Pull Request Explorer

Summary

Polish People UI for employment events

Improves UI consistency and filtering for employment events, enhancing user experience.

Health Assessment

• • Fast cycle time, minimal changes, automated review with no issues.

Summary

Make Controls the default view in Frameworks

Users can now see controls first when navigating to a framework, improving usability and reducing time to find relevant controls.

Health Assessment

• • Automated AI-assisted PR merged in minutes with a single review comment, indicating a streamlined process and low complexity.

Summary

Add employment events tracking and offboarding checklist

Introduces onboarding/offboarding date fields, a comprehensive offboarding checklist with evidence uploads, and UI enhancements for employee detail pages, streamlining HR workflows and audit compliance.

Health Assessment

• • The PR involved extensive AI-assisted code generation and a lengthy review cycle, indicating high complexity and potential integration risk.

Summary

Production Deploy

Deploys the latest release to production, removing a misleading UI badge to improve user experience.

Health Assessment

• • Fast, automated merge with AI-generated summary; minimal code change and review.

Summary

Remove misleading 'Fix button supported' badge

Clarifies that the Fix button is not a differentiator by removing misleading badge and description from the AWS scan‑engine picker.

Health Assessment

• • Rapid review and merge with minimal changes; no blockers or rework.

Summary

Deploy AWS Security Hub scan engine to production

Adds AWS Security Hub as an alternative scan engine, enabling customers to choose scanning mode and improving compliance parsing.

Health Assessment

• • Rapid iteration with multiple AI‑assisted reviews and many commits indicates high complexity; risk high but resolved quickly.

Summary

Fix compliance parsing and scan-mode deduplication

Improves Security Hub compliance label parsing and centralizes scan-mode values to prevent DTO drift, enhancing user-facing chip clarity and reducing future maintenance risk. Ensures accurate compliance chip rendering and safer mode additions.

Health Assessment

• • Rapid review and merge with minimal iterations indicates a straightforward bug fix with clear test coverage.

Summary

Fix AWS scan-mode switch permission mismatch

Aligns UI permission gating with backend API, allowing update‑only users to toggle scan mode without requiring delete rights. Prevents valid users from being blocked and ensures consistent permission handling.

Health Assessment

• • Quick merge with minimal changes indicates a straightforward bug fix with clear test coverage.

Summary

Add AWS Security Hub as alternative scan engine

Enables customers to choose AWS Security Hub for compliance scanning, improving flexibility and cost control while preserving existing scan workflows.

Health Assessment

• • Rapid merge after a single review, but the large scope and new feature introduce significant regression risk; careful testing is essential.

Summary

Deploy production release v3.57.0

Deploys the latest production-ready changes, adding admin edit/delete for findings, comments, and syncs Cloud Tests + History, ensuring a stable release for users.

Health Assessment

• • Rapid automated deployment with minimal review, indicating a streamlined release process.

Summary

Remove duplicate migration for CommentEntityType enum

Eliminates a duplicate Prisma migration that added the 'finding' enum value, preventing migration errors and keeping database history clean.

Health Assessment

• • Quick, single-file change with no rework; resolved migration conflict in under 15 minutes.

Summary

Enable comments on findings for teams

Teams can now discuss findings directly, improving collaboration and reducing resolution time. Audit logging and notifications ensure traceability.

Health Assessment

• • Automated PR with AI review, quick review but long cycle due to automated workflow. No significant rework or blockers.

Summary

Remove evidence submission target from Create Finding UI

Fixes bug CS-364 by removing unsupported evidence submission target from the Create Finding sheet, preventing invalid manual ID entry and ensuring correct payload handling.

Health Assessment

• • PR was auto-generated and merged quickly with no review friction, indicating a straightforward bug fix with minimal impact.

Summary

Fix: allow admin & owner to remove the device

Enables admins and owners to remove device agents by switching to permission-based checks, fixing disabled remove button for admins.

Health Assessment

• • Rapid review and merge within 1.1 hours indicates straightforward bug fix with minimal risk.

Summary

Fix API errors on evidence upload

Resolves false positives in file type validation that caused API errors when uploading task evidence, improving reliability for users.

Health Assessment

• • The PR had a long cycle time due to integration merges, but the initial review was quick. The use of cubic for automated review helped surface issues early. The PR involved a small code change but required multiple merges to sync with main, indicating a busy branch.

Summary

Add ability to edit/delete findings from admin dashboard

Enables admins to edit and delete findings directly from the dashboard, improving data management and reducing manual steps.

Health Assessment

• • The PR introduced substantial UI and API changes, required multiple review rounds, and had a long cycle time, indicating high complexity and potential risk.

