Skip to content

Fix SSL cert issue#209

Merged
cx-happy-yang merged 20 commits into
masterfrom
dev
Jul 7, 2026
Merged

Fix SSL cert issue#209
cx-happy-yang merged 20 commits into
masterfrom
dev

Conversation

@cx-happy-yang

Copy link
Copy Markdown
Contributor

No description provided.

cx-happy-yang and others added 20 commits June 24, 2026 21:12
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
- POST /api/v1/ai-triage/trigger (trigger_ai_triage)
- POST /api/v1/ai-remediation/trigger (trigger_ai_remediation)
- GET /api/v1/ai-tr/process/{processId} (retrieve_process_status)

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
- GET /api/sca/registries-configuration/configurations (get_all_configurations)
- POST /api/sca/registries-configuration/configurations (create_configuration)
- GET /api/sca/registries-configuration/configurations/{configId} (get_configuration)
- Plus 20 additional endpoints for configuration CRUD, project/tag associations

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
- Fix all six DELETE methods in ScaPrivateRegistryConfigAPI to use
  response.status_code == 204 instead of response.ok (httpx compat).
- Add test for delete_configuration.
- Add test for get_configuration.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
- Update modify-configuration to accept ScaRegistryConfigRequest DTO
- Returns True on 200 OK
- Add test_update_configuration that creates, updates, verifies, and cleans up

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
- Update request body to send raw array of config IDs
- Return ScaRegistryConfigResponse with id and message
- Add test with project lookup and config association

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
…roject

- get_project_configurations returns List[ScaRegistryConfiguration]
- disassociate_configurations_from_project accepts optional config_ids
  query param for targeted disassociation
- Add tests for both endpoints

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
- Send raw array of config IDs as request body
- Return ScaRegistryConfigResponse with id and message
- Add test that creates a temp tag, associates, and cleans up

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
- New ScaTagWithConfigurations DTO with tag id, tenantId, name, and
  nested configurations list
- Update get_configurations_by_tag to return typed response
- Add test that creates tag, associates config, queries, and cleans up

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
- New ScaProjectWithConfigurations DTO with id, tenantId, configurations
- get_projects_with_configurations with pagination (page_number, page_size)
- get_projects_by_configuration returns filtered projects by config ID
- Add tests for both endpoints

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
- Send raw array of project IDs as request body
- Return ScaRegistryConfigResponse with id and message
- Add test that associates a project with a configuration

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
- New scaManagementOfRiskAPI module with 6 endpoints
- DTOs: UpdatePackageStateRequest, PackageAction, PackageActionValue
- State enum values: Monitored, Muted, Snooze
- Tests with real package against live API (3/3 passing)

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
- New BulkPackageEntry and UpdatePackageStateBulkRequest DTOs
- Bulk endpoint applies shared actions across all packages in packagesProfile
- Returns True on 201 Created
- Test against live API passing

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
- SupplyChainRiskAction DTO supports ChangeState and ChangeScore actions
- UpdateSupplyChainRiskRequest with multi-project support
- Handles empty 201 responses gracefully
- Test against live API passing

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
- BulkSupplyChainRiskEntry and UpdateSupplyChainRisksBulkRequest DTOs
- Shared actions applied across all risk entries in packageSupplyChainRisks
- Test against live API passing

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
- Reuses SupplyChainRiskAction for ChangeState/ChangeScore actions
- Supports multi-project vulnerability state/score updates
- Test against live API passing

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
- BulkVulnerabilityEntry and UpdateVulnerabilitiesBulkRequest DTOs
- Shared actions across all vulnerabilities in packageVulnerabilitiesProfile
- All 6 Management of Risk endpoints now complete with 8 passing tests

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
- Fix 36 method name mismatches (doc now matches actual function names)
- Add 5 entirely missing modules: CodeRepositoryProjectImportAPI,
  DastResultsAPI, DastScanAPI, HealthCheckServiceAPI, RepoManagerAPI
- Add 20+ missing individual methods across multiple modules

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
@stepsecurity-app

Copy link
Copy Markdown
Contributor

Security Policy Alert: Secret Policy Violation

This workflow run has been blocked by StepSecurity's secrets policy because it accesses secrets and the workflow file differs from the default branch.

Secret references detected:

  • secrets.CXONE_TENANT at line 42
  • secrets.CXONE_CLIENT_ID at line 43
  • secrets.CXONE_CLIENT_SECRET at line 44

To approve this workflow, please add the workflows-approved label to this PR.

Note: The label must be added by someone other than the PR author (cx-happy-yang) or automation bots to ensure proper security review.

After the label is added, you can re-run the blocked workflow to proceed.

This workflow will be automatically approved once merged into the default branch.

For more information, see StepSecurity's Secret Exfiltration Policy documentation.

@cx-happy-yang cx-happy-yang self-assigned this Jul 7, 2026
@cx-happy-yang cx-happy-yang added the workflows-approved A PR needs the label workflows-approved to run any workflows. label Jul 7, 2026

@cx-james-bostock cx-james-bostock left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi @cx-happy-yang,
Looks good to me.

@cx-happy-yang
cx-happy-yang merged commit 41f4dd2 into master Jul 7, 2026
8 of 9 checks passed
@cx-happy-yang
cx-happy-yang deleted the dev branch July 7, 2026 05:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

workflows-approved A PR needs the label workflows-approved to run any workflows.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants