shankar0123 84fac19f98 fix(scep-probe): satisfy staticcheck QF1008 in describeCertAlgorithm ...

CI flagged QF1008 on the chained selector pub.Curve.Params() — the
linter wants the promoted-method form pub.Params() (Curve is embedded
in ecdsa.PublicKey, so Params is reachable via promotion). Restructure
the nil check so the embedded interface still gets validated before the
promoted call, then invoke pub.Params() once and reuse the result.

Verification:
  * gofmt clean
  * staticcheck on internal/service/...: clean
  * 6/6 TestProbeSCEP_* tests still pass

2026-04-29 19:00:05 +00:00

..

agent_group_test.go

fix: resolve test compilation and runtime failures across codebase

2026-03-27 22:53:46 -04:00

agent_group.go

Bundle E: Mechanical sweeps & defensive polish — 6 findings closed; L-004 deferred

2026-04-27 01:17:15 +00:00

agent_retire_test.go

Close I-004 (agent hard-delete cascades targets) coverage-gap finding

2026-04-19 05:24:00 +00:00

agent_retire.go

Close I-004 (agent hard-delete cascades targets) coverage-gap finding

2026-04-19 05:24:00 +00:00

agent_round_out_test.go

Bundle N.C-extended (Coverage Audit Extension): service + handler round-out — M-002 + M-003 partial-closed

2026-04-27 21:40:09 +00:00

agent_test.go

fix(m2-pr-e): collapse AgentService.HeartbeatWithContext into Heartbeat

2026-04-18 01:25:20 +00:00

agent.go

feat(scep): plumb CertificateProfile.MustStaple end-to-end through service layer

2026-04-29 13:36:30 +00:00

audit_redact_test.go

fix(bundle-6): Audit Integrity + Privacy — 3 audit findings closed

2026-04-26 00:26:44 +00:00

audit_redact.go

fix(bundle-6): Audit Integrity + Privacy — 3 audit findings closed

2026-04-26 00:26:44 +00:00

audit_test.go

Implement M4: comprehensive test coverage with 120 tests

2026-03-15 00:25:01 -04:00

audit.go

fix(bundle-6): Audit Integrity + Privacy — 3 audit findings closed

2026-04-26 00:26:44 +00:00

bulk_reassignment_test.go

fix(api,web,mcp): add bulk-renew + bulk-reassign endpoints, drop client-side N×HTTP loops (L-1 master)

2026-04-25 14:33:02 +00:00

bulk_reassignment.go

fix(api,web,mcp): add bulk-renew + bulk-reassign endpoints, drop client-side N×HTTP loops (L-1 master)

2026-04-25 14:33:02 +00:00

bulk_renewal_test.go

fix(api,web,mcp): add bulk-renew + bulk-reassign endpoints, drop client-side N×HTTP loops (L-1 master)

2026-04-25 14:33:02 +00:00

bulk_renewal.go

fix(api,web,mcp): add bulk-renew + bulk-reassign endpoints, drop client-side N×HTTP loops (L-1 master)

2026-04-25 14:33:02 +00:00

bulk_revocation_test.go

feat(V2.2): bulk revocation — filter-based fleet-wide certificate revocation

2026-04-16 00:06:34 -04:00

bulk_revocation.go

feat(V2.2): bulk revocation — filter-based fleet-wide certificate revocation

2026-04-16 00:06:34 -04:00

ca_operations_test.go

F-001/F-002/F-003: CRL prefix-scan, digest error sanitization, ctx-aware sleeps

2026-04-20 16:51:52 +00:00

ca_operations.go

F-001/F-002/F-003: CRL prefix-scan, digest error sanitization, ctx-aware sleeps

2026-04-20 16:51:52 +00:00

certificate_nil_safety_test.go

fix(m-2): thread context through CertificateService cluster

2026-04-18 00:29:37 +00:00

certificate_round_out_test.go

Bundle N.C-extended (Coverage Audit Extension): service + handler round-out — M-002 + M-003 partial-closed

2026-04-27 21:40:09 +00:00

certificate_test.go

fix(m-2): thread context through CertificateService cluster

2026-04-18 00:29:37 +00:00

certificate.go

crl/ocsp: POST OCSP endpoint (RFC 6960 §A.1.1) + cache integration

2026-04-29 00:07:27 +00:00

cloud_discovery_test.go

feat(M50): cloud secret manager discovery — AWS SM, Azure KV, GCP SM

2026-04-15 23:01:00 -04:00

cloud_discovery.go

feat(M50): cloud secret manager discovery — AWS SM, Azure KV, GCP SM

2026-04-15 23:01:00 -04:00

concurrent_test.go

fix(m2-pr-e): collapse AgentService.HeartbeatWithContext into Heartbeat

2026-04-18 01:25:20 +00:00

config_helpers_test.go

test: comprehensive test gap closure across 24 packages

2026-04-09 23:09:40 -04:00

config_helpers.go

feat(M35): dynamic target configuration with encrypted config, test connection, and GUI updates

