Pull Request Explorer

Summary

Deploy production release v3.64.2

Releases candidate branch to production, enabling new findings status permissions for admins.

Health Assessment

• • Rapid merge with minimal review, automated release, low risk.

Summary

Fix findings ready_for_review status for admins/owners

Allows admins and owners to set findings to ready_for_review, improving workflow and ensuring proper permission handling.

Health Assessment

• • Rapid cycle with multiple small commits after review indicates active rework but quick resolution.

Summary

Enable logging for all supported frameworks

This update expands the system to allow logging findings for all supported frameworks, correcting UI restrictions and backend validation to ensure compliance coverage.

Health Assessment

• • Merged within minutes of creation, indicating a streamlined CI pipeline and high confidence in automated checks.

Summary

Fix Create Finding form to allow logging against all enabled frameworks

Fixes the Create Finding form so auditors can log against any framework the org has enabled. PCI DSS, HIPAA, GDPR, ISO 9001, and ISO 42001 are now selectable when subscribed; DB, API, and UI all accept them.

Health Assessment

• • Rapid resolution with a single review comment and minimal rework; the PR adds 225 lines across 11 files, but the changes are well-tested and do not introduce new risk.

Summary

Stream evidence export to prevent OOM

This PR updates evidence export to stream data, reducing memory usage and preventing out-of-memory crashes during large bulk exports.

Health Assessment

• • Merged within 30 minutes with no review comments, indicating strong automated testing and high confidence in the changes.

Summary

Stream runs to prevent OOM on bulk export

Fixes out‑of‑memory crashes during bulk evidence export by streaming data, ensuring reliable exports for large organizations.

Health Assessment

• • Fast turnaround with minimal review, indicating a straightforward memory‑optimization fix.

Summary

Deploy Production Release v3.63.2

Deploys the latest production release, adding control families, custom framework link handling, and batch requirement updates to improve performance and usability.

Health Assessment

• • The PR had a rapid review but required multiple commits to address issues, indicating significant rework on a large codebase.

Summary

Add batch update endpoint for requirements

Adds batch update for framework requirements to prevent API rate limiting during mass edits and speed up saves.

Health Assessment

• • Fast cycle time and minimal review comments indicate smooth integration.

Summary

Wrap custom framework link sync in transaction

Prevents partial sync state by ensuring all link creations succeed or fail together, improving data consistency for users.

Health Assessment

• • Rapid review and merge with minimal changes indicates low complexity and high confidence in correctness.

Summary

Fix combobox overflow, sort requirements, remove duplicates

Improves table UI by flipping dropdowns when space is limited, sorting requirements numerically, and eliminating redundant headings to reduce clutter.

Health Assessment

• • Rapid merge with minimal review indicates low complexity and high confidence in automated PR.

Summary

Add requirement families and grouped requirements view

Introduces a requirementFamily field and a grouped requirements UI, enhancing organization, filtering, and versioning across the framework editor and app.

Health Assessment

• • The PR was merged within 12 minutes of creation, with a single automated review and no rework, indicating a smooth, low‑friction process.

Summary

Fix custom framework control scoping

Corrects how custom frameworks link controls, policies, and tasks, ensuring accurate compliance scoring and preventing stale data.

Health Assessment

• • This PR involved extensive refactoring and bug fixes across custom framework logic, requiring multiple automated review cycles and significant code churn, indicating a complex change with high risk.

Summary

Add control family grouping with UI

Enables control family grouping with per-framework assignments and a grouped UI for large frameworks like NIST SP800-53, improving user experience and filtering capabilities.

Health Assessment

• • The PR has a large scope with many files changed, which may indicate a complex change.
• • The review process had multiple rounds with several issues found, which may indicate potential risks or areas for improvement.

Summary

Deploy Production Release v3.63.1

Deploys the latest release to production, fixing JSON rendering in cloud tests to improve user experience.

Health Assessment

• • Rapid 6‑minute cycle with automated AI review and no back‑and‑forth, indicating a smooth, low‑risk deployment.

Summary

Fix nested JSON rendering in manual remediation steps

Ensures complex IAM bucket policies are displayed correctly in manual remediation steps, improving user experience and reducing confusion.

Health Assessment

• • Rapid review and merge with minimal changes indicates low complexity and high confidence.

Summary

Deploy production release v3.63.0

Deploys the latest release to production, ensuring updated GCP security handling.

Health Assessment

• • Fast cycle time and minimal review comments indicate a straightforward deployment with no major issues.

Summary

Fix GCP fallback on forbidden folder enumeration

Prevents cross‑org project leakage for tenants whose org has no folders, improving security and user experience.

Health Assessment

• • Resolved within minutes with a single review, minimal rework, and no impact on existing functionality.

Summary

Unblock GCP picker for folder enumeration 403

Fixes GCP project picker to show folder‑nested projects even when folder enumeration is denied, improving user experience for customers with restricted IAM permissions.

Health Assessment

• • Merged within 5 minutes with no review comments, indicating a straightforward bug fix.

Summary

Deploy production release v3.62.2

Deploys the latest release to production, including cloud remediation fallback and trust portal branding fixes, ensuring users receive clear guidance and persistent branding.

Health Assessment

• • Rapid deployment with minimal review; automated AI review flagged no issues; large code changes but quick turnaround indicates efficient process.

Summary

Add graceful manual-step fallback for auto-remediation

Ensures customers never see cryptic errors by providing actionable guided steps when auto-remediation fails, improving reliability and user experience.

Health Assessment

• • Fast review and merge with minimal iterations indicate high confidence; large code churn is well-covered by tests and automated checks.

Summary

Fix brand color reset and remove background check label

Enables users to reset brand color to default and removes unnecessary compliance label, improving UI clarity and reducing data entry errors.

Health Assessment

• • Fast cycle time of 30 minutes with a single AI‑assisted review and minimal rework indicates a smooth integration.

Summary

Fix trust portal branding persistence

Ensures portal branding settings such as favicon and brand color are retained after changes, preventing accidental resets and improving admin experience.

Health Assessment

• • Quick review and merge with no issues indicates low complexity and minimal risk.

Summary

Deploy production release v3.62.1

Deploys a production release that fixes Google Workspace sync exclusions, ensuring excluded members are deactivated and improving sync reporting.

Health Assessment

• • Rapid merge with minimal changes and no review friction indicates a straightforward production deployment of a small bug fix.

Summary

Fix Google Workspace sync exclusions

Ensures excluded Google Workspace members are deactivated during sync, keeping the active user list accurate.

Health Assessment

• • Fast turnaround with minimal review, indicating a straightforward bug fix.

Summary

Deploy production release v3.62.0

Deploys hardened cloud remediation and assistant chat to production, improving security and reliability.

Health Assessment

• • Rapid deployment with automated AI review; minimal human review but extensive automated checks; large code changes but quick cycle.

Summary

Fix missing GroupId backfill for EC2 egress

Adds missing GroupId backfill for EC2 security‑group egress steps and regression tests, improving cloud security compliance.

Health Assessment

• • Quick fix with minimal changes, AI‑assisted review, no blockers.

Summary

Fix batch finding cancellations

Preserves per‑finding cancellation state in remediation batches, preventing cancelled findings from executing and ensuring accurate progress persistence.

Health Assessment

• • Rapid review and single commit indicate a straightforward bug fix with minimal friction.

Summary

Fix cloud test remediation flow

Corrects retry logic to prevent unintended executions, tightens security group validation, and preserves risk information, improving reliability and compliance.

Health Assessment

• • The PR was reviewed and merged within minutes, indicating a straightforward, low‑risk bug fix with minimal code churn.

Summary

Harden AWS validation paths for cloud tests

Improves reliability of AWS security scans by preventing false negatives and ensuring MFA checks continue even when console access probes fail.

Health Assessment

• • Fast review and merge with minimal iterations indicates low complexity and high confidence in changes.

Summary

Harden cloud remediation and chat functionality

This PR strengthens security remediation flows, improves error handling, and prevents accidental execution of unsafe AWS changes, enhancing reliability and compliance for users.

Health Assessment

• • Rapid AI‑driven review identified gaps that were fixed within minutes, resulting in a short cycle time despite a large code change.

Summary

Deploy Production Release v3.61.1

Releases updated role compliance toggles and related backend changes to production, enabling customers to manage compliance obligations for built‑in roles.

Health Assessment

• • Fast merge with minimal review indicates high confidence in changes; automated CI and AI assistance streamlined deployment.

Summary

Toggle Employee Compliance on Built‑in Roles

Allows organizations to enable or disable employee compliance obligations for built‑in roles via a new API and UI toggle, improving flexibility and reducing unnecessary compliance tasks.

Health Assessment

• • Fast cycle time and minimal review iterations indicate efficient implementation; AI review flagged issues but PR merged quickly.

Summary

Deploy production release with GCP project detection fixes

Ensures folder‑nested GCP projects appear in the connection picker, improves pagination, and prevents rate limiting, enhancing reliability for multi‑org customers.

Health Assessment

• • Rapid merge with no review friction; large code changes but straightforward bug fixes.

Summary

Show folder‑nested GCP projects in picker

Fixes missing nested GCP projects in the connection picker by adding pagination and folder‑aware queries, improving reliability for users with complex GCP hierarchies.

Health Assessment

• • Rapid AI‑assisted fix with minimal review, but large code changes increase risk; overall process efficient.

Summary

Deploy production release v3.60.0

Deploys the candidate branch to production, enabling a new sync flag to prevent accidental employee deactivation.

Health Assessment

• • Fast cycle time and minimal review indicate a straightforward release with no significant issues.

Summary

Fix employee sync deactivation logic

Ensures employees are not incorrectly deactivated when syncing from non-directory tools like Confluence, improving data integrity and reducing false offboarding.

Health Assessment

• • Rapid review and merge indicates low complexity and high confidence in changes.

Summary

Deploy Production Release v3.59.2

Releases new features and bug fixes to production, including offboarding checklist, cloud security remediation, and API key support.

Health Assessment

• • Large-scale release with extensive changes and multiple AI-generated review comments, indicating significant rework and potential integration risk.

Summary

Fix offboarding test spec missing mocks

Adds missing database and attachments service mocks to resolve P0 test failures, ensuring all 21 offboarding tests pass and stabilizing the offboarding flow.

Health Assessment

• • Fast turnaround with AI-assisted code generation; minimal changes and quick review; no blockers.

Summary

Fix offboarding checklist issues

Improves export reliability, evidence upload UX, and revocation handling, reducing errors and improving performance.

Health Assessment

• • Rapid review and merge indicate low complexity and high confidence.

Summary

Fix offboarding sync errors and batch queries

Hardens offboarding flows by guarding sync errors, removing dead code, and batching attachment queries to improve performance and reliability.

Health Assessment

• • Quick turnaround with minimal rework; AI-assisted code generation and review streamlined the process.

Summary

Fix offboarding and people filtering issues

Ensures reliable revocation, prevents evidence export collisions, and improves offboarding UI experience for users.

Health Assessment

• • Quick AI‑assisted fix with minimal changes and no major risk.

Summary

Fix people flow security after cubic review

Improves security and reliability of offboarding and people flows, preventing cross-tenant data leaks and ensuring audit trails.

Health Assessment

• • Rapid review and merge with no rework indicates high confidence and minimal risk.

Summary

Fix offboarding review findings

Improves offboarding stability and audit readiness by batching exports, enforcing evidence compliance, and correcting date handling, reducing memory spikes and preventing data loss.

Health Assessment

• • Rapid 0.5‑hour cycle with minimal rework; AI‑generated code and cubic analysis provided high confidence, leading to a smooth, low‑risk merge.

Summary

Fix MultipleSelector dropdown blur behavior

This PR fixes the MultipleSelector dropdown so it closes on blur and no longer blocks sibling form controls, improving user experience in GitHub setup forms.

Health Assessment

• • Rapid review and merge with minimal changes indicates low complexity and high confidence in the fix.

Summary

Fix AWS Auto-Remediate Null Params and Diff

Ensures AWS auto‑remediation succeeds by filling missing service names and providing meaningful state diffs, reducing failure rates and improving user experience.

Health Assessment

• • Rapid iteration with minimal review; large code changes but focused on bug fixes; extensive tests provide confidence in correctness.

Summary

Fix unresponsive multiselect dropdown in integration

This hotfix resolves the unresponsive ‘Fail on open alerts at severity’ dropdown by closing it on blur, preventing it from blocking form controls and improving the user experience in the GitHub integration setup.

Health Assessment

• • Rapid merge with minimal review indicates low complexity and high confidence in the fix.

Summary

Unblock form controls hidden by MultipleSelector dropdown

Fixes unresponsive severity dropdown in GitHub integration setup by ensuring MultipleSelector dropdown does not block sibling controls, improving user experience.

Health Assessment

• • Hotfix merged within minutes with minimal changes and no review friction.

Summary

Fix offboarding feature security and UX issues

Improves offboarding workflow by addressing security vulnerabilities and enhancing user experience, ensuring safe data export, robust validation, and reliable state management. These fixes reduce risk of data leakage and improve reliability for HR processes.

Health Assessment

• • Rapid review and single commit indicate straightforward fixes with minimal risk.

Summary

Unblock cloud-security mutations for API keys

This PR removes session‑only restrictions on cloud‑security mutation endpoints, enabling API key and service token callers to perform exception and AWS scan mode operations while attributing actions to the org’s oldest owner for audit purposes.

Health Assessment

• • Fast cycle time and single review round indicate smooth integration with minimal friction.

Summary

Fix OOM crashes in evidence export

Prevents out‑of‑memory crashes during large organization evidence exports by streaming data with cursor‑based pagination, reducing peak memory usage and ensuring stable ordering.

Health Assessment

• • The PR was merged within 30 minutes of opening, with minimal review comments and no back‑and‑forth. AI assistance accelerated the refactor and bug fix, resulting in a quick, low‑risk resolution.