gitea-admin/gh-christianlouis-dmarq
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
59 Commits 2 Branches 0 Tags
271b29186a1df076212cd853e7bf4cb1ff6e035c
Commit Graph

59 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
copilot-swe-agent[bot] 271b29186a Fix flake8 C901 complexity violations and F824 unused global in 5 files 
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/e58d59de-a79d-48e1-a4fc-ffb61b868593

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-29 10:58:33 +00:00
copilot-swe-agent[bot] 7752479444 plan: add flake8 complexity + unused global fixes to checklist 
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/e58d59de-a79d-48e1-a4fc-ffb61b868593

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-29 10:54:05 +00:00
copilot-swe-agent[bot] ccb447f29b Merge origin/main: move AGENTS.md → docs/development/agents.md, add CHANGELOG, VERSION, release workflow 
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/e58d59de-a79d-48e1-a4fc-ffb61b868593

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-29 10:48:48 +00:00
copilot-swe-agent[bot] 78fb8a1491 Fix deprecated actions: upload-artifact v3→v4, codeql-action v2→v3, dependency-review v3→v4; restrict Docker publish to main only 
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/44b3da10-0967-404e-a999-f1e471d6aff9

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-29 10:30:28 +00:00
copilot-swe-agent[bot] a769e64b7c Add explicit permissions to CI workflow jobs (CodeQL security fix) 
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/9d256101-34b6-4861-a8cf-7f86f32b54d5

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-29 10:25:58 +00:00
copilot-swe-agent[bot] 86e7598f03 Address code review: fix E501 consistency in AGENTS.md, fix exception handling in test_security.py 
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/9d256101-34b6-4861-a8cf-7f86f32b54d5

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-29 10:24:47 +00:00
copilot-swe-agent[bot] bab702a010 Add Docker build & GHCR publish stage, fix CI workflows, update AGENTS.md and testing docs 
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/9d256101-34b6-4861-a8cf-7f86f32b54d5

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-29 10:23:49 +00:00
copilot-swe-agent[bot] 5fa315c8e3 Redesign test framework: fix conftest, rewrite all tests, fix model index conflicts, fix black formatting 
Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/9d256101-34b6-4861-a8cf-7f86f32b54d5

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-29 10:19:43 +00:00
copilot-swe-agent[bot] f5368927ef Initial plan 2026-03-29 10:10:24 +00:00
Christian Krakau-Louis 4d54633923 Merge pull request #19 from christianlouis/fix-imap-credentials-logging-vulnerability-5693644702815765698 
🔒 [security] Move IMAP credentials to request body
 2026-03-29 12:07:52 +02:00
Christian Krakau-Louis e428111ead Merge pull request #15 from christianlouis/copilot/fix-xss-and-csp-issues 
Fix XSS vulnerabilities, document CSP hardening, establish audit schedule
 2026-03-29 12:07:32 +02:00
Christian Krakau-Louis 44b26cd38b Merge pull request #6 from christianlouis/copilot/generate-issues-from-roadmap 
Add automated issue generation from roadmap documentation
 2026-03-29 12:07:08 +02:00
google-labs-jules[bot] 1831c1a079 🔒 security: move IMAP credentials to request body and fix CI/pylint issues 
- Moved IMAP credentials from query parameters to the request body for the test-connection endpoint.
- Created missing `__init__.py` files across `backend/app/` to fix CI `ModuleNotFoundError`.
- Reformatted `setup.py` and `user.py` using `black` to pass lint checks.
- Addressed Pylint warnings in `imap.py` (unused arguments, lazy logging, exception chaining).

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-23 18:57:40 +00:00
google-labs-jules[bot] 34c910e131 🔒 security: move IMAP credentials to request body 
Moved IMAP credentials from query parameters to the request body
for the test-connection endpoint to prevent cleartext logging.
Implemented a Pydantic model (IMAPTestRequest) for request body validation.

