Skip to content

updates to reporting for retests#141

Merged
summitt merged 5 commits into
mainfrom
adding-dev-staging-closed-vuln-info
Jul 16, 2026
Merged

updates to reporting for retests#141
summitt merged 5 commits into
mainfrom
adding-dev-staging-closed-vuln-info

Conversation

@summitt

@summitt summitt commented Jul 13, 2026

Copy link
Copy Markdown
Contributor

Summary

Adds a Closed in Staging state to the remediation workflow, sitting alongside the existing dev and prod closes. Also fixes a dead report button on the retest verification page and adjusts a font size.

Changes

Closed in Staging workflow

  • Adds a stagingClosed date to Vulnerability and threads it through the remediation workflow.
  • Close in Staging action, modal, and notes on the Remediation Schedule and Verification Edit pages; Reopen clears the staging date.
  • Status badges now show the close date for dev, staging, and prod.
  • New Closed (Staging) column on the Open Vulnerabilities table.
  • Staging Closed row on the vulnerability detail panel.
  • REST API setstatus accepts isClosedStaging / stagingClosedDate and now honors isClosedProd (was incorrectly gated on isClosedDev).
  • DOCX reports support a closedInStagingAt template token.
  • Manager dashboard vulnerability CSV export adds Closed Dev/Staging dates and per-environment closed booleans.

Bug fix

  • Fixes the dead Full Report button on the retest verification page — it had no click handler and silently did nothing. It now opens DownloadReport for the assessment's final report, or shows a notice when no report has been generated yet.

Misc

  • Font size adjustment on the retest Verification page.

Tests

  • Adds ManagerDashboardVulnerabilitiesCSVTest covering the new CSV export fields.

summitt added 5 commits July 13, 2026 01:44
Adds a stagingClosed date to Vulnerability and threads it through the
remediation workflow alongside the existing dev and prod closes:

- Close in Staging action, modal, and notes on the Remediation Schedule
  and Verification Edit pages; Reopen clears the staging date
- Status badges now show the close date for dev, staging, and prod
- Closed (Staging) column on the Open Vulnerabilities table
- Staging Closed row on the vulnerability detail panel
- REST API setstatus accepts isClosedStaging/stagingClosedDate and now
  honors isClosedProd (was gated on isClosedDev by mistake)
- DOCX reports support a closedInStagingAt template token
- Manager dashboard vulnerability CSV export adds Closed Dev/Staging
  dates and per-environment closed booleans
The button had no click handler, so it silently did nothing. It now
opens DownloadReport for the assessment's final report, or shows a
notice when no report has been generated yet.
@summitt
summitt merged commit b97e14a into main Jul 16, 2026
5 of 6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant