mirror of
https://github.com/okieselbach/AutopilotMonitor.git
synced 2026-10-26 13:39:41 +00:00
Oliver Kieselbach
be63dad534
MsrcApiClient was injected into VulnerabilityCorrelationService for months but never invoked — every report shipped with source="NVD" only. New MsrcCorrelationService owns refresh + per-CVE lookup against an in-memory index built from the last 6 Patch Tuesdays; daily VulnerabilityDataSync populates it; CorrelateAsync enriches each finding with msrcDocumentId, msrcReleaseDate, msrcSeverity, msrcBaseScore, msrcVector and flips source to "NVD+MSRC" when the CVE was published in the indexed window. Health check also surfaced that all worker-side traces of the daily sync and CPE auto-resolve were sampled out of App Insights despite running. Adds Event to host.json excludedTypes and emits TelemetryClient events for VulnerabilityDataSyncCompleted, VulnerabilityCorrelationCompleted, CpeAutoResolveHit/Miss, CpeMappingPersisted so customEvents queries can prove freshness without depending on sampled traces. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>