Sharang Parnerkar

sharang opened issue sharang/compliance-scanner-agent#127

2026-07-10 08:34:45 +00:00

ONB-09 · Wizard screen 4 — review & launch

sharang opened issue sharang/compliance-scanner-agent#125

2026-07-10 08:34:44 +00:00

ONB-07 · Wizard screen 2 — artifact upload/link (type-aware inputs)

sharang opened issue sharang/compliance-scanner-agent#124

2026-07-10 08:34:44 +00:00

ONB-06 · Wizard screen 1 — target type selection (card grid + auto-detect)

sharang opened issue sharang/compliance-scanner-agent#123

2026-07-10 08:34:43 +00:00

ONB-05 · Onboarding wizard shell — multi-step flow, state, navigation

sharang opened issue sharang/compliance-scanner-agent#122

2026-07-10 08:34:43 +00:00

ONB-04 · Scan-applicability matrix (target type × artifacts → SAST/DAST/pentest)

sharang opened issue sharang/compliance-scanner-agent#120

2026-07-10 08:34:42 +00:00

ONB-02 · Artifact ingest layer (git/zip/firmware/mobile/container/URL/plaintext)

sharang opened issue sharang/compliance-scanner-agent#121

2026-07-10 08:34:42 +00:00

ONB-03 · Artifact-aware classifier / auto-detection (Tramiton detect handoff)

sharang opened issue sharang/compliance-scanner-agent#119

2026-07-10 08:34:41 +00:00

ONB-01 · Target taxonomy + unified data model (OnboardedTarget/TargetType/Artifact)

sharang opened issue sharang/compliance-scanner-agent#118

2026-07-10 08:32:57 +00:00

ONB-Epic · Multi-target artifact-aware onboarding wizard

sharang closed issue sharang/compliance-scanner-agent#32

2026-07-10 07:52:41 +00:00

[medium] gdpr-patterns: Missing data deletion capability

sharang commented on issue sharang/compliance-scanner-agent#31

2026-07-10 07:52:40 +00:00

[medium] gdpr-patterns: Missing data deletion capability

Closing as duplicate of #30 — same gdpr-no-delete-endpoint heuristic on the same dashboard user model; tracked once in #30.

sharang commented on issue sharang/compliance-scanner-agent#32

2026-07-10 07:52:40 +00:00

[medium] gdpr-patterns: Missing data deletion capability

Closing as duplicate of #30 — same gdpr-no-delete-endpoint heuristic on the same dashboard user model; tracked once in #30.

sharang closed issue sharang/compliance-scanner-agent#31

2026-07-10 07:52:40 +00:00

[medium] gdpr-patterns: Missing data deletion capability

sharang commented on issue sharang/compliance-scanner-agent#30

2026-07-10 07:52:40 +00:00

[medium] gdpr-patterns: Missing data deletion capability

Keeping this as the single tracking issue for GDPR data-deletion capability for dashboard users (auth.rs / user_state.rs). #31 and #32 were the same heuristic firing on adjacent code and are…

sharang commented on issue sharang/compliance-scanner-agent#54

2026-07-10 07:52:39 +00:00

[medium] semgrep: Service 'mailserver' is running with a writable root filesystem. This may allow malicious applications to download and run additional payloads, or modify container files. If an application inside a container has to save something temp…

Closing as duplicate of #29 (same rule writable-filesystem-service, same file deploy/docker-compose.mailserver.yml), now consolidated into #28.

sharang closed issue sharang/compliance-scanner-agent#54

2026-07-10 07:52:39 +00:00

[medium] semgrep: Service 'mailserver' is running with a writable root filesystem. This may allow malicious applications to download and run additional payloads, or modify container files. If an application inside a container has to save something temp…

sharang closed issue sharang/compliance-scanner-agent#29

2026-07-10 07:52:39 +00:00

[medium] semgrep: Service 'mailserver' is running with a writable root filesystem. This may allow malicious applications to download and run additional payloads, or modify container files. If an application inside a container has to save something temp…

sharang commented on issue sharang/compliance-scanner-agent#28

2026-07-10 07:52:38 +00:00

[medium] semgrep: Service 'mailserver' allows for privilege escalation via setuid or setgid binaries. Add 'no-new-privileges:true' in 'security_opt' to prevent this.

Consolidating mailserver docker-compose hardening here: in addition to no-new-privileges:true (this issue), also add read_only: true with tmpfs for temp paths (was #29 / #54, closed as…

sharang commented on issue sharang/compliance-scanner-agent#29

2026-07-10 07:52:38 +00:00

[medium] semgrep: Service 'mailserver' is running with a writable root filesystem. This may allow malicious applications to download and run additional payloads, or modify container files. If an application inside a container has to save something temp…

Closing: consolidated into #28 (single mailserver compose hardening issue covering no-new-privileges + read_only rootfs).

sharang closed issue sharang/compliance-scanner-agent#27

2026-07-10 07:52:26 +00:00

[medium] semgrep: Dangerously accepting invalid TLS information