GitHub Discovery · Remediation commits

Add vulnerability remediation demo: docs/vulnerability-remediation-demo.md

Add vulnerability remediation demo: scripts/create_bitbucket_pr.py

chore: remove staging-only R4 report leaked to main via PR #127 (#128) * chore: remove staging-only R4 report leaked to main via PR #127 Remove docs/audit/STAGING-0-R4-REMEDIATION-REPORT.md which was accidentally included in PR #127 (staging -> main merge). This file is staging-specific remediation documentation and…

ci(E16-S8): fail-closed secret scan gate; written rotation for the leaked secret scripts/secret-scan.py scans the working tree and the full history for Google OAuth/AIza keys, AWS key ids, GitHub/Slack tokens, PEM private keys, postgres URLs carrying a real password, sk-/sk-ant- keys and high-entropy strings in config…

Remove hard auto-fail on failureCondition breach; replace with 35-min attempt ceiling A candidate who is actively working an incident was being auto-failed and locked out the moment a scenario's failureCondition stayed true for its sustainedSeconds window (often just 60s) — testing reflexes against a clock rather than…

Add vulnerability assessment report for database server Added a vulnerability assessment report detailing risks associated with a publicly accessible database server, including risk assessment, remediation strategies, and overall improvement recommendations. Cybersecurity portfolio showcasing hands-on labs and…

feat(web,api): finding lifecycle timeline + asset vulnerability tracking (FR-27 ③) GET /findings/:id/timeline merges creation, status-change events, and retest history (trigger, verdict, replay mode) into one newest-first lifecycle — the finding detail page renders it as a timeline card, closing the loop: discover…

fix(security): full repository vulnerability remediation & hardening

feat: integrate Groq AI for vulnerability explanations - Configure Groq API integration using environment variables - Implement GroqService to generate AI-powered vulnerability explanations - Generate explanations for Semgrep security findings - Add aiExplanation field to Finding entity - Update FindingService to…

security: surgical malware remediation, eliminate C2 stager and enforce repository hardening

security: surgical malware remediation, eliminate C2 stager and enforce repository hardening

Enhance CVE-2026-91403 remediation script Updated Registry key creation for multiple runs if user tries to reuse JAVA which still needs remediation CVE Tracker project