Ahmed Allam
9805d1a67d
fix(reporting): keep the proxy-outage retry message on evidence-only revisions
...
An update that only carries http_exchange_ids used to fail with
'No fields to update' when the proxy could not be reached, hiding the
retry guidance. It now returns the outage warning as the error.
2026-09-09 09:18:14 +00:00
Ahmed Allam
618261aa6a
fix(reporting): drop unverified HTTP exchange IDs instead of storing them
...
When the proxy lookup itself fails, the finding is still filed but the
http_exchange_ids are omitted and the result carries a warning telling
the agent to attach them with update_vulnerability_report once the proxy
responds. Unverified IDs are never recorded as evidence.
2026-09-09 09:12:30 +00:00
Ahmed Allam
265df84048
fix(reporting): surface persistence failures to the agent and tolerate proxy outages
...
- existing_request_ids: use functools.partial so mypy can type the lookup
- _do_create/_do_update/_do_create_dependency: catch any exception raised
while committing a report and return a structured success:false result
instead of leaking a generic tool error
- _verify_http_exchange_ids: unknown IDs are still rejected, but a proxy
lookup failure now keeps the IDs and attaches a warning to the result
rather than blocking the finding
2026-09-09 09:07:35 +00:00
bearsyankees
3d632c3a69
fix(reporting): resolve captured requests and preserve failed revisions
2026-09-07 11:04:41 -04:00
Alex Schapiro
d40497747f
fix(reporting): verify HTTP evidence references
2026-09-04 20:29:37 +00:00
Alex Schapiro
9eb3199d10
fix(reporting): reject unpersisted findings
2026-09-04 20:24:25 +00:00
Alex Schapiro
677ae1effa
feat(reporting): link HTTP exchange evidence
2026-09-04 18:45:53 +00:00
alex s
46cf2f52f3
report: add update_vulnerability_report so an agent can revise a filed finding ( #1210 )
...
Co-authored-by: Ahmed Allam <ahmed39652003@gmail.com>
2026-09-01 13:07:17 -07:00
yoni-at-strix
717ffc8f4c
Isolate MCP connections per task and surface connection status in the UIs ( #1181 )
2026-08-27 14:10:44 -07:00
devin-ai-integration[bot]
391d81bea7
feat(agents): evidence discipline, and coverage as a first-class artifact ( #961 )
...
Co-authored-by: Ahmed Allam <ahmed39652003@gmail.com>
2026-08-24 03:34:09 -07:00
Ahmed Allam
a46a60cf6a
feat(reporting): require contextual CVSS and usage evidence on dependency reports
2026-08-17 14:35:21 +03:00
Ahmed Allam
e442db9c93
Contextual CVSS as a full 8-metric breakdown, computed like a normal finding
2026-08-17 13:03:41 +03:00
Ahmed Allam
9c0d30a0d0
reporting: require the source-to-sink trace in reachability evidence, not just CVSS reasoning
2026-08-17 13:03:41 +03:00
Ahmed Allam
99e2d5d826
reporting: drop per-metric contextual CVSS reasoning, keep the summary
2026-08-17 13:03:41 +03:00
Ahmed Allam
310f310e28
feat(reporting): contextual CVSS environmental metrics on dependency reports
2026-08-17 13:03:41 +03:00
Ahmed Allam
b69af37cb2
feat(report): keep dependency findings from distinct manifests separate in dedupe
2026-08-06 02:20:46 +03:00
Ahmed Allam
72cb15a20a
feat(reporting): require repo-relative manifest_path on dependency CVE findings
2026-08-06 02:20:46 +03:00
Alex Schapiro
97336d53e4
feat(reporting): structured reachability evidence ladder for dependency CVE findings
2026-08-06 00:25:08 +03:00
devin-ai-integration[bot]
657aa5cbe6
feat(reporting): record transitive dependency chain on SCA findings ( #971 )
...
Co-authored-by: Ahmed Allam <ahmed39652003@gmail.com>
2026-08-04 12:34:52 -07:00
devin-ai-integration[bot]
a87bfb4881
fix(reporting): require advisory_cvss for dependency findings + add SCA TUI renderer ( #753 )
...
Co-authored-by: Ahmed Allam <ahmed39652003@gmail.com>
2026-07-12 17:31:49 -07:00
alex s
4537f33f11
Add dependency reporting fields ( #751 )
2026-07-12 15:30:33 -04:00