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-03-23 16:18:16 +00:00
copilot-swe-agent[bot] 959408d405 Add comprehensive XSS verification and follow-up summary documentation 
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-02-09 14:06:11 +00:00
copilot-swe-agent[bot] 5174bce2fa Add quarterly security audit schedule documentation 
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-02-09 14:02:37 +00:00
copilot-swe-agent[bot] fdc79eea49 Update CSP directives and add detailed security TODOs 
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-02-09 14:01:37 +00:00
copilot-swe-agent[bot] 0126dc1cf4 Fix XSS vulnerabilities in JavaScript files 
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-02-09 13:59:25 +00:00
copilot-swe-agent[bot] 7a3608b32e Initial plan 2026-02-09 13:56:14 +00:00
Christian Krakau-Louis fe3877a55a Merge pull request #11 from christianlouis/copilot/audit-code-quality-practices 
Comprehensive code quality audit with Python formatting improvements
 2026-02-09 14:15:03 +01:00
copilot-swe-agent[bot] 0e7a01bc5d Address code review feedback 
- Fix background_task scope issue (use global consistently)
- Improve IMAP exception handling comment with specific examples
- Move random import to module level with TODO comment
- Add nosec B311 comment for mock data random usage

All code review issues resolved.

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-02-09 12:16:50 +00:00
copilot-swe-agent[bot] faeeafb7e3 Add audit quick summary for easy reference 2026-02-09 12:14:21 +00:00
copilot-swe-agent[bot] fd99cee758 Complete code quality audit with comprehensive documentation 
- Created detailed audit report (docs/CODE_QUALITY_AUDIT_2026-02.md)
- Created XSS fix guide (docs/XSS_FIXES.md)
- Identified 4 critical XSS vulnerabilities
- Documented CSP improvements needed
- Verified Python code with CodeQL (0 alerts)
- Overall grade: B+ (83/100)

Key findings:
✅ Excellent Python code quality (A-, 92/100)
✅ Strong security infrastructure (A, 95/100)
✅ Good infrastructure & config (A, 95/100)
⚠️  Frontend needs XSS fixes (B-, 72/100)
⚠️  Test suite needs attention (B, 80/100)

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-02-09 12:13:37 +00:00
copilot-swe-agent[bot] 6ae017b142 Fix code formatting and linting issues 
- Auto-format all Python files with black and isort
- Remove unused imports with autoflake
- Fix flake8 issues (missing newlines, blank lines, etc.)
- Fix nonlocal/global scope issues in main.py
- Fix security.py import order (E402)
- Remove f-string without placeholders
- Add nosec comment for intentional exception handling
- Fix test imports to match refactored DMARCParser API

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-02-09 12:08:51 +00:00
copilot-swe-agent[bot] f6908fe9ec Initial plan 2026-02-09 12:01:56 +00:00
Christian Krakau-Louis 90ce88dad9 Merge pull request #8 from christianlouis/copilot/security-remediation-sprint 
Security Remediation Sprint: Authentication, XXE Protection, Input Validation & Headers
 2026-02-09 13:01:18 +01:00
copilot-swe-agent[bot] 494ef135d5 Final code review fixes: move import, remove empty tests, add production warning 
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-02-09 11:53:43 +00:00
copilot-swe-agent[bot] 8550799bf8 Address code review feedback: improve XSS prevention, structured errors, API key logging, CSP warnings 
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-02-09 11:51:58 +00:00
copilot-swe-agent[bot] 2e22941927 Update SECURITY.md with completed remediation status and fix bandit warning 
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-02-09 11:48:19 +00:00
copilot-swe-agent[bot] d38934625d Add comprehensive security tests for authentication, validation, and file upload 
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-02-09 11:46:32 +00:00
copilot-swe-agent[bot] 03f4eaf724 Implement critical security fixes: secret management, XML parsing, auth, input validation, security headers 
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-02-09 11:43:22 +00:00
copilot-swe-agent[bot] 717ced4f59 Initial plan 2026-02-09 11:37:28 +00:00
Christian Krakau-Louis c0a2aa62ce Merge pull request #4 from christianlouis/dependabot/pip/docs/readthedocs/pymdown-extensions-10.16.1 
Bump pymdown-extensions from 10.0.1 to 10.16.1 in /docs/readthedocs
 2026-02-09 12:35:13 +01:00
copilot-swe-agent[bot] 17c46b7d45 docs: Add comprehensive summary of issue generation 
- Added ISSUE_GENERATION_SUMMARY.md with complete overview
- Documented all 54 generated issues by category
- Provided three different import methods
- Included setup instructions for milestones and labels
- Added recommended workflow and next steps

