Anso a95bf1ff33 feat(security): secret and misconfiguration scanning (#651) ...

Extends Trivy scans with secret detection in image filesystems and
misconfiguration scanning for Compose stacks. Adds tabs to the scan
drawer for vulnerabilities, secrets, and misconfigs. Secret matches
are redacted server-side (first 8 chars + ellipsis) before storage.

- TrivyService: --scanners vuln,secret for images; trivy config for stacks
- DB: scanners_used/secret_count/misconfig_count cols; secret_findings,
  misconfig_findings tables; cache key scoped by scanners
- Routes: POST /security/scan accepts scanners array (requirePaid when
  secret requested); POST /security/scan/stack; GET .../secrets and
  .../misconfigs (paid-tier reads)
- UI: tabs in VulnerabilityScanSheet; scan-options dropdown on images;
  Scan config button on stack header

2026-04-17 07:57:08 -04:00

..

alerts-notifications.mdx

feat(scheduler): notify on scheduled scan completion (#646)

2026-04-16 22:55:30 -04:00

api-tokens.mdx

fix(api-tokens): harden with security fixes, design compliance, and test coverage (#567)

2026-04-13 18:32:07 -04:00

app-store.mdx

feat(app-store): add port conflict indicator to deploy sheet (#533)

2026-04-12 19:57:38 -04:00

atomic-deployments.mdx

fix(compose): move atomic backup out of stack folder, silence stale stats 404s (#498)

2026-04-10 20:06:17 -04:00

audit-log.mdx

fix(audit): harden audit log with summary fixes, design compliance, and test coverage (#561)

2026-04-13 15:38:33 -04:00

auto-update-policies.mdx

fix(scheduler): harden scheduled operations with stale cleanup, cron validation, and design fixes (#549)

2026-04-13 11:32:09 -04:00

cve-suppressions.mdx

feat(security): fleet-replicated CVE suppression list (#650)

2026-04-17 05:16:34 -04:00

dashboard.mdx

fix(dashboard): harden real-time dashboard with bug fixes and design compliance (#517)

2026-04-12 04:25:41 -04:00

editor.mdx

fix(container-exec): harden with security fixes, validation, and test coverage (#577)

2026-04-14 08:23:05 -04:00

fleet-backups.mdx

fix(fleet): harden fleet snapshots with DRY capture, audit fixes, and design compliance (#555)

2026-04-13 13:26:55 -04:00

fleet-sync.mdx

feat(fleet): replicate scan policies across managed nodes (#649)

2026-04-16 23:57:08 -04:00

fleet-view.mdx

fix(fleet): harden remote node updates with admin enforcement, expiry fix, and diagnostics (#542)

2026-04-12 22:07:41 -04:00

git-sources.mdx

feat(git-sources): harden create-from-git with LFS + submodule warnings (#609)

2026-04-15 11:31:29 -04:00

global-observability.mdx

fix(logs): harden global logs with shared parsing, SSE fixes, and level filter (#539)

2026-04-12 21:19:08 -04:00

host-console.mdx

fix(host-console): harden with security fixes, validation, and test coverage (#580)

2026-04-14 10:06:59 -04:00

licensing.mdx

fix(billing): hide billing portal for lifetime licenses (#427)

2026-04-08 09:51:27 -04:00

multi-node.mdx

docs: comprehensive review and refresh of all documentation (#374)

2026-04-04 21:32:51 -04:00

node-compatibility.mdx

docs: comprehensive review and refresh of all documentation (#374)

2026-04-04 21:32:51 -04:00

notification-routing.mdx

docs: comprehensive review and refresh of all documentation (#374)

2026-04-04 21:32:51 -04:00

overview.mdx

feat(images): Trivy-powered vulnerability scanning (#635)

2026-04-16 15:03:36 -04:00

private-registries.mdx

feat(registries): harden Private Registry Credentials feature (#597)

2026-04-14 17:58:57 -04:00

rbac.mdx

fix(rbac): harden user management with token versioning, session invalidation, and test coverage (#558)

2026-04-13 14:31:34 -04:00

remote-updates.mdx

fix(fleet): forward host bind mounts to self-update helper container (#509)

2026-04-12 02:20:42 -04:00

resources.mdx

fix(network-topology): harden with edge-case fixes, logging, and test coverage (#583)

2026-04-14 10:59:11 -04:00

scheduled-operations.mdx

feat(images): Trivy-powered vulnerability scanning (#635)

2026-04-16 15:03:36 -04:00

sso.mdx

fix(sso): harden Custom OIDC provider and SSO configuration (#630)

2026-04-16 08:10:28 -04:00

stack-labels.mdx

fix(labels): harden stack labels with nodeId filtering, concurrency guard, and test coverage (#552)

2026-04-13 12:49:03 -04:00

stack-management.mdx

feat: docker run to compose converter (#623)

2026-04-15 20:23:12 -04:00

two-factor-authentication.mdx

feat(mfa): UX hardening — auto-submit, paste tolerance, low-codes warning, dev-mode diagnostics (#620)

2026-04-15 19:51:44 -04:00

vulnerability-scanning.mdx

feat(security): secret and misconfiguration scanning (#651)

2026-04-17 07:57:08 -04:00

webhooks.mdx

docs: comprehensive review and refresh of all documentation (#374)

2026-04-04 21:32:51 -04:00