Pull Request Explorer

Summary

Add imported devices to compliance chart

The compliance chart now includes all devices, including imported ones, ensuring totals match the device table. This improves data accuracy and user confidence.

Health Assessment

• • Rapid review and merge with minimal iterations indicates low complexity and high confidence.

Summary

Add provider-reported compliance to device sync

This PR adds optional provider‑reported compliance fields to device sync, enabling accurate compliance status and last‑seen timestamps from external providers, improving visibility and reducing false positives.

Health Assessment

• • Fast cycle and minimal review iterations indicate efficient collaboration; the feature adds significant new fields but was well‑scoped and reviewed quickly.

Summary

Add always-visible device sync selector

Provides users with a clear, always-visible control to view and manage device sync status, reducing confusion and improving reliability.

Health Assessment

• • Fast cycle time and minimal review comments indicate a smooth, low-risk PR with AI-assisted code generation.

Summary

Deploy production release v3.99.2

Deploys the candidate branch to production, fixing hidden check results for providers with code manifests and dynamic integrations.

Health Assessment

• • Fast cycle time and minimal review rounds indicate a smooth, low-risk deployment. The automated AI review helped catch issues quickly.

Summary

Fix static classification of code-based checks

Ensures manual runs of code‑based integration checks correctly report success/failure instead of being hidden as inconclusive, improving visibility and reliability.

Health Assessment

• • Quick fix with minimal rework, AI‑assisted code generation, and a single review cycle.

Summary

Deploy Production Release v3.99.1

Deploys the candidate branch to production, fixing GitHub App install flow and OAuth ordering bug to prevent dead‑ends and improve user onboarding.

Health Assessment

• • Rapid 0.4‑hour cycle with a single review and minimal rework, indicating a well‑tested automated release process.

Summary

Fix install-handoff state ordering bug

Prevents hanging requests during GitHub App install redirect by ensuring the install-handoff state is created before deleting the original, improving reliability and user experience.

Health Assessment

• • Rapid resolution with automated review, minimal changes, no blockers.

Summary

Redirect GitHub App users to install screen

Ensures first‑time GitHub App users are guided to install the app on their organization, preventing dead‑end authorizations and improving onboarding.

Health Assessment

• • Fast cycle time and minimal review rounds indicate a straightforward, low‑risk bug fix with limited scope.

Summary

Deploy production release v3.99.0

Deploys the candidate branch to production, fixing GitHub App OAuth flow and adding safeguards to prevent failed reconnects.

Health Assessment

• • Rapid merge with automated review, minimal changes, and no blockers indicate a low‑risk deployment.

Summary

Fix GitHub App OAuth flow for reconnection

Ensures the GitHub App integration uses the OAuth authorize URL instead of the install URL, preventing dead‑ends and enabling proper installation checks, improving user onboarding and reliability.

Health Assessment

• • The PR was merged within 24 minutes with minimal review rounds and no major rework, indicating a straightforward bug fix. AI‑generated review comments helped identify edge cases early, contributing to a smooth, low‑friction process.

Summary

Deploy Production Release v3.98.1

Deploys the latest release to production, adding ISMS document versioning, GitHub App integration, and concurrency safeguards.

Health Assessment

• • Rapid cycle time but extensive review comments indicate complex changes; large code churn suggests high risk.

Summary

Fix integration: remove untrusted GitHub installation_id persistence

Eliminates storage of spoofable GitHub installation_id from OAuth callback, tightening security without affecting functionality.

Health Assessment

• • Rapid review and merge with minimal changes; no functional impact and low risk.

Summary

Lock control-link edits before writes

Ensures control link edits are serialized with approval by acquiring the document lock before writing, preventing race conditions and maintaining data consistency.

Health Assessment

• • Fast review and merge with minimal changes; no blockers or complex discussions.

Summary

Centralize per-document lock to serialize edits against approval

Fixes a race condition by ensuring all content edits acquire a per-document advisory lock before approval, guaranteeing accurate published snapshots.

Health Assessment

• • Fast turnaround with minimal rework; AI-assisted code generation streamlined the fix.

Summary

Prevent concurrent double-publish in ISMS approvals

Fixes a race condition that could create duplicate published versions, ensuring consistent approval workflow.

Health Assessment

• • Quick fix with minimal changes, resolved race condition promptly.

Summary

Fix ISMS production deploy review follow-ups

Corrects approval state logic, refreshes scope text, and updates UI/DTO copy to ensure accurate ISMS behavior in production deployments.

Health Assessment

• • Rapid review and merge with minimal changes indicates low complexity and high confidence.

Summary

Add read‑only GitHub App integration

Introduces a new GitHub App integration that provides granular, read‑only access to selected repositories while keeping the legacy OAuth integration unchanged, enhancing security and user control.

