472 Commits

Author SHA1 Message Date
semantic-release 9b21f5df80 chore(release): v1.0.1 2026-03-29 11:07:04 +00:00
Christian Krakau-Louis 714dd0a241 Merge pull request #22 from christianlouis/copilot/check-black-formatting-errors
fix: apply black formatting to reports.py and dmarc_parser.py
2026-03-29 13:06:14 +02:00
copilot-swe-agent[bot] af6d66d004 Initial plan 2026-03-29 11:06:05 +00:00
copilot-swe-agent[bot] 821d9dc863 fix: apply black formatting to reports.py and dmarc_parser.py
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/b108ee4f-3479-43fa-a9e9-23a697718aa3

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
2026-03-29 11:05:07 +00:00
copilot-swe-agent[bot] d580da6fee Initial plan 2026-03-29 11:04:28 +00:00
Christian Krakau-Louis 6752897aca Merge pull request #20 from christianlouis/copilot/redesign-tests-framework
Fix deprecated CI actions, AGENTS.md merge conflict, CodeQL URL sanitization alerts, and flake8 complexity violations
2026-03-29 13:03:10 +02:00
Christian Krakau-Louis b0f3daea38 Merge branch 'main' into copilot/redesign-tests-framework 2026-03-29 13:01:28 +02:00
copilot-swe-agent[bot] 271b29186a Fix flake8 C901 complexity violations and F824 unused global in 5 files
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/e58d59de-a79d-48e1-a4fc-ffb61b868593

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
2026-03-29 10:58:33 +00:00
copilot-swe-agent[bot] 7752479444 plan: add flake8 complexity + unused global fixes to checklist
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/e58d59de-a79d-48e1-a4fc-ffb61b868593

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
2026-03-29 10:54:05 +00:00
copilot-swe-agent[bot] ccb447f29b Merge origin/main: move AGENTS.md → docs/development/agents.md, add CHANGELOG, VERSION, release workflow
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/e58d59de-a79d-48e1-a4fc-ffb61b868593

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
2026-03-29 10:48:48 +00:00
semantic-release ed9132e2f0 chore(release): v1.0.0 2026-03-29 10:46:24 +00:00
Christian Krakau-Louis 7ac74aa03a Merge pull request #21 from christianlouis/copilot/clean-up-documentation-and-files
Clean up repo root, add TODO with implementation gap analysis, add semantic release
2026-03-29 12:45:37 +02:00
copilot-swe-agent[bot] ba0800db81 Address review feedback: add error handling to sync_version.py, fix ROADMAP refs in issues.json
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/00a0c62f-f046-4f73-9c6a-79073906264c

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
2026-03-29 10:30:53 +00:00
copilot-swe-agent[bot] 78fb8a1491 Fix deprecated actions: upload-artifact v3→v4, codeql-action v2→v3, dependency-review v3→v4; restrict Docker publish to main only
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/44b3da10-0967-404e-a999-f1e471d6aff9

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
2026-03-29 10:30:28 +00:00
copilot-swe-agent[bot] 630be30a82 Add semantic release with automatic versioning, CHANGELOG, and VERSION file
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/00a0c62f-f046-4f73-9c6a-79073906264c

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
2026-03-29 10:29:29 +00:00
copilot-swe-agent[bot] a769e64b7c Add explicit permissions to CI workflow jobs (CodeQL security fix)
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/9d256101-34b6-4861-a8cf-7f86f32b54d5

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
2026-03-29 10:25:58 +00:00
copilot-swe-agent[bot] 86e7598f03 Address code review: fix E501 consistency in AGENTS.md, fix exception handling in test_security.py
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/9d256101-34b6-4861-a8cf-7f86f32b54d5

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
2026-03-29 10:24:47 +00:00
copilot-swe-agent[bot] bab702a010 Add Docker build & GHCR publish stage, fix CI workflows, update AGENTS.md and testing docs
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/9d256101-34b6-4861-a8cf-7f86f32b54d5

