6 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Sharang ParnerkarandClaude Opus 4.8	0aec6fdd4a	feat(plc): control-application SBOM from CODESYS .projectarchive (+ CVE) ... CODESYS does not export libraries to PLCopen XML, so the control application's dependencies live in the .projectarchive — which is a ZIP bundling the project, its referenced libraries, and the target runtime. Each library is an entry named `Name, X.Y.Z.W (Company)` and the runtime is a device-descriptor entry `CODESYS Control … <version> …`, so the SBOM needs no binary parsing: enumerate the zip entries. - plc::sbom::projectarchive_sbom: parses library + runtime components from a .projectarchive's entry names into SbomEntry rows (package_manager `codesys`, purl `pkg:codesys/<name>@<ver>`). Verified against a real 9.9 MB archive (Proemion/codesys-examples, Apache-2.0): 37 components incl. Standard/Util/ CmpCodeMeter/3SLicense and the CODESYS Control for Linux ARM SL 4.17.0.0 runtime. - run_plc_scan: after control-logic findings, extract the SBOM from the PlcProject artifact and persist it via persist_control_app_sbom — scoped to package_manager `codesys` (coexists with firmware/source SBOM) and matched against known CVEs (the Cmp*/3SLicense components carry real CODESYS advisories). Implements #166. Follow-ons: CVE notifications for the PLC SBOM, and ingesting a .projectarchive committed in a git repo (see the git-ingest discussion). Tracker #167. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-16 17:22:05 +02:00
Sharang Parnerkar	5cafd13f44	ci: log orca webhook response so deploy steps arent silent	2026-04-08 15:09:27 +02:00
Sharang ParnerkarandClaude Opus 4.6	69209649a5	ci: trigger first orca build for all services ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-08 10:10:07 +02:00
Sharang ParnerkarandClaude Opus 4.6	d5439adc0d	ci: trigger build of dashboard, docs, mcp images for orca ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-08 10:09:49 +02:00
Sharang ParnerkarandClaude Opus 4.6	bc7cdd35e4	ci: replace coolify webhook with orca deploy ... Each deploy job now builds the per-service image, pushes to the private registry as :latest and :sha, then triggers an HMAC-signed orca redeploy webhook. Coolify webhooks are no longer used. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-08 10:06:11 +02:00
Sharang ParnerkarandClaude Opus 4.6	c062d834a1	fix: downgrade dotenv missing file from FAILED to info message ... Non-fatal in Docker where env vars come from container config. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-30 15:33:24 +02:00