Anso 12bbf86dc4 feat(security): export scan results as SARIF 2.1.0 (#652) ...

Adds a new SarifExporter service that builds a SARIF 2.1.0 document
from the stored scan findings (vulnerabilities, secrets, misconfigs).
Rule IDs are namespaced to avoid collisions in a flat result list.
Suppressions carry through as SARIF suppressions[] entries so GitHub
code scanning and Defender for Cloud see the same accepted status
shown in the UI.

Exposed via GET /api/security/scans/:id/sarif, admin + paid-tier
gated to match the SBOM export precedent. A SARIF button appears
in the scan sheet next to SBOM and CSV for paid tiers.

2026-04-17 08:17:36 -04:00

..

api-reference

fix(container-exec): harden with security fixes, validation, and test coverage (#577)

2026-04-14 08:23:05 -04:00

features

feat(security): export scan results as SARIF 2.1.0 (#652)

2026-04-17 08:17:36 -04:00

getting-started

feat: add Custom OIDC provider and move SSO to Community tier (#626)

2026-04-15 23:15:28 -04:00

images

docs: refresh screenshots (#645)

2026-04-17 01:35:31 +00:00

operations

feat(security): one-click managed Trivy install (#643)

2026-04-16 21:29:44 -04:00

reference

fix(stacks): harden stack management with security, validation, and logging (#520)

2026-04-12 05:43:15 -04:00

custom.css

docs: align documentation theme with Sencho app branding (#199)

2026-03-27 18:44:37 -04:00

docs.json

feat(security): fleet-replicated CVE suppression list (#650)

2026-04-17 05:16:34 -04:00

openapi.yaml

fix(api-tokens): harden with security fixes, design compliance, and test coverage (#567)

2026-04-13 18:32:07 -04:00

security.mdx

feat(images): Trivy-powered vulnerability scanning (#635)

2026-04-16 15:03:36 -04:00