Pull Request Explorer

Summary

Improve copy and add authorization gate for pentest scans

Enhances user experience and compliance by clarifying scan coverage, adding mandatory authorization, and improving accessibility in the penetration‑test UI.

Health Assessment

• • Merged within 20 minutes of opening, indicating a straightforward, low‑risk change with minimal review friction.

Summary

Deploy Production Release v3.51.0

Deploys the latest production release, enabling new framework‑scoped control linking and RBAC enhancements that improve security and data isolation.

Health Assessment

• • Fast cycle time and minimal review indicate a smooth integration. Automated AI review helped catch issues quickly, reducing manual effort.

Summary

Fix RBAC bugs for custom roles

Improves security by tightening role‑based access controls for app and portal usage, and member invite flow, preventing privilege escalation.

Health Assessment

• • Rapid iteration with multiple commits after review indicates active rework but quick resolution; AI assistance likely accelerated fixes.

Summary

Add framework control link isolation

Scopes control-to-policy/task/document links by framework and framework instance to prevent cross-framework bleed.

Health Assessment

• • Automated review surfaced issues initially, but a subsequent review found no issues. The PR has a large scope with many file changes.

Summary

Deploy production release v3.50.0

Deploys the latest production release, enabling new async questionnaire parsing and AI‑powered PDF extraction for improved accuracy and user experience.

Health Assessment

• • Rapid automated deployment with minimal review; large code changes but no manual review cycles, indicating a high‑confidence automated release process.

Summary

Improve questionnaire parsing accuracy and resilience

Enhances questionnaire parsing with structured extraction, async processing, and robust error handling, improving reliability and user experience.

Health Assessment

• • Fast review and merge with minimal rework, indicating high confidence in the changes and low risk to production.

Summary

Deploy production release v3.49.3

Deploys production release v3.49.3, adding admin framework management for organizations, enabling admins to add or remove organization-specific frameworks without affecting global definitions.

Health Assessment

• • Rapid deployment with minimal review and automated testing indicates high confidence in the new admin framework management feature.

Summary

Add admin framework management for organizations

Admins can now list, add, and remove frameworks for each organization. This gives granular control over platform capabilities and reduces reliance on global definitions.

Health Assessment

• • Rapid approval with no issues indicates high confidence in code quality and clear scope.

Summary

Deploy production release v3.49.2

Deploys the candidate branch to production, extending remediation preview timeout to 10 minutes to prevent premature timeouts on larger workloads.

Health Assessment

• • Fast 30‑minute cycle, single AI‑reviewed comment, minimal code changes, automated deployment.

Summary

Extend remediation preview timeout

Adds buffer to prevent timeouts during slow AI/AWS remediation preview generation, maintaining task behavior.

Health Assessment

• • Rapid review and merge with minimal changes indicates low complexity and high confidence.

Summary

Deploy production release v3.49.1

Deploys the latest release to production, including critical bug fixes for file upload and security token handling, ensuring stability and compliance.

Health Assessment

• • Fast merge with minimal changes, automated deployment, AI-assisted bug fixes, low review friction.

Summary

Fix GovCloud session token handling

Prevents placeholder session tokens from invalidating IAM user keys, improving security and configuration clarity.

Health Assessment

• • Rapid review and merge with minimal changes indicates low complexity and high confidence.

Summary

Health Assessment

Summary

Production Deploy with UI Fixes and Integration Updates

This PR fixes UI issues, sanitizes questionnaire file names, and refreshes the integrations catalog with new additions and updates.

Health Assessment

• • Automated review by cubic found no issues, but the PR has a large scope with many file changes and additions.

Summary

Sanitize S3 metadata and update OpenAPI spec

Fixes invalid HTTP headers for questionnaire uploads and ensures API spec includes required formType parameter, improving reliability and compliance.

Health Assessment

• • Fast merge with no review friction; automated PR with AI review; minimal scope.

Summary

Update integrations catalog to 583 entries

Adds 9 new integrations and updates metadata for 14 existing, expanding catalog to 583 entries.

Health Assessment

• • Fast merge with minimal review, indicating a straightforward catalog update.

Summary

Refresh integrations catalog with new vendors

Updates the public integrations catalog with 9 new vendors and 7 updates, ensuring accurate metadata and security compliance for users.

