All pull requests

Pull requests

• Use Apache Caldera (Incubating) naming and add disclaimer to README

  #3422·deacon-mp opened Oct 12, 2026Contributor·

  ·
  2

• Make the payload encoder's -key argument usable

  #3421·arpitjain099 opened Sep 30, 2026·1 task done·

  ·

• Harden file uploads against path traversal.

  #3420·rjbartson opened Sep 25, 2026·4 of 5 tasks·

  ·

• build(deps): bump packaging to 26.3 to resolve wheel>=24.0 conflict

  #3419·cristianchiriac opened Sep 17, 2026·

  ·
  1

• docs: fix versioned clone command

  #3417·cristianchiriac opened Sep 12, 2026·5 of 6 tasks·

  ·
  1

  1

• Build Docker images on tag pushes

  #3416·0xd6cb6d73 opened Sep 1, 2026·4 of 5 tasks·

  ·

• feat(plugins): add GateProve safety boundary & hash-chained action ledger plugin

  #3410·AAH20 opened Aug 17, 2026·

  ·
  10

• fix(.asf.yaml): discussions notification target + real check names in branch protection

  #3404·deacon-mp opened Jul 24, 2026Contributor·

  ·
  10

• fix: require full string match in is_uuid4

  #3395·dasokkk opened Jun 28, 2026·3 tasks·

  ·

• Fix #3374: Fully populate adversary and planner objects in scheduled …

  #3382·clutester opened Jun 1, 2026Contributor·6 of 7 tasks·

  ·
  1

  2

• Fix 500 error on operation logs download due to JSON serialization

  #3366·Bhanunamikaze opened Apr 22, 2026·

  ·
  1

• Fix/stored xss

  #3362·RachHavoc opened Apr 10, 2026Contributor·4 of 5 tasks·

  ·
  8

• Replace remaining first-party jQuery usage with vanilla JS

  #3356·navnitan-7 opened Apr 3, 2026·

  ·
  2

• Potential Vulnerability in Cloned Code

  #3352·navnitan-7 opened Mar 30, 2026·

  ·
  3

• fix: add security regression tests for CVE fixes

  #3347·deacon-mp opened Mar 18, 2026Contributor·3 tasks·

  ·
  11

• Add file watchers for adversaries, sources, objectives and rebuild learning model

  #3345·deacon-mp opened Mar 16, 2026Contributor·6 tasks·

  ·
  4

• Add periodic file watcher for adversary YAML changes

  #3344·deacon-mp opened Mar 16, 2026Contributor·4 tasks·

  ·
  6

• feat: add YAML ability file upload endpoint

  #3342·deacon-mp opened Mar 16, 2026Contributor·6 tasks·

  ·
  14

• fix: make operation report resilient to deleted agents

  #3341·deacon-mp opened Mar 16, 2026Contributor·3 tasks·

  ·
  9

• fix(server): use shutil.which to resolve npm for Windows compatibility

  #3340·deacon-mp opened Mar 16, 2026Contributor·1 of 3 tasks·

  ·
  10

• test: improve pytest coverage and test infrastructure

  #3339·deacon-mp opened Mar 16, 2026Contributor·

  ·
  15

• feat: support dict-style steps with per-step metadata in adversary profiles

  #3338·deacon-mp opened Mar 16, 2026Contributor·4 tasks·

  ·
  26

• feat: add plugins REST API, automation planner, and adversary schema enhancements

  #3337·deacon-mp opened Mar 16, 2026Contributor·

  ·
  16

• fix: multi-stage Dockerfile with build/dev/prod targets and ARM64 support

  #3335·deacon-mp opened Mar 16, 2026Contributor·7 tasks·

  ·
  26

• fix(auth): sanitise username before LDAP DN and filter insertion

  #3334·deacon-mp opened Mar 16, 2026Contributor·3 tasks·

  ·
  14