feat(ctops): add CT Ops inventory connector #21

Merged

simonjcarr merged 1 commit from feat/ctops-integration-mvp into main

2026-05-08 07:18:44 +00:00

simonjcarr commented

2026-05-08 07:16:29 +00:00

(Migrated from github.com)

Summary

add CT Ops service-token auth, inventory snapshot API, and connection health endpoint to CT-CVE
persist CT Ops host/package inventory, snapshot idempotency, nonce replay state, and connector health
match accepted inventory snapshots immediately and deliver signed finding batches back to CT Ops
document CT_CVE_CT_OPS_CONNECTIONS configuration

Validation

go test ./...
CTOPS targeted connector validation: node --experimental-strip-types --test lib/integrations/ct-cve/connection-status.test.mjs lib/integrations/ct-cve/finding-ingest.test.mjs lib/integrations/ct-cve/inventory-export.test.mjs lib/integrations/ct-cve/inventory-push-job.test.mjs lib/integrations/ct-cve/service-token.test.mjs lib/integrations/ct-cve/setup-status.test.mjs

Notes

Docker-backed migration smoke testing could not run because the local Docker daemon is unavailable.
Full CTOPS pnpm --filter web test:unit was attempted and failed in unrelated existing areas: agent binary integrity assertion, Docker-dependent CT-CVE nonce-store test, and missing bcrypt-pbkdf for password-manager SSH-key tests.

## Summary - add CT Ops service-token auth, inventory snapshot API, and connection health endpoint to CT-CVE - persist CT Ops host/package inventory, snapshot idempotency, nonce replay state, and connector health - match accepted inventory snapshots immediately and deliver signed finding batches back to CT Ops - document CT_CVE_CT_OPS_CONNECTIONS configuration ## Validation - go test ./... - CTOPS targeted connector validation: node --experimental-strip-types --test lib/integrations/ct-cve/connection-status.test.mjs lib/integrations/ct-cve/finding-ingest.test.mjs lib/integrations/ct-cve/inventory-export.test.mjs lib/integrations/ct-cve/inventory-push-job.test.mjs lib/integrations/ct-cve/service-token.test.mjs lib/integrations/ct-cve/setup-status.test.mjs ## Notes - Docker-backed migration smoke testing could not run because the local Docker daemon is unavailable. - Full CTOPS pnpm --filter web test:unit was attempted and failed in unrelated existing areas: agent binary integrity assertion, Docker-dependent CT-CVE nonce-store test, and missing bcrypt-pbkdf for password-manager SSH-key tests.