5 Commits

Include renames

Author	SHA1	Message	Date
mrhid6	5dda3b5c4a	feat: vulnerability scanning pipeline, matcher, scheduler and API ... Completes tasks 10-15 and fixes what was outstanding: - vulndb.Pull implemented with oras-go, streaming the ~50MB layer and staging both files before replacing either, so a failed pull leaves the previous database intact rather than a half-written one. - db.go: Vulnerability.Severity is a string, not trivy Severity, so the int conversion did not compile. Severity now resolves vendor (highest when vendors disagree) then NVD then unknown, and CVSS is read too. - findings.go: added sweepFixedFindings plus the fleet query, severity counts, rescan flag and accept/unaccept the API needs. - vulnrules.go: added rule CRUD and the digest builder. ResolveTargets returns []models.Server, not []string, so filterByServers was wrong. - api/vulnerabilities.go was an empty file while handlers.go registered twelve routes against it; written, grouped by CVE. - shared/mail: added the missing sender. The templates were orphaned and the HTML one was a copy of the text one, defining "subject" (which html/template would escape) and emitting no markup. render.go parses every template in init(), so a bad one panics server, admin and sitesvc at boot — go build never runs init(), which is why nothing complained. - notify: digests dispatch through their own path so SMTP gets the digest template rather than arriving dressed as a monitor alert.	2026-08-06 14:33:46 +01:00
mrhid6	0b1efca737	Updates	2026-07-26 14:46:38 +01:00
mrhid6andClaude Opus 5	481649e03f	chore: update go.work.sum for the admin module ... Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-07-25 19:21:53 +01:00
mrhid6	f10fe61916	chore(shared): add hyperboloide/lk for licence signing ... Probed the library before building against it. Two corrections to plan 1: - PublicKey.ToB32String() returns one value, not (string, error) - The scheme is ECDSA P-384 with SHA-256, not ed25519 as the spec and plan claim. Design is unaffected; the prose needs fixing.	2026-07-24 14:53:26 +01:00
mrhid6	de0e7b7cae	chore: commit go.work.sum	2026-07-24 13:53:35 +01:00