Reviewed-on: https://git.baer.one/phbaer/dtvp/pulls/183 Copy merge commit message

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin feat-security-and-architecture-improvements:feat-security-and-architecture-improvements

git switch feat-security-and-architecture-improvements

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

phbaer/dtvp!183

No description provided.