Health Assessment

• • The PR was reviewed and approved within 0.1 hours, and merged 3.5 hours after opening, indicating efficient collaboration and AI‑assisted review. Multiple commits after the initial review suggest iterative refinement but did not delay final approval.

Summary

Add ISMS document versioning and history

Enables audit‑compliant versioning for ISMS documents, preserving approved releases while allowing draft edits and providing a full version history for compliance and user transparency.

Health Assessment

• • The PR closed in under three hours but required four rounds of automated review comments and multiple commits to address export integrity and migration issues, indicating significant rework on a large codebase.

Summary

Deploy production release v3.98.0

Deploys the latest release to production, ensuring updated PDF rendering and task ranking fixes.

Health Assessment

• • Rapid merge with minimal review indicates high confidence in automated deployment.

Summary

Fix orphaned PDF headings in policy exports

Ensures policy PDF exports keep section headings together with their content, preventing orphaned headings and improving readability for users.

Health Assessment

• • Merged within 2.3 hours with only one review comment, indicating a smooth review process and high confidence in the fix.

Summary

Fix task ranking with exact cosine similarity

Restores task and control suggestions in treatment plans by replacing approximate ANN queries with exact in-process cosine scoring, eliminating zero-result issues.

Health Assessment

• • Quick, single-file change with minimal impact; no regressions reported; merged within minutes of commit.

Summary

Deploy trust portal updates to production

Deploys trust portal controls and reliability fixes: adds questionnaire visibility toggle, vendor badge mapper, stabilizes cloud‑security scans, improves task suggestions, and aligns access link expiry.

Health Assessment

• • Rapid deployment with minimal review; many commits suggest iterative changes but final merge was quick.

Summary

Restore SOC 3, PIPEDA, CCPA badge mappings

Fixes missing badge mappings for SOC 3, PIPEDA, and CCPA certifications, ensuring the public Trust Centre displays the correct badges.

Health Assessment

• • Quick fix with minimal changes, single review comment, merged within minutes.

Summary

Fix public vendor badge derivation

Aligns public Trust Centre badge display with admin view, correcting stale data and adding shared mapping for ISO/IEC 27001 and PCI DSS.

Health Assessment

• • Rapid 0.3‑hour cycle with minimal review comments; AI‑generated code resolved mismatch without rework.

Summary

Deploy Production Release

Deploys candidate branch to production, enabling new security questionnaire features and bug fixes.

Health Assessment

• • Rapid merge with minimal review indicates automated deployment; large code changes suggest significant feature rollout.

Summary

Fix risk treatment plan task filtering

Ensures live tasks are prioritized in risk treatment plans, preventing zero‑task errors and improving mitigation suggestions.

Health Assessment

• • The PR received a rapid review but had a prolonged cycle time, likely due to extensive testing and integration efforts.

Summary

Add per-org setting to toggle Security Questionnaire

Adds a per-organization toggle to control visibility of the Security Questionnaire on the public Trust Center, giving admins granular control while defaulting to visible for existing portals.

Health Assessment

• • Rapid review and merge with minimal iterations indicates high confidence and low risk.

Summary

Hide inactive users from assignee dropdown

This PR removes inactive and deactivated users from assignment options, improving user experience and reducing confusion.

Health Assessment

• • Quick review and merge within 5 days, minimal changes, low risk.

Summary

Fix trust portal access link expiry bug

Aligns access link expiry with grant end date, ensuring recipients can use link for full approved period.

Health Assessment

• • Fast review with minimal changes, automated PR, low risk to production

Summary

Exclude per-task runs from latest scan selection

Ensures automated cloud security scans always return full results by filtering out per-task evidence runs from the latest run calculation, aligning dashboard data with manual scans.

Health Assessment

• • The PR resolved a critical visibility issue in cloud security scans, but the 89‑hour cycle time indicates a slow resolution process. AI review helped confirm no regressions.

Summary

Deploy production release v3.96.1

Deploys the latest release to production, enabling new 2FA provider gating and employee access features.

Health Assessment

• • Fast cycle time and minimal review indicate smooth deployment; large code changes but no major friction.

Summary

Add Access tab to member details per integration

Adds an Access section to the member detail page showing per-integration access info, improving visibility of employee access across connected integrations.

Health Assessment

• • The PR underwent multiple automated review cycles and required several iterations to address AI-generated code issues, indicating a complex integration of new feature with backend and frontend components.

Summary

Emit per-user rows from Google Workspace employee-access check

Adds per-user result rows for the employee‑access check, enabling deterministic per‑member access view and aligning with person‑scoped features.