Summary

Show comments on task overview page

Adds a comments block to the task overview, enabling users to read and write comments without leaving the page, improving collaboration and reducing context switching.

Health Assessment

• • Automated PR with minimal code changes and immediate review, indicating low complexity and risk.

Summary

Sync findings and history caches on exception

Ensures Cloud Tests UI updates immediately after marking or revoking exceptions, eliminating stale data and improving user experience.

Health Assessment

• • Quick, single-commit fix with no rework, minimal scope, fast review and merge.

Summary

Add marketing empty state for penetration tests

Provides a clear CTA and realistic previews for users without entitlements, improving user experience and conversion.

Health Assessment

• • Rapid merge with minimal review, indicating automated deployment and high confidence in code quality.

Summary

Add marketing empty state for penetration tests

Provides a marketing UI for empty penetration test workspaces, guiding users to add plans and view previews, and updates OpenAPI docs for cloud security endpoints.

Health Assessment

• • Rapid merge with minimal review, automated PR indicates high confidence and low risk.

Summary

Deploy cloud-tests auditor visibility improvements

Deploys cloud-tests auditor visibility improvements, adding evidence viewer, per-check descriptions, grouping, comments, and a History tab, while tightening exception handling and fixing background-check exemptions.

Health Assessment

Summary

Fix cubic findings from production deploy review

Resolved four critical bugs flagged by Cubic, improving batch remediation accuracy and ensuring consistent timestamp validation.

Health Assessment

• • Quick turnaround with minimal rework; all issues resolved in a single commit after immediate review.

Summary

Persist exemption reason and justification for members

Adds database fields and DTO updates to allow storing exemption reason and justification, fixing API validation errors that blocked customers.

Health Assessment

• • Quick AI‑assisted fix resolved a critical validation bug with minimal review friction and no downstream impact.

Summary

Improve auditor visibility across cloud tests

Enhances audit trail visibility, AI-generated check descriptions, and exception handling for cloud security checks, improving auditor efficiency and compliance.

Health Assessment

• • The PR involved extensive AI-generated code and multiple review rounds, indicating complex changes and high risk, but was merged after roughly 47 hours of activity.

Summary

Deploy Release v3.55.1 to Production

Deploys the latest bug fixes and UI improvements to production, ensuring improved invite email handling and treatment plan stability.

Health Assessment

• • Fast cycle time and minimal review iterations indicate a smooth release process.

Summary

Fix treatment plan disappearance on strategy switch

Ensures treatment plans persist when users switch strategies, improving reliability and user experience.

Health Assessment

• • Rapid review and merge with minimal rework indicate a straightforward bug fix with low complexity.

Summary

Fix combined email for mixed-role invites

Ensures users receive a single, appropriate invitation email when invited with both app and portal access, improving communication consistency.

Health Assessment

• • Rapid merge with minimal review indicates high confidence in automated PR; AI-generated description aids clarity.

Summary

Deploy Production Release v3.55.0

Deploys the latest release to production, ensuring updated IAM security checks and tests are in place.

Health Assessment

• • Fast cycle time and automated review indicate smooth deployment with minimal friction.

Summary

Fix IAM root access key false positives

Corrects IAM root key check to use credential report, eliminating false positives and aligning with AWS console.

Health Assessment

• • Fast review and single commit indicate a straightforward bug fix with minimal friction.

Summary

Deploy Production Release v3.54.3

Deploys the latest release to production, adding a dedicated sender for Trust Portal emails and refactoring email sending logic.

Health Assessment

• • The PR was merged within 0.8 hours with an automated AI review, indicating a smooth process.
• • The changes are moderate in scope and introduce a new email-sender feature without significant risk.

Summary

Centralize email from address resolution

Simplifies email configuration by moving from address resolution to Trigger.dev, removing duplicate env vars and streamlining channel-based routing.

Health Assessment

• • Rapid review and merge with minimal changes indicates low complexity and high confidence in automated review.

Summary

Refactor EmailController to use channel

Updates email sending logic to delegate from-address resolution to Trigger.dev, removing Render env dependencies and simplifying configuration.

Health Assessment

• • Quick refactor with minimal changes, merged immediately with no review, indicating low complexity and risk.

Summary

Refactor email sender resolution to Trigger.dev

Centralizes email sender configuration in Trigger.dev, eliminating redundant environment variables on Render and simplifying deployment.

Health Assessment

• • Fast review and merge with minimal changes, indicating low complexity and high confidence.

