compliance-scanner-agent

4 Commits

Include renames

Author	SHA1	Message	Date
sharang	7d5c95ddb8	fix(mcp): bind tenant to session — bearer context was lost over HTTP (#226 ) CI / Check (push) Skipped Details CI / Detect Changes (push) Successful in 2s Details CI / Deploy Agent (push) Skipped Details CI / Deploy Dashboard (push) Skipped Details CI / Deploy Docs (push) Skipped Details CI / Deploy MCP (push) Successful in 1m57s Details	2026-07-22 09:30:07 +00:00
sharang	a3a96fe2cc	feat(m7.3): MCP tenant-scoped bearer tokens (#92 ) CI / Check (push) Has been skipped Details CI / Detect Changes (push) Successful in 5s Details CI / Deploy Agent (push) Successful in 8m13s Details CI / Deploy Dashboard (push) Successful in 7m3s Details CI / Deploy Docs (push) Has been skipped Details CI / Deploy MCP (push) Successful in 1m50s Details MCP server validates per-tenant bearer tokens on incoming calls and routes each tool to the caller's tenant DB. Closes the cross-tenant data leak in the MCP path identified in M7.3.	2026-06-30 15:27:21 +00:00
sharang Sharang Parnerkar Sharang Parnerkar	745ad8a441	fix: check Gitea API response status and fallback for PR reviews (#47 ) CI / Check (push) Has been skipped Details CI / Detect Changes (push) Successful in 3s Details CI / Deploy Agent (push) Successful in 2s Details CI / Deploy Dashboard (push) Successful in 2s Details CI / Deploy Docs (push) Has been skipped Details CI / Deploy MCP (push) Successful in 2s Details ## Summary - Add HTTP response status checking to all Gitea tracker methods that were silently swallowing errors - Add fallback in create_pr_review: if inline comments fail, retry as plain PR comment ## Test plan - [ ] Deploy and trigger a PR review, check logs for actual error details - [ ] Verify fallback posts summary comment when inline comments fail Co-authored-by: Sharang Parnerkar <parnerkarsharang@gmail.com> Co-authored-by: Sharang Parnerkar <30073382+mighty840@users.noreply.github.com> Reviewed-on: https://gitea.meghsakha.com/sharang/compliance-scanner-agent/pulls/47	2026-03-25 16:26:09 +00:00
sharangandSharang Parnerkar	32e5fc21e7	feat: add MCP server for exposing compliance data to LLMs (#5 ) CI / Format (push) Successful in 3s Details CI / Clippy (push) Successful in 4m4s Details CI / Security Audit (push) Successful in 1m42s Details CI / Tests (push) Successful in 4m38s Details CI / Deploy Agent (push) Successful in 2s Details CI / Deploy Dashboard (push) Successful in 1s Details CI / Deploy MCP (push) Failing after 2s Details CI / Detect Changes (push) Successful in 7s Details CI / Deploy Docs (push) Successful in 2s Details New `compliance-mcp` crate providing a Model Context Protocol server with 7 tools: list/get/summarize findings, list SBOM packages, SBOM vulnerability report, list DAST findings, and DAST scan summary. Supports stdio (local dev) and Streamable HTTP (deployment via MCP_PORT). Includes Dockerfile, CI clippy check, and Coolify deploy job. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> Co-authored-by: Sharang Parnerkar <parnerkarsharang@gmail.com> Reviewed-on: https://gitea.meghsakha.com/sharang/compliance-scanner-agent/pulls/5	2026-03-09 08:21:04 +00:00