Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
18 commits
Select commit Hold shift + click to select a range
51ae3ff
fix(api): update MinimalCell example and userinfo test for OIDC compl…
ericfitz Jan 25, 2026
7818fbe
fix(build): stop CATS process before cleaning artifacts
ericfitz Jan 25, 2026
a2d7934
chore: regenerate API code and update integration test dependencies
ericfitz Jan 25, 2026
2561fbb
fix(api): resolve OpenAPI validation warnings and add missing examples
ericfitz Jan 25, 2026
f6c8b2f
fix(security): harden API input validation based on CATS fuzzer analysis
ericfitz Jan 25, 2026
92b432b
docs(testing): add CATS issues summary for Endava review
ericfitz Jan 25, 2026
29e57b9
feat(api): add 503 Service Unavailable responses to OpenAPI spec
ericfitz Jan 25, 2026
c48c07e
fix(api): improve HTTP status codes for error responses
ericfitz Jan 25, 2026
c9e394a
refactor(server): remove dead code from cmd/server/main.go
ericfitz Jan 25, 2026
0a3e04b
feat(api): implement filtering query parameters for GET /threat_models
ericfitz Jan 26, 2026
d7ec48b
chore(deps): bump dependencies to latest patch and minor versions
ericfitz Jan 26, 2026
956ceca
fix(api): prevent mass assignment and align integration tests with sc…
ericfitz Jan 26, 2026
4e54920
feat(db): add configurable connection pool settings
ericfitz Jan 26, 2026
f107e29
fix(oracle): improve OCI test suite reliability
ericfitz Jan 26, 2026
48d7db6
chore(api): regenerate API code
ericfitz Jan 26, 2026
6665f0c
fix(docker): remove invalid migrations COPY from server Dockerfile
ericfitz Jan 26, 2026
11604f6
fix(api): address CATS security fuzzing errors and warnings
ericfitz Jan 27, 2026
93399db
fix(api): prevent panic on empty ThreatModelID in webhook store
ericfitz Jan 27, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .version
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
{
"major": 0,
"minor": 273,
"patch": 0
"minor": 276,
"patch": 5
}
6 changes: 6 additions & 0 deletions CLAUDE.md
Original file line number Diff line number Diff line change
Expand Up @@ -158,6 +158,12 @@ CATS (Contract-driven Automatic Testing Suite) performs security fuzzing of the
- **Query Results**: `make query-cats-results` - Display summary statistics (excludes OAuth false positives)
- **Full Analysis**: `make analyze-cats-results` - Parse and query in one command

**Output Locations**:

- Individual test results: `test/outputs/cats/report/` (JSON files per test)
- SQLite database: `test/outputs/cats/cats-results.db` (parsed results for analysis)
- Test data configuration: `test/outputs/cats/cats-test-data.json`

**OAuth False Positives**: CATS may flag legitimate 401/403 OAuth responses as "errors". The parse script automatically detects and filters these:

- Uses `is_oauth_false_positive` flag to mark expected auth responses
Expand Down
3 changes: 1 addition & 2 deletions Dockerfile.server
Original file line number Diff line number Diff line change
Expand Up @@ -45,8 +45,7 @@ LABEL org.opencontainers.image.name="tmi/tmi-server"
# Copy binary from builder
COPY --from=builder /app/tmiserver /tmiserver

# Copy any required static files (migrations, etc.)
COPY --from=builder /app/auth/migrations /auth/migrations
# Note: No static files needed - migrations use GORM AutoMigrate (schema from Go code)

# Set working directory
WORKDIR /
Expand Down
2 changes: 2 additions & 0 deletions Makefile
Original file line number Diff line number Diff line change
Expand Up @@ -414,6 +414,8 @@ clean-files:
fi
@$(MAKE) -f $(MAKEFILE_LIST) clean-logs
$(call log_info,"Cleaning CATS artifacts...")
@pkill -f "cats" 2>/dev/null || true
@sleep 1
@rm -rf test/outputs/cats
@rm -rf cats-report
$(call log_success,"File cleanup completed")
Expand Down
Loading