Health Assessment

• • Fast 1.6‑hour cycle, zero review delay, and minimal changes indicate low complexity and high confidence in the integration update.

Summary

Scope 2FA source selection to identity-provider integrations

Enhances the People tab 2FA source selector by filtering to identity‑provider integrations, ensuring accurate alignment with employee identities and automatic inclusion of future IdPs.

Health Assessment

• • Fast review and merge with no issues indicates a straightforward, low‑risk change.

Summary

Deploy Production Release v3.96.0

Deploys the latest candidate branch to production, ensuring the updated People tab with improved accessibility is live.

Health Assessment

• • Rapid automated deployment with minimal code changes; no review required.

Summary

Polish People tab: filters, 2FA, accessibility

Adds descriptive screen‑reader names to People tab sync settings, improving accessibility for users relying on assistive technology.

Health Assessment

• • Rapid AI‑assisted change with minimal code churn and no review friction; merged within minutes of opening.

Summary

Deploy production release v3.95.2

Automated production deployment of the latest release, ensuring new features and bug fixes are live for users.

Health Assessment

• • Large merge of multiple feature PRs into production with minimal review, indicating automated deployment pipeline and confidence in code quality.

Summary

Fix 2FA select dismissal in People popover

Ensures the 2FA status selector in the People section dismisses cleanly, matching the sync select behavior, improving user experience by preventing extra clicks.

Health Assessment

• • Quick fix with minimal changes, merged within minutes, indicating low complexity and high confidence.

Summary

Restore portaled dropdowns for in-popover selects

Fixes mis-positioned dropdowns in People views, preventing layout issues and improving user experience.

Health Assessment

• • Quick fix with minimal changes, merged within minutes, indicating low complexity and high confidence in stability.

Summary

Sync settings polish: logos, labels, copy

Enhances the people sync UI with clearer labels, logos, and fixes popover behavior, improving usability and reducing user confusion.

Health Assessment

• • Quick fix and polish with minimal changes, reviewed and merged within minutes, indicating a smooth process.

Summary

Sync settings popover and toolbar layout

Moves sync settings into a popover for clearer UI. Aligns toolbar with Linear/Stripe convention, improving usability and mobile accessibility.

Health Assessment

• • Rapid review and merge with minimal changes, indicating high confidence in the UI update. AI assistance accelerated development and reduced review time.

Summary

Add people list filters and requirement columns

Upgrades the People list with real table columns for requirements and moves filters behind a funnel button, improving user experience and discoverability.

Health Assessment

• • The PR has a large scope with many files changed, but the review process was relatively quick and smooth.

Summary

Uniform labels above toolbar controls

Standardizes toolbar labels for better usability and accessibility, reducing user confusion.

Health Assessment

• • Rapid review and merge indicate low complexity and high confidence in the changes.

Summary

Update People toolbar colors and labels

Aligns completion counts with brand green for visual consistency. Simplifies source selection labels into readable sentences, improving usability and accessibility.

Health Assessment

• • Rapid review and merge with minimal changes indicate low complexity and high confidence.

Summary

Add labels to toolbar selects and prevent chip wrapping

Improves accessibility and visual clarity of the People toolbar by adding descriptive labels to source selects, muting placeholder text, aligning toolbar items, and preventing date chip line breaks, enhancing user experience.

Health Assessment

• • Rapid review and merge with minimal changes indicates straightforward UX polish.

Summary

Add per-employee 2FA status from selected integration source

Introduces a per-employee 2FA status column in the People list, selectable via an integration source, and adds a reusable CheckResultsService for integration check data.

Health Assessment

• • The PR was merged within 3 hours of opening, with a single review and minimal back‑and‑forth, but it added nearly 2,000 lines of code across 20 files, indicating a large change with high potential impact.

Summary

Redesign People TASKS column to per‑requirement list

Improves admin visibility by replacing collapsed progress bar with clear per‑requirement status rows, enabling quick identification of missing requirements.

Health Assessment

• • Rapid review and merge with minimal iterations indicates high confidence and low risk.

Summary

Deploy Production Release v3.95.1

Deploys the latest release to production, including policy delete confirmation update and GitHub integration improvements.

Health Assessment

• • Fast cycle time and automated review indicate low friction; the PR introduced moderate changes and was merged quickly.

Summary

Fix GitHub Integration Branch Protection Checks

Parallelized branch-protection checks to prevent timeouts and ensure results are displayed in the UI.

Health Assessment

• • The PR was reviewed and merged quickly, with no significant issues found.

Summary

Clarify policy delete confirmation wording

Improves user safety by making it clear that deleting a policy removes all versions, reducing accidental deletions.

Health Assessment

• • Quick, single‑file change with minimal review time and no significant risk to production.