shankar0123 fd6f236a5c fix(security): TICKET-013 filter reserved IP ranges in network scanner ...

- Added isReservedIP() function to detect loopback, link-local, multicast, broadcast ranges
- Blocks 127.0.0.0/8 (loopback), 169.254.0.0/16 (link-local/cloud metadata), 224.0.0.0/4 (multicast), 255.255.255.255
- Preserves RFC1918 private ranges (10.x, 172.16.x, 192.168.x) for self-hosted scenarios
- Updated expandCIDR() to filter reserved IPs during CIDR expansion
- Updated expandEndpoints() to log warnings when reserved ranges are filtered
- Added 16 comprehensive tests covering loopback, link-local, multicast filtering
- Tests verify private ranges and public IPs are not blocked
- Tests verify single IP filtering and bulk CIDR expansion filtering

2026-03-27 21:36:10 -04:00

..

agent_group_test.go

test: comprehensive test expansion — 330+ to 525+ tests, close M11b coverage gaps

2026-03-21 23:43:32 -04:00

agent_group.go

fix(quality): TICKET-012 propagate request context instead of context.Background()

2026-03-27 21:35:22 -04:00

agent_test.go

feat: M10 — agent metadata collection, Apache httpd + HAProxy target connectors

2026-03-20 02:19:28 -04:00

agent.go

fix(quality): TICKET-012 propagate request context instead of context.Background()

2026-03-27 21:35:22 -04:00

audit_test.go

Implement M4: comprehensive test coverage with 120 tests

2026-03-15 00:25:01 -04:00

audit.go

Fix runtime bugs, implement service layer, and overhaul documentation

2026-03-14 21:38:11 -04:00

certificate_test.go

style: run gofmt -s across all Go files

2026-03-17 19:32:29 -04:00

certificate.go

feat: M20 Enhanced Query API — sort, time-range filters, cursor pagination, sparse fields, deployments endpoint

2026-03-23 18:56:02 -04:00

crypto_validation_test.go

feat: M11a — certificate profiles, crypto policy enforcement, short-lived cert expiry

2026-03-20 20:39:49 -04:00

crypto_validation.go

feat: M11a — certificate profiles, crypto policy enforcement, short-lived cert expiry

2026-03-20 20:39:49 -04:00

deployment.go

fix: replace fmt.Printf with structured slog logging across all services

2026-03-20 01:20:03 -04:00

discovery_test.go

feat: M18b Filesystem Certificate Discovery — agent scanning, server dedup, triage API

2026-03-24 00:25:00 -04:00

discovery.go

feat: M18b Filesystem Certificate Discovery — agent scanning, server dedup, triage API

2026-03-24 00:25:00 -04:00

est_test.go

feat: add EST server (RFC 7030) for device certificate enrollment (M23)

2026-03-25 15:31:06 -04:00

est.go

feat: add EST server (RFC 7030) for device certificate enrollment (M23)

2026-03-25 15:31:06 -04:00

issuer_adapter_test.go

fix: add GetCACertPEM to connector-layer mock for go vet

2026-03-25 15:48:49 -04:00

issuer_adapter.go

feat: add EST server (RFC 7030) for device certificate enrollment (M23)

2026-03-25 15:31:06 -04:00

issuer_test.go

test: comprehensive test expansion — 330+ to 525+ tests, close M11b coverage gaps

2026-03-21 23:43:32 -04:00

issuer.go

fix: replace fmt.Printf with structured slog logging across all services

2026-03-20 01:20:03 -04:00

job_test.go

feat: M11a — certificate profiles, crypto policy enforcement, short-lived cert expiry

2026-03-20 20:39:49 -04:00

job.go

feat: M11b — ownership tracking, agent groups, interactive renewal approval

2026-03-20 21:02:35 -04:00

network_scan_test.go

fix(security): TICKET-013 filter reserved IP ranges in network scanner

2026-03-27 21:36:10 -04:00

network_scan.go

fix(security): TICKET-013 filter reserved IP ranges in network scanner

2026-03-27 21:36:10 -04:00

notification_test.go

Implement M4: comprehensive test coverage with 120 tests

2026-03-15 00:25:01 -04:00

notification.go

feat: M15a — certificate revocation API, CRL endpoint, and revocation notifications

2026-03-22 10:59:18 -04:00

owner_test.go

test: comprehensive test expansion — 330+ to 525+ tests, close M11b coverage gaps

2026-03-21 23:43:32 -04:00

owner.go

fix: replace fmt.Printf with structured slog logging across all services

2026-03-20 01:20:03 -04:00

policy_test.go

style: run gofmt -s across all Go files

2026-03-17 19:32:29 -04:00

policy.go

fix: replace fmt.Printf with structured slog logging across all services

2026-03-20 01:20:03 -04:00

profile_test.go

feat: M11a — certificate profiles, crypto policy enforcement, short-lived cert expiry

2026-03-20 20:39:49 -04:00

profile.go

feat: M11a — certificate profiles, crypto policy enforcement, short-lived cert expiry

2026-03-20 20:39:49 -04:00

renewal_test.go

feat: M11a — certificate profiles, crypto policy enforcement, short-lived cert expiry

2026-03-20 20:39:49 -04:00

renewal.go

feat: add EST server (RFC 7030) for device certificate enrollment (M23)

2026-03-25 15:31:06 -04:00

revocation_test.go

fix: wire issuer registry in revocation tests, correct CRL/OCSP handler test URLs

2026-03-22 16:02:36 -04:00

stats_test.go

fix: resolve flaky TestGetJobStats_WithData timezone issue

2026-03-25 20:55:48 -04:00

stats.go

fix: normalize certificate status case in stats service

2026-03-24 12:17:24 -04:00

target.go

fix: replace fmt.Printf with structured slog logging across all services

2026-03-20 01:20:03 -04:00

team_test.go

feat: M15a — certificate revocation API, CRL endpoint, and revocation notifications

2026-03-22 10:59:18 -04:00

team.go

fix: replace fmt.Printf with structured slog logging across all services

2026-03-20 01:20:03 -04:00

testutil_test.go

feat: add EST server (RFC 7030) for device certificate enrollment (M23)

2026-03-25 15:31:06 -04:00

verification_test.go

fix: resolve M25 compile errors in verification tests

2026-03-27 21:21:24 -04:00

verification.go

fix: remove unused time import in verification service

2026-03-27 21:11:16 -04:00