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-02-06 22:27:19 +00:00
copilot-swe-agent[bot] c3f223c29a feat: Add issue generation script and generated issues from roadmap 
- Created Python script to parse ROADMAP.md and extract tasks
- Generated 54 GitHub issues:
  - 7 Security Remediation Sprint issues (CRITICAL/HIGH priority)
  - 43 Milestone feature issues (M4-M11)
  - 4 Continuous Improvement issues
- Created issues.json, issues_preview.md, and create_issues.sh
- Added comprehensive README with usage instructions

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-02-06 22:26:26 +00:00
copilot-swe-agent[bot] 4bc1d1c48d Initial plan 2026-02-06 22:19:55 +00:00
Christian Krakau-Louis 55ca6cdf82 Merge pull request #5 from christianlouis/copilot/analyze-repo-security-bugs 
[WIP] Analyze repository for security issues and code improvements
 2026-02-06 23:17:43 +01:00
copilot-swe-agent[bot] 9ae57b2a8f Add comprehensive security and contribution documentation 
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
 2026-02-06 22:00:17 +00:00
copilot-swe-agent[bot] 53f20f25d1 Initial plan 2026-02-06 21:51:36 +00:00
dependabot[bot] 3d554e2cee Bump pymdown-extensions from 10.0.1 to 10.16.1 in /docs/readthedocs 
Bumps [pymdown-extensions](https://github.com/facelessuser/pymdown-extensions) from 10.0.1 to 10.16.1.
- [Release notes](https://github.com/facelessuser/pymdown-extensions/releases)
- [Commits](https://github.com/facelessuser/pymdown-extensions/compare/10.0.1...10.16.1)

---
updated-dependencies:
- dependency-name: pymdown-extensions
  dependency-version: 10.16.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-12-16 20:47:27 +00:00
Christian Krakau-Louis a0ddadfaa1 Add comprehensive contributing, testing, roadmap, and database schema documentation for DMARQ 2025-04-21 02:51:17 +02:00
Christian Krakau-Louis ae79cca8c1 Add comprehensive API and architecture documentation for DMARQ 2025-04-21 02:05:14 +02:00
Christian Krakau-Louis e6a23c5fc9 Add comprehensive configuration documentation for DMARQ 2025-04-21 01:54:52 +02:00
Christian Krakau-Louis e1a0bb975f Merge branch 'milestone-3' 2025-04-21 01:54:29 +02:00
Christian Krakau-Louis e7843790cf Add Docker and manual installation guides, and comprehensive settings documentation for DMARQ 2025-04-21 01:53:38 +02:00
Christian Krakau-Louis 7bb564e3fe Merge pull request #2 from christianlouis/milestone-3 
Milestone 3
 2025-04-21 01:50:44 +02:00
Christian Krakau-Louis f7a51d499a Add comprehensive documentation for DMARQ, including user guides, deployment instructions, and feature descriptions 
- Created main documentation index and user guide with sections on getting started, dashboard overview, managing domains, and reports.
- Added detailed deployment guide for Docker and manual installation.
- Included user-friendly explanations of DMARC, its benefits, and how to manage domains and reports.
- Implemented visual assets for dashboard, domains, IMAP, and reports.
- Established requirements for documentation build using MkDocs and Material theme.
- Integrated navigation structure for easy access to all documentation sections.
 2025-04-21 01:49:47 +02:00
Christian Krakau-Louis 5e8b1f033f Add comprehensive documentation for DMARQ, including user guides, deployment instructions, and feature descriptions 
- Created main documentation index and user guide with sections on getting started, dashboard overview, managing domains, and reports.
- Added detailed deployment guide for Docker and manual installation.
- Included user-friendly explanations of DMARC, its benefits, and how to manage domains and reports.
- Implemented visual assets for dashboard, domains, IMAP, and reports.
- Established requirements for documentation build using MkDocs and Material theme.
- Integrated navigation structure for easy access to all documentation sections.
 2025-04-21 01:49:34 +02:00
Christian Krakau-Louis 3178a52b8d Merge pull request #1 from christianlouis/milestone-2 
Add domain management, reports, settings, and upload templates
 2025-04-20 22:52:54 +02:00
Christian Krakau-Louis 51623a78d9 Update .env.example 
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
 2025-04-20 22:52:21 +02:00