Summary

Add dedicated FROM env var for Trust Portal emails

Introduces a brand‑specific sender for Trust Portal emails, enhancing deliverability and brand consistency while maintaining a safe fallback.

Health Assessment

• • Merged within minutes with no review comments, indicating a straightforward, low‑risk change.

Summary

Deploy Production Release v3.54.2

Deploys the latest release to production, ensuring new framework link tables are populated and backfilled for accurate reporting.

Health Assessment

• • Rapid merge with minimal review indicates high confidence in automated deployment and code quality.

Summary

Populate framework link tables during onboarding

Ensures new organizations have correct policy, task, and document counts by creating framework‑scoped links and backfilling missing data.

Health Assessment

• • Fast review and merge with minimal rework; clear regression fix with a single commit and no major blockers.

Summary

Deploy Production Release v3.54

Deploys the latest release to production, ensuring updated portal access logic and RBAC fixes are live.

Health Assessment

• • Fast cycle time and automated review indicate a smooth release process with minimal friction.

Summary

Fix portal access regression

Corrects RBAC logic for portal access, ensuring users with portal:read or compliance obligations are granted access and displays a clear denial message instead of redirect loops.

Health Assessment

• • PR merged within 24 minutes with no human review, indicating an automated process; moderate scope of 189 lines across 5 files; minimal risk as a straightforward bugfix.

Summary

Production Deploy of AWS Auditor CloudShell Setup

Deploys updated AWS CloudShell setup script to production, improving reliability by replacing heredoc with inline JSON.

Health Assessment

• • Rapid merge with no review friction, automated deployment PR, minimal changes, low risk.

Summary

Remove fragile heredoc from AWS auditor script

Fixes copy/paste errors in AWS Auditor setup by replacing heredoc with inline JSON, ensuring reliable role creation and consistent behavior. Improves stability for customers using CloudShell.

Health Assessment

• • Quick fix with minimal changes, fast review, no rework, low risk.

Summary

Deploy Background Check UI to Production

Deploys redesigned background check UI to production, improving verification workflow and user experience.

Health Assessment

• • Rapid deployment with minimal human review, automated AI review flagged no issues, but large code changes suggest moderate risk of regressions.

Summary

Fix Background Check V1 tab layout

Aligns status strip and path picker with tab labels and page header by removing redundant padding.

Health Assessment

• • Quick fix with no review friction, merged immediately after a single comment.

Summary

Redesign Background Check tab to task-oriented flow

Streamlines the background check process by consolidating ordering, attaching, and exempting into a single, intuitive interface, reducing user friction and improving billing clarity.

Health Assessment

• • AI-assisted development and rapid review led to a large, high-impact refactor that was merged within 30 minutes, indicating strong confidence but also high risk due to scope.

Summary

Redesign background check UI to show real methodology

Improves customer trust by clearly communicating the comprehensive verification methods used in background checks.

Health Assessment

• • Rapid review with no issues, indicating high code quality and clear documentation.

Summary

Add authorization gate and improve pentest UI copy

Enhances pentest experience by adding authorization consent, clearer copy, and accessibility improvements, reducing legal risk and improving usability.

Health Assessment

• • Rapid merge with minimal review indicates high confidence and low risk.

Summary

Improve copy and add authorization gate for pentest scans

Enhances user experience and compliance by clarifying scan coverage, adding mandatory authorization, and improving accessibility in the penetration‑test UI.

Health Assessment

• • Merged within 20 minutes of opening, indicating a straightforward, low‑risk change with minimal review friction.

Summary

Deploy Production Release v3.51.0

Deploys the latest production release, enabling new framework‑scoped control linking and RBAC enhancements that improve security and data isolation.

Health Assessment

• • Fast cycle time and minimal review indicate a smooth integration. Automated AI review helped catch issues quickly, reducing manual effort.

Summary

Fix RBAC bugs for custom roles

Improves security by tightening role‑based access controls for app and portal usage, and member invite flow, preventing privilege escalation.

Health Assessment

• • Rapid iteration with multiple commits after review indicates active rework but quick resolution; AI assistance likely accelerated fixes.

Summary

Add framework control link isolation

Scopes control-to-policy/task/document links by framework and framework instance to prevent cross-framework bleed.

Health Assessment

• • Automated review surfaced issues initially, but a subsequent review found no issues. The PR has a large scope with many file changes.

Summary

Deploy production release v3.50.0

Deploys the latest production release, enabling new async questionnaire parsing and AI‑powered PDF extraction for improved accuracy and user experience.

Health Assessment

• • Rapid automated deployment with minimal review; large code changes but no manual review cycles, indicating a high‑confidence automated release process.