Pull Request Explorer

Summary

Increase evidence export timeout to 60 minutes

This change raises the maximum compute time for evidence export tasks to 60 minutes, preventing timeouts for large organizations. It also adds a regression test to enforce the new ceiling.

Health Assessment

• • Fast cycle time with minimal review and rework; the change is small and straightforward, indicating low risk.

Summary

Raise evidence export task duration to prevent timeout

Prevents evidence export failures for large organizations, ensuring users can download evidence archives without timeouts.

Health Assessment

• • Quick fix with minimal changes, reviewed and approved within minutes, indicating low complexity and high confidence in the change.

Summary

Deploy framework editing and bug fixes

Deploys new framework editing capability and critical bug fixes, improving user experience and reliability.

Health Assessment

• • Rapid release with automated CI, minimal review time, but large code changes across backend and frontend, indicating significant scope and potential risk.

Summary

Fix Fivetran Basic Auth Field Names

Corrects credential field labels to match catalog, preventing authentication errors for Fivetran integrations.

Health Assessment

• • Rapid, single‑commit fix with AI‑assisted review; minimal rework and low risk to production.

Summary

Trim custom framework name/description in update DTO

Ensures that whitespace-only names are rejected and surrounding spaces are removed before validation, preventing blank-looking titles from being persisted via API calls and improving data integrity.

Health Assessment

• • Quick, low‑risk change that fixed a validation gap with minimal code churn.

Summary

Reject null fields and empty payload on framework update

This fix ensures that updates to custom frameworks reject null values and empty payloads, preventing database errors and unnecessary write operations. It improves API reliability and user experience.

Health Assessment

• • Fast turnaround with minimal rework; single review cycle and no blockers; small to medium code changes.

Summary

Fix timeout in manual sanitized inputs check

Prevents manual runs of sanitized inputs from timing out, ensuring accurate run timestamps and results for users.

Health Assessment

• • Quick fix with minimal rework; AI-assisted review confirmed no issues; low review friction and fast cycle time.

Summary

Add ability to edit custom framework name and description

Enables customers to rename and update descriptions of custom frameworks via a new API endpoint and UI, improving flexibility and reducing confusion.

Health Assessment

• • The PR was reviewed and merged within 0.4 hours, indicating a smooth process with minimal rework. The large code change was well-tested across backend and frontend, and the single review comment suggests low friction.

Summary

Deploy production release v3.94.1

Releases candidate branch to production, deploying bug fixes for Trust Centre ISO badge mapping and offboarded user flow.

Health Assessment

• • Rapid review and merge within 1.3 hours indicates efficient process; minimal rework suggests high confidence in changes.

Summary

Fix offboarded user onboarding loop

Prevents offboarded users from re-entering onboarding and creating duplicate orgs by detecting inactive memberships and routing them to an access-removed page.

Health Assessment

• • The PR was merged within 0.9 hours with only one review comment, indicating a smooth review process.
• • The large code changes address a critical user flow bug, but the quick turnaround and focused scope reduce overall risk.

Summary

Fix ISO cert badge matching precision

Improves certification badge matching to avoid false positives, ensuring accurate vendor compliance displays.

Health Assessment

• • Quick AI-assisted fix with minimal rework; review cycle under 0.5h and only one round of comments.

Summary

Fix Trust Centre badge mismatch for ISO 27001

Corrects mapping logic so Scaleway vendor card displays ISO 27001 badge alongside GDPR, ensuring accurate compliance representation.

Health Assessment

• • Merged within 2.5 hours with a single AI‑reviewed commit and no rework, indicating a straightforward, low‑risk bug fix.

Summary

Deploy Production Release v3.94.0

Deploys the latest release to production, ensuring the dynamic manifest cache is refreshed before self‑heal re‑runs to avoid stale checks and improve reliability.

Health Assessment

• • Fast cycle time and single review round indicate a straightforward, low‑risk deployment with minimal code changes. AI‑generated description helped streamline the review.

Summary

Refresh manifest cache before persisted re-run

Ensures self‑heal re‑runs use the latest dynamic check code, preventing checks from remaining stuck in pending.

Health Assessment

• • Merged within 30 minutes with no review comments, indicating a straightforward bug fix and minimal risk.

Summary

Deploy production release v3.93.1

Deploys the latest production release, enabling new device integration features, self‑heal improvements, and free pentest credits for new organizations.

Health Assessment

• • Rapid deployment with multiple post‑review commits indicates active iteration; large code churn suggests high complexity but quick review cycle.

Summary

Add 'Don't auto-sync' option to employee sync

Customers can now disable automatic employee sync without disconnecting the integration, preserving compliance checks.

Health Assessment

• • Fast cycle time of 12 minutes and minimal review rounds indicate a smooth process. The change adds a small UI feature that improves customer control over sync behavior.

Summary

Fix device-import display and RBAC

Improves security and consistency for device data display, enforcing proper role-based access and aligning CSV exports with UI.

Health Assessment

• • Rapid review and merge with minimal friction, addressing a critical RBAC gap and UI consistency in a short cycle.

Summary

Fix ISMS navigation, display, and status formatting

This PR resolves multiple UI and data handling issues in ISMS documents, ensuring correct navigation, proper display of approver/owner names, accurate party tags, and human‑readable status labels, improving user experience and data integrity.

Health Assessment

• • Quick turnaround with a single review and minimal rework, indicating a straightforward bug fix with low risk.

Summary

Auto-grant one free pentest credit to new organizations

Adds an automatic free pentest credit for new organizations, eliminating surprise charges and refund requests by allowing the first penetration test without a card.

Health Assessment

• • Fast cycle time and minimal review friction indicate a straightforward, low-risk feature addition.

Summary

Refactor: Remove failure classification, add reveal endpoint

Simplifies error handling by eliminating classification logic and introduces a reveal endpoint for accurate self‑heal decisions, reducing false positives and improving customer experience.

Health Assessment

• • The PR was reviewed and merged within 1.1 hours, indicating efficient collaboration and minimal friction, despite a large code change. AI assistance likely accelerated review and refactoring.

Summary

Remove device sync definitions from tools

Eliminate redundant device sync scripts, keeping only database definitions to streamline maintenance and reduce code duplication.

Health Assessment

• • Merged immediately with no review, indicating a straightforward removal of legacy code.

Summary

Add source-aware device display and Intune/JumpCloud sync

Enhances device visibility by distinguishing imported devices, adds Intune and JumpCloud sync, and eliminates false compliance flags for integration‑imported devices.

Health Assessment

• • Rapid review and merge with minimal iterations; large scope but well‑documented and tested.

Summary

Deploy production release v3.93.0

Deploys the latest release to production, fixing cloud auto‑fix, policy notifications, and auditor content.

Health Assessment

• • Rapid deployment with minimal review, automated AI review, and comprehensive fixes across multiple services.

Summary

Restore re-acknowledgment emails on policy update

Ensures users who signed previous policy versions receive notification to re-sign after updates, fixing compliance workflow.

Health Assessment

• • Quick review and merge within 4 hours, minimal rework, indicating a straightforward bug fix.

Summary

Tighten auditor context prompts and vendor list

Ensures SOC 2 reports contain only necessary, non‑sensitive information, eliminating manual cleanup. Guarantees all vendors are listed, improving compliance accuracy.

Health Assessment

• • Fast review and merge with a single comment round indicate low complexity and high confidence in the changes.

Summary

Fix offboarding notification when skip selected

Prevents offboarding notifications from firing when users opt out, improving user experience and reducing unnecessary actions.

Health Assessment

• • Rapid review and merge with minimal changes indicates straightforward bug fix.

Summary

Fix cloud auto-fix failures by removing temperature

Prevents 400 errors from Claude model calls, restoring plan generation for AWS, GCP, and Azure.

Health Assessment

• • Fast merge with no review, automated AI review confirmed no issues.

Summary

Deploy Production Release

Deploys production release with self‑heal, versioning, and AI observability features, improving reliability and monitoring.

Health Assessment

• • Large-scale production deployment with multiple feature additions and extensive testing; review cycle was quick but required several iterations, indicating moderate complexity and potential risk.

Summary

Add evidence task title to self‑heal queue

Enables the self‑heal agent to understand each check’s intent, improving accuracy of automated fixes.

Health Assessment

• • Fast merge with no review friction, indicating a straightforward change.

Summary

Disable unused email/password login

Disables email/password authentication endpoints, ensuring only magic link, OTP, and OAuth remain active, with no user impact.

Health Assessment

• • Quick AI‑assisted change with no review friction, minimal scope and risk.