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
2026-03-29 10:23:49 +00:00
copilot-swe-agent[bot] f686e854cb Move docs from root to docs/ directory, create CHANGELOG.md and TODO.md
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/00a0c62f-f046-4f73-9c6a-79073906264c

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
2026-03-29 10:22:06 +00:00
copilot-swe-agent[bot] 5fa315c8e3 Redesign test framework: fix conftest, rewrite all tests, fix model index conflicts, fix black formatting
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/9d256101-34b6-4861-a8cf-7f86f32b54d5

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
2026-03-29 10:19:43 +00:00
copilot-swe-agent[bot] 3f7a128c32 Initial plan 2026-03-29 10:15:30 +00:00
copilot-swe-agent[bot] f5368927ef Initial plan 2026-03-29 10:10:24 +00:00
Christian Krakau-Louis 4d54633923 Merge pull request #19 from christianlouis/fix-imap-credentials-logging-vulnerability-5693644702815765698
🔒 [security] Move IMAP credentials to request body
2026-03-29 12:07:52 +02:00
Christian Krakau-Louis e428111ead Merge pull request #15 from christianlouis/copilot/fix-xss-and-csp-issues
Fix XSS vulnerabilities, document CSP hardening, establish audit schedule
2026-03-29 12:07:32 +02:00
Christian Krakau-Louis 44b26cd38b Merge pull request #6 from christianlouis/copilot/generate-issues-from-roadmap
Add automated issue generation from roadmap documentation
2026-03-29 12:07:08 +02:00
google-labs-jules[bot] 1831c1a079 🔒 security: move IMAP credentials to request body and fix CI/pylint issues
- Moved IMAP credentials from query parameters to the request body for the test-connection endpoint.
- Created missing `__init__.py` files across `backend/app/` to fix CI `ModuleNotFoundError`.
- Reformatted `setup.py` and `user.py` using `black` to pass lint checks.
- Addressed Pylint warnings in `imap.py` (unused arguments, lazy logging, exception chaining).

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
2026-03-23 18:57:40 +00:00
google-labs-jules[bot] 34c910e131 🔒 security: move IMAP credentials to request body
Moved IMAP credentials from query parameters to the request body
for the test-connection endpoint to prevent cleartext logging.
Implemented a Pydantic model (IMAPTestRequest) for request body validation.

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
2026-03-23 16:18:16 +00:00
copilot-swe-agent[bot] 959408d405 Add comprehensive XSS verification and follow-up summary documentation
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
2026-02-09 14:06:11 +00:00
copilot-swe-agent[bot] 5174bce2fa Add quarterly security audit schedule documentation
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
2026-02-09 14:02:37 +00:00
copilot-swe-agent[bot] fdc79eea49 Update CSP directives and add detailed security TODOs
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
2026-02-09 14:01:37 +00:00
copilot-swe-agent[bot] 0126dc1cf4 Fix XSS vulnerabilities in JavaScript files
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
2026-02-09 13:59:25 +00:00
copilot-swe-agent[bot] 7a3608b32e Initial plan 2026-02-09 13:56:14 +00:00
Christian Krakau-Louis fe3877a55a Merge pull request #11 from christianlouis/copilot/audit-code-quality-practices
Comprehensive code quality audit with Python formatting improvements
2026-02-09 14:15:03 +01:00
copilot-swe-agent[bot] 0e7a01bc5d Address code review feedback
- Fix background_task scope issue (use global consistently)
- Improve IMAP exception handling comment with specific examples
- Move random import to module level with TODO comment
- Add nosec B311 comment for mock data random usage

All code review issues resolved.

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
2026-02-09 12:16:50 +00:00
copilot-swe-agent[bot] faeeafb7e3 Add audit quick summary for easy reference 2026-02-09 12:14:21 +00:00
copilot-swe-agent[bot] fd99cee758 Complete code quality audit with comprehensive documentation
- Created detailed audit report (docs/CODE_QUALITY_AUDIT_2026-02.md)
- Created XSS fix guide (docs/XSS_FIXES.md)
- Identified 4 critical XSS vulnerabilities
- Documented CSP improvements needed
- Verified Python code with CodeQL (0 alerts)
- Overall grade: B+ (83/100)

Key findings:
 Excellent Python code quality (A-, 92/100)
 Strong security infrastructure (A, 95/100)
 Good infrastructure & config (A, 95/100)
⚠️  Frontend needs XSS fixes (B-, 72/100)
⚠️  Test suite needs attention (B, 80/100)

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
2026-02-09 12:13:37 +00:00
copilot-swe-agent[bot] 6ae017b142 Fix code formatting and linting issues
- Auto-format all Python files with black and isort
- Remove unused imports with autoflake
- Fix flake8 issues (missing newlines, blank lines, etc.)
- Fix nonlocal/global scope issues in main.py
- Fix security.py import order (E402)
- Remove f-string without placeholders
- Add nosec comment for intentional exception handling
- Fix test imports to match refactored DMARCParser API

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
2026-02-09 12:08:51 +00:00
copilot-swe-agent[bot] f6908fe9ec Initial plan 2026-02-09 12:01:56 +00:00
Christian Krakau-Louis 90ce88dad9 Merge pull request #8 from christianlouis/copilot/security-remediation-sprint
Security Remediation Sprint: Authentication, XXE Protection, Input Validation & Headers
2026-02-09 13:01:18 +01:00
copilot-swe-agent[bot] 494ef135d5 Final code review fixes: move import, remove empty tests, add production warning
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
2026-02-09 11:53:43 +00:00
copilot-swe-agent[bot] 8550799bf8 Address code review feedback: improve XSS prevention, structured errors, API key logging, CSP warnings
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
2026-02-09 11:51:58 +00:00
copilot-swe-agent[bot] 2e22941927 Update SECURITY.md with completed remediation status and fix bandit warning
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
2026-02-09 11:48:19 +00:00
copilot-swe-agent[bot] d38934625d Add comprehensive security tests for authentication, validation, and file upload
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
2026-02-09 11:46:32 +00:00
copilot-swe-agent[bot] 03f4eaf724 Implement critical security fixes: secret management, XML parsing, auth, input validation, security headers
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
2026-02-09 11:43:22 +00:00
copilot-swe-agent[bot] 717ced4f59 Initial plan 2026-02-09 11:37:28 +00:00
Christian Krakau-Louis c0a2aa62ce Merge pull request #4 from christianlouis/dependabot/pip/docs/readthedocs/pymdown-extensions-10.16.1
Bump pymdown-extensions from 10.0.1 to 10.16.1 in /docs/readthedocs
2026-02-09 12:35:13 +01:00
copilot-swe-agent[bot] 17c46b7d45 docs: Add comprehensive summary of issue generation
- Added ISSUE_GENERATION_SUMMARY.md with complete overview
- Documented all 54 generated issues by category
- Provided three different import methods
- Included setup instructions for milestones and labels
- Added recommended workflow and next steps

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
2026-02-06 22:27:19 +00:00
copilot-swe-agent[bot] c3f223c29a feat: Add issue generation script and generated issues from roadmap
- Created Python script to parse ROADMAP.md and extract tasks
- Generated 54 GitHub issues:
  - 7 Security Remediation Sprint issues (CRITICAL/HIGH priority)
  - 43 Milestone feature issues (M4-M11)
  - 4 Continuous Improvement issues
- Created issues.json, issues_preview.md, and create_issues.sh
- Added comprehensive README with usage instructions

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
2026-02-06 22:26:26 +00:00
copilot-swe-agent[bot] 4bc1d1c48d Initial plan 2026-02-06 22:19:55 +00:00
Christian Krakau-Louis 55ca6cdf82 Merge pull request #5 from christianlouis/copilot/analyze-repo-security-bugs
[WIP] Analyze repository for security issues and code improvements
2026-02-06 23:17:43 +01:00