Health Assessment

• • Fast merge with no review delays, indicating a straightforward catalog refresh.

Summary

Fix dropdown selection issue in GWS integration

Users can now select filters and exclusions in the GWS integration settings, improving usability.

Health Assessment

• • Rapid resolution with minimal changes and automated review, indicating a straightforward bug fix.

Summary

Put 'Remove Device' menu in a single line

This hotfix ensures the 'Remove Device' action remains on a single line in the device list, preventing UI layout issues and improving user experience.

Health Assessment

• • Rapid review and merge with minimal changes indicates low complexity and high confidence.

Summary

Health Assessment

Summary

Enhance API docs SEO and Mintlify metadata

Improves public API documentation quality, SEO, and Mintlify integration, enabling better discoverability and user experience.

Health Assessment

• • Rapid iteration with minimal review, high line changes but quick merge indicates high confidence in quality.

Summary

Remove hero images from introduction page

This PR removes hero images from the introduction page, simplifying the layout and improving page load performance.

Health Assessment

• • PR was merged immediately after creation with no review or rework, indicating a straightforward change with minimal risk.

Summary

Add AWS GovCloud support with partition-aware credentials

Enables scanning and remediation in GovCloud with correct CloudShell URLs/scripts and a simpler AWS settings setup.

Health Assessment

• • Rapid approval with minimal review indicates high confidence in changes.

Summary

Deploy latest release to production

Deploys the latest release, adding optional employee portal invite emails, a new resend portal invite action, and fixes for policy generation and contractor visibility, enhancing user experience and compliance.

Health Assessment

• • The PR had a rapid 7.4‑hour cycle but required multiple iterations after the initial AI review, indicating significant changes were made before final approval.

Summary

Bug fix: regenerate policies when adding framework

Ensures newly created policies are regenerated to replace placeholders, preventing stale policy data and improving consistency for new frameworks.

Health Assessment

• • Fast cycle time and minimal review indicates straightforward bug fix with low complexity.

Summary

Default portal email checkbox to checked

Ensures invite emails reflect user preference and restricts portal invites to compliant roles, improving user experience and compliance.

Health Assessment

• • Quick fix with minimal changes, AI-assisted code generation, fast review cycle.

Summary

Fix contractor visibility after re-invite

Ensures contractors are correctly reactivated and visible in the organization People page, improving user experience and reducing support tickets.

Health Assessment

• • Quick fix with minimal changes, automated review found no issues, merged within 45 minutes.

Summary

Add employee portal email trigger option

Enables sending employee portal emails during onboarding and provides a way to resend them, improving onboarding control and compliance.

Health Assessment

• • Fast cycle time and single review round indicate smooth integration; AI review helped identify and resolve a single issue early.

Summary

Deploy production release v3.46.1

Deploys new frameworks, device removal, email digest update, and task justification, enabling enhanced compliance and user control.

Health Assessment

• • Rapid AI‑assisted release with minimal review, but large code changes increase risk.

Summary

Add justification for not-relevant evidence tasks

Allows auditors to provide reasons when marking evidence tasks as not relevant, improving audit transparency and compliance.

Health Assessment

• • Rapid review and merge with minimal iterations indicates high confidence and low risk.

Summary

Change policy acknowledgment digest from daily to weekly

Reduces email frequency for policy signature reminders from daily to weekly, decreasing notification fatigue and improving user experience.

Health Assessment

• • Fast cycle time (0.4h) and immediate review indicate low friction; moderate scope with 237 lines across 6 files suggests manageable impact.

Summary

Update screenlock seed to 15 minutes

Aligns seed data with device agent enforcement, ensuring consistent screen lock timing across macOS, Linux, and Windows.

Health Assessment

• • Quick review and merge with minimal changes, no blockers.

Summary

Remove Single Device Endpoint and UI

Adds the ability for organization owners to delete a single device agent, improving cleanup and security for stale devices.

Health Assessment

• • The PR closed in under five hours with automated reviews and minimal comments, indicating low friction, but the multiple commits after the first review suggest iterative refinement of the feature.

Summary

Add PIPEDA and CCPA frameworks to Trust Center

Adds PIPEDA and CCPA compliance frameworks, enabling users to toggle, upload certificates, and display badges, enhancing regulatory compliance visibility.

Health Assessment

• • Fast merge with no review friction; automated PR and AI review; quick turnaround.

Summary

Deploy production release v3.46.0

Deploys the latest release to production, improving questionnaire parsing and compliance statement extraction.

Health Assessment

• • Fast merge with minimal review, automated deployment, small number of files but moderate line changes.

Summary

Extract compliance statements as questionnaire items

Adds support for extracting compliance checklist items from PDFs, improving questionnaire coverage and reducing false negatives.

Health Assessment

• • Fast review and merge with minimal rework; regression tests added to guard against future regressions.

Summary

Deploy production release v3.45.1

Releases the v3.45.1 candidate branch to production, adding custom requirement support, a bulk update endpoint, and an overview banner for framework updates.

Health Assessment

• • Rapid merge with minimal review, indicating automated deployment and low complexity.

Summary

Add strict mode schema for OpenAI parser

Fixes questionnaire auto‑fill by ensuring JSON schemas comply with OpenAI strict mode, preventing silent parse failures. Restores question extraction functionality for gpt‑5‑mini.

Health Assessment

• • Quick fix with minimal changes, merged within minutes, indicating low complexity and high confidence in the patch.

Summary

Add framework updates banner to overview page

Provides users with real‑time visibility of framework updates, enabling quick review and rollback actions.

Health Assessment

• • Fast merge with minimal review indicates high confidence and low risk.

Summary

Fix custom requirement addition in framework tab

Enables users to add custom requirements to framework instances, improving flexibility and reducing errors.

Health Assessment

• • PR had a long cycle time due to frequent merges with main, but AI review was quick and found no issues. The multiple merge commits suggest integration work rather than core feature development.

Summary

Deploy production release v3.45.0

Deploys the latest production release, fixing onboarding tracker accuracy and improving reliability.

Health Assessment

• • Rapid merge with minimal changes and no review friction indicates a smooth release process.

Summary

Fix onboarding tracker accuracy and UX

Improves onboarding experience by ensuring accurate progress tracking and preventing misleading completion states, while adding a timeout to mitigate potential hangs.

Health Assessment

• • Rapid AI‑assisted PR with minimal changes, merged within minutes, indicating low complexity and risk.

Summary

Fix onboarding tracker format and reranker timeout

This PR ensures onboarding steps display counts in a created/total format and adds a 30‑second timeout to reranker LLM calls to prevent indefinite blocking, improving reliability.

Health Assessment

• • Merged immediately after creation with no review, indicating an automated PR and low complexity.

Summary

Fix onboarding steps flashing complete

Prevents misleading completion status during onboarding, improving user experience and reducing confusion.

Health Assessment

• • PR merged quickly with no review friction, indicating a straightforward bug fix.

Summary

Deploy production release v3.44.2

Deploys production release, optimizes onboarding, enables framework versioning, and improves performance for all organizations.

Health Assessment

• • Rapid merge after minimal review, but extensive AI review comments indicate potential risk; large code churn and performance optimizations suggest significant impact.

Summary

Fix onboarding tracker for zero-item steps

Fixes onboarding tracker to treat zero-item steps as complete, preventing stuck states for organizations without vendors, risks, or policies.

Health Assessment

• • PR merged quickly with no review friction, indicating a straightforward bug fix.

Summary

Fix onboarding issues from Cubic review

Addresses four Cubic review findings by ensuring policy metadata is set, logging mitigation failures, stripping template markers, and preventing stale job ID locks, improving onboarding reliability.

Health Assessment

• • Fast cycle time and minimal review comments indicate efficient resolution of Cubic review issues.

Summary

Reduce Sentry source map upload scope

Narrow Sentry source map uploads to server-only, cutting build time by ~30‑40s while preserving full server stack traces.

Health Assessment

• • Fast 6‑minute cycle, single review, minimal changes, no issues found.

Summary

Remove framework versioning feature flag

Roll out framework versioning to all organizations by removing the feature flag gate, enabling the History tab and update banner for all users.

Health Assessment

• • Fast review and single commit indicate a straightforward change with minimal risk.

Summary

Revert page hooks to useRealtimeRun to fix auth error

The change replaces useRun with useRealtimeRun to avoid missing accessToken errors when no onboarding is active. This ensures the overview and policies pages load safely, improving reliability for users.

Health Assessment

• • Quick fix with minimal changes, no rework, low risk.