carrtech/ct-ops
3
0
Fork 0
Code Issues 28 Pull requests Projects Releases 750 Packages Wiki Activity Actions

fix(hosts): count host vulnerabilities by CVE #82

Merged
simon merged 1 commit from fix/host-vulnerability-cve-scope into main 2026-05-24 08:28:29 +00:00
Conversation 0 Commits 1 Files changed 3 +161 -62
simon commented 2026-05-24 08:25:20 +00:00
Owner
Copy link

Summary

  • Count host vulnerability totals by distinct CVE instead of raw finding rows.
  • Deduplicate host vulnerability table rows to one representative finding per CVE.
  • Move last scan into the summary cards and add CVE published age to details.

Validation

  • pnpm --dir apps/web type-check
  • pnpm --dir apps/web lint app/(dashboard)/hosts/[id]/vulnerabilities-tab.tsx lib/actions/vulnerabilities-core.ts tests/e2e/hosts/vulnerabilities.spec.ts
  • pnpm --dir apps/web test:e2e tests/e2e/hosts/vulnerabilities.spec.ts

Release notes

  • Web image release expected through the normal release-please pipeline after merge.
## Summary - Count host vulnerability totals by distinct CVE instead of raw finding rows. - Deduplicate host vulnerability table rows to one representative finding per CVE. - Move last scan into the summary cards and add CVE published age to details. ## Validation - pnpm --dir apps/web type-check - pnpm --dir apps/web lint app/(dashboard)/hosts/[id]/vulnerabilities-tab.tsx lib/actions/vulnerabilities-core.ts tests/e2e/hosts/vulnerabilities.spec.ts - pnpm --dir apps/web test:e2e tests/e2e/hosts/vulnerabilities.spec.ts ## Release notes - Web image release expected through the normal release-please pipeline after merge.
fix(hosts): count host vulnerabilities by CVE
All checks were successful
Conventional PR title / Conventional PR title (pull_request) Successful in 1s
Details
PR Checks (Docker images) / Ansible API contract (pull_request) Successful in 7s
Details
SAST / crypto-lint (no weak hashes / ciphers) (pull_request) Successful in 7s
Details
SAST / trivy (filesystem) (pull_request) Successful in 19s
Details
SAST / semgrep (pull_request) Successful in 36s
Details
SAST / trivy (config / IaC) (pull_request) Successful in 17s
Details
Secret Scan / gitleaks (pull_request) Successful in 12s
Details
SAST / gosec (agent) (pull_request) Successful in 1m14s
Details
SAST / gosec (ingest) (pull_request) Successful in 1m15s
Details
PR Checks (Docker images) / Ingest Docker image (pull_request) Successful in 1m35s
Details
PR Checks (Docker images) / Ansible API Docker image (pull_request) Successful in 1m46s
Details
PR Checks (Web) / Web (lint / type-check / build) (pull_request) Successful in 2m42s
Details
PR Checks (Docker images) / Web Docker image (pull_request) Successful in 2m46s
Details
4367e53d10
simon merged commit f42413304d into main 2026-05-24 08:28:29 +00:00
simon deleted branch fix/host-vulnerability-cve-scope 2026-05-24 08:28:29 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
E2E Failure
Regression found by end-to-end automation

  
area:agent
Go agent

  
area:audit-log
Audit logging

  
area:auth
Authentication

  
area:authz
Authorisation / RBAC

  
area:ci
CI / tooling / scanning

  
area:crypto
Cryptography / secrets

  
area:db
Database / schema

  
area:docker
Docker / deployment

  
area:headers
HTTP headers / CSP

  
area:ingest
gRPC ingest service

  
area:ldap
LDAP integration

  
area:rate-limit
Rate limiting / abuse prevention

  
area:ssrf
Server-side request forgery

  
area:supply-chain
Supply chain / deploy

  
area:terminal
Terminal / PTY

  
autorelease: pending

   
autorelease: tagged

   
bug
Something isn't working

  
claude-working

   
documentation
Improvements or additions to documentation

  
duplicate
This issue or pull request already exists

  
enhancement
New feature or request

  
good first issue
Good for newcomers

  
help wanted
Extra attention is needed

  
invalid
This doesn't seem right

  
priority: critical
Critical - blocking or data loss

  
priority: high
High priority - should be addressed soon

  
priority: low
Low priority - nice to have

  
priority: medium
Medium priority - address after high priority items

  
question
Further information is requested

  
security
Security finding from pre-pentest audit

  
sev:critical
Severity: Critical

  
sev:high
Severity: High

  
sev:info
Severity: Informational / Hardening

  
sev:low
Severity: Low

  
sev:medium
Severity: Medium

  
tests-required
Needs tests or stronger coverage before fix is complete

  
wontfix
This will not be worked on

No labels
E2E Failure
area:agent
area:audit-log
area:auth
area:authz
area:ci
area:crypto
area:db
area:docker
area:headers
area:ingest
area:ldap
area:rate-limit
area:ssrf
area:supply-chain
area:terminal
autorelease: pending
autorelease: tagged
bug
claude-working
documentation
duplicate
enhancement
good first issue
help wanted
invalid
priority: critical
priority: high
priority: low
priority: medium
question
security
sev:critical
sev:high
sev:info
sev:low
sev:medium
tests-required
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
carrtech/ct-ops!82
No description provided.