compliance

10 Commits

Author	SHA1	Message	Date
mrcharles	3dc90f1790	[#452 ] STATUS: 2026-09-05 lane state ci / audit (push) Successful in 51s Details https://projects.knownelement.com/issues/452	2026-09-05 18:01:51 -05:00
mrcharles	f1a423c2b8	[#389 ] first discovery scan COMPLETE: 21 findings on sectestbed 5104 — GMP scan pipeline committed ci / audit (push) Successful in 24s Details GLPI target → Discovery config → OpenVAS scanner → report c3294575-3db4-4ad1-8e50-3ca6d23fb137 (18 info, 1 low ICMP-timestamp, 2 unscored). VM shut back down. Pipeline scripts in openvas/scan-pipeline/. https://projects.knownelement.com/issues/389	2026-09-05 16:04:50 -05:00
mrcharles	195eb29164	[#389 ] GVM UI moved to 127.0.0.1:19443 — k3s ingress hostPorts claim 80/443 on this node ci / audit (push) Successful in 46s Details Workstation is a k8s worker: kube-proxy hostPort rules DNAT 80/443 (any node IP + 127.0.0.1) into the ingress pod, shadowing loopback binds. Also: gvm-script target importer (63/63 imported) committed. https://projects.knownelement.com/issues/389	2026-09-05 11:29:24 -05:00
mrcharles	ffc82467a9	[#389 ] GVM target import: gvm-script (gmp.send_command, lxml parse) + IANA port-list injection; feed jq rewrite (record-bound, no IFS collapse) ci / audit (push) Successful in 24s Details 63/63 GLPI targets imported into gvmd (0 failures). Admin creds in ~/.creds/gvm-test.env. Import is idempotent (deletes glpi-* first). https://projects.knownelement.com/issues/389	2026-09-05 11:21:36 -05:00
mrcharles	2d75a3865f	[#389 ] house naming: container_name for all 21 GVM services (ukrrs-oam-gvm-*) ci / audit (push) Successful in 23s Details https://projects.knownelement.com/issues/389	2026-09-05 07:27:05 -05:00
mrcharles	70142d8f60	[#389 ] official Greenbone compose, loopback; gvm-config+nginx digest-pinned ci / audit (push) Successful in 1m1s Details Docker Hub greenbone/* discontinued — official stack from registry.community.greenbone.net via the maintained compose.yaml (already loopback-bound). :latest tags digest-pinned per house rule. https://projects.knownelement.com/issues/389	2026-09-05 07:08:25 -05:00
mrcharles	8eab675c74	[#389 ] GLPI→OpenVAS feed pilot: script (fixture-tested, 63 targets) + GVM app-test compose + pipeline docs ci / audit (push) Successful in 20s Details Feed reads GLPI computers read-only (mglpi identity), parses ts=/mgmt IP comment convention, emits CSV or GMP create_target fragments. Dual shellcheck green. GVM stack = Greenbone community containers, loopback. https://projects.knownelement.com/issues/389	2026-09-05 06:56:00 -05:00
mrcharles	7822abf2eb	[#784 ] add fleet CI workflow (shellcheck + secret scan + rule audit) ci / audit (push) Successful in 39s Details https://projects.knownelement.com/issues/784	2026-09-05 06:08:57 -05:00
mrcharles	958d287a99	[#452 ] wire Discourse topic t/338 into README https://projects.knownelement.com/issues/452#note-4538	2026-09-05 05:27:01 -05:00
mrcharles	c8b09b08f9	[#452 ] seed compliance & security repo (CMMC/STIG/OpenVAS/pentest) PRIVATE repo: vulnerability + posture data. scap/openvas/cmmc/bor/pentest structure mapped to existing ticket set. https://projects.knownelement.com/issues/452#note-4538	2026-09-05 05:17:33 -05:00