2026-04-04 01:09:53 -04:00

context_test.go

fix(m2-pr-e): collapse AgentService.HeartbeatWithContext into Heartbeat

2026-04-18 01:25:20 +00:00

crl_cache_test.go

scheduler/service: crlGenerationLoop + CRLCacheService with singleflight

2026-04-29 00:02:01 +00:00

crl_cache.go

scheduler/service: crlGenerationLoop + CRLCacheService with singleflight

2026-04-29 00:02:01 +00:00

crypto_validation_test.go

feat: M11a — certificate profiles, crypto policy enforcement, short-lived cert expiry

2026-03-20 20:39:49 -04:00

crypto_validation.go

feat: M11a — certificate profiles, crypto policy enforcement, short-lived cert expiry

2026-03-20 20:39:49 -04:00

csr_renewal_test.go

feat(M34): dynamic issuer configuration with encrypted config storage

2026-04-04 00:20:13 -04:00

deployment_test.go

feat(M31): agent work routing — scope jobs to assigned agents

2026-03-30 14:10:42 -04:00

deployment.go

Close I-004 (agent hard-delete cascades targets) coverage-gap finding

2026-04-19 05:24:00 +00:00

digest_test.go

feat(m28+m29+m30): ACME ARI, email digest, and Helm chart

2026-03-28 21:18:35 -04:00

digest.go

fix: staticcheck S1016 struct conversion + Helm with/else-if parse error

2026-03-28 21:25:25 -04:00

discovery_test.go

Close M-004 (OCSP issuer binding) and M-005 (discovery actor propagation) coverage-gap findings

2026-04-18 22:20:25 +00:00

discovery.go

Close M-004 (OCSP issuer binding) and M-005 (discovery actor propagation) coverage-gap findings

2026-04-18 22:20:25 +00:00

est_test.go

feat: add EST server (RFC 7030) for device certificate enrollment (M23)

2026-03-25 15:31:06 -04:00

est.go

feat(scep): plumb CertificateProfile.MustStaple end-to-end through service layer

2026-04-29 13:36:30 +00:00

export_test.go

feat(m27): certificate export (PEM/PKCS#12) and S/MIME EKU support

2026-03-28 16:16:19 -04:00

export.go

fix: resolve NULL csr_pem scan errors and QA smoke test failures

2026-03-30 00:51:18 -04:00

health_check_test.go

feat(M48): continuous TLS health monitoring — endpoint state machine, shared tlsprobe, 8 API endpoints, GUI

2026-04-15 21:45:45 -04:00

health_check.go

feat(M48): continuous TLS health monitoring — endpoint state machine, shared tlsprobe, 8 API endpoints, GUI

2026-04-15 21:45:45 -04:00

issuer_adapter_test.go

feat(scep): plumb CertificateProfile.MustStaple end-to-end through service layer

2026-04-29 13:36:30 +00:00

issuer_adapter.go

feat(scep): plumb CertificateProfile.MustStaple end-to-end through service layer

2026-04-29 13:36:30 +00:00

issuer_bootstrap_test.go

fix(crypto): per-ciphertext PBKDF2 salt + v2 versioned format with v1 fallback (M-8)

2026-04-17 05:36:29 +00:00

issuer_registry_test.go

fix(crypto): per-ciphertext PBKDF2 salt + v2 versioned format with v1 fallback (M-8)

2026-04-17 05:36:29 +00:00

issuer_registry.go

main: wire CRL/OCSP responder services into runtime

2026-04-29 01:48:23 +00:00

issuer_test.go

M-2 PR-B: Collapse IssuerService + TargetService to ctx-first signatures

2026-04-18 00:46:58 +00:00

issuer.go

Bundle E: Mechanical sweeps & defensive polish — 6 findings closed; L-004 deferred

2026-04-27 01:17:15 +00:00

job_offline_agent_reaper_test.go

Bundle C: Renewal/reliability cluster — 7 findings closed

2026-04-27 00:08:25 +00:00

job_test.go

I-003: job timeout reaper closes AwaitingCSR/AwaitingApproval gap

2026-04-19 01:37:18 +00:00

job.go

Bundle C: Renewal/reliability cluster — 7 findings closed

2026-04-27 00:08:25 +00:00

m11c_crypto_enforcement_test.go

feat(scep): plumb CertificateProfile.MustStaple end-to-end through service layer

2026-04-29 13:36:30 +00:00

network_scan_test.go

fix(m-9): aggregate per-endpoint scan errors in NetworkScanService

2026-04-18 02:34:14 +00:00

network_scan.go

feat(scep): SCEP probe in network scanner for fleet-readiness assessment

2026-04-29 18:51:57 +00:00

notification_test.go

I-005: notification retry loop + dead-letter queue

2026-04-19 15:17:27 +00:00

notification.go

I-005: notification retry loop + dead-letter queue

2026-04-19 15:17:27 +00:00

owner_test.go

M-2 PR-C: Collapse Policy/Profile/Owner/Team services to ctx-first signatures

2026-04-18 01:10:06 +00:00

owner.go

Bundle E: Mechanical sweeps & defensive polish — 6 findings closed; L-004 deferred

2026-04-27 01:17:15 +00:00

policy_test.go

fix(policies): close the D-006 loop — TitleCase seed canonicals + severity-aware, config-consuming rule engine (D-008)

2026-04-18 14:55:56 +00:00

policy.go

fix(policies): close the D-006 loop — TitleCase seed canonicals + severity-aware, config-consuming rule engine (D-008)

2026-04-18 14:55:56 +00:00

profile_test.go

M-2 PR-C: Collapse Policy/Profile/Owner/Team services to ctx-first signatures

2026-04-18 01:10:06 +00:00

profile.go

Bundle E: Mechanical sweeps & defensive polish — 6 findings closed; L-004 deferred

2026-04-27 01:17:15 +00:00

renewal_policy_test.go

G-1: renewal-policies API + frontend FK-drift fix

2026-04-20 18:53:01 +00:00

renewal_policy.go

G-1: renewal-policies API + frontend FK-drift fix

2026-04-20 18:53:01 +00:00

renewal_test.go

docs: rewrite features.md, audit README + architecture against repo

2026-04-15 00:22:57 -04:00

renewal.go

feat(scep): plumb CertificateProfile.MustStaple end-to-end through service layer

2026-04-29 13:36:30 +00:00

revocation_svc_test.go

fix(m-2): thread context through CertificateService cluster

2026-04-18 00:29:37 +00:00

revocation_svc.go

fix(m-2): thread context through CertificateService cluster

2026-04-18 00:29:37 +00:00

revocation_test.go

fix(m-2): thread context through CertificateService cluster

2026-04-18 00:29:37 +00:00

scep_intune_test.go

feat(scep-intune): per-profile dispatcher + SIGHUP reload + per-device rate limit + compliance hook seam

2026-04-29 15:34:19 +00:00

scep_must_staple_test.go

feat(scep): plumb CertificateProfile.MustStaple end-to-end through service layer

2026-04-29 13:36:30 +00:00

scep_probe_test.go

feat(scep): SCEP probe in network scanner for fleet-readiness assessment

2026-04-29 18:51:57 +00:00

scep_probe.go

fix(scep-probe): satisfy staticcheck QF1008 in describeCertAlgorithm

2026-04-29 19:00:05 +00:00

scep_test.go

feat(scep): RenewalReq + GetCertInitial + ChromeOS E2E + caps + must-staple

2026-04-29 13:16:09 +00:00

scep.go

refactor(scep-gui): rebrand SCEP admin surface to per-profile tabbed interface (Profiles + Intune + Recent Activity)

2026-04-29 17:46:42 +00:00

shortlived_test.go

Close M-004 (OCSP issuer binding) and M-005 (discovery actor propagation) coverage-gap findings

2026-04-18 22:20:25 +00:00

stats_test.go

fix: resolve flaky TestGetJobStats_WithData timezone issue

2026-03-25 20:55:48 -04:00

stats.go

I-005: notification retry loop + dead-letter queue

2026-04-19 15:17:27 +00:00

target_test.go

fix(gui,api): close C-001 + C-002 — ownership + agent FK contract

2026-04-18 16:01:40 +00:00

target.go

Bundle E: Mechanical sweeps & defensive polish — 6 findings closed; L-004 deferred

2026-04-27 01:17:15 +00:00

team_test.go

M-2 PR-C: Collapse Policy/Profile/Owner/Team services to ctx-first signatures

2026-04-18 01:10:06 +00:00

team.go

Bundle E: Mechanical sweeps & defensive polish — 6 findings closed; L-004 deferred

2026-04-27 01:17:15 +00:00

testutil_test.go

feat(scep): plumb CertificateProfile.MustStaple end-to-end through service layer

2026-04-29 13:36:30 +00:00

verification_test.go

Bundle C: Renewal/reliability cluster — 7 findings closed

2026-04-27 00:08:25 +00:00

verification.go

fix: remove unused time import in verification service

2026-03-27 21:11:16 -04:00