v0.3.0-rc1

This release changes the way we handle the frontend.
The following steps can be used for migration:

• remove .env* from frontend (not needed anymore)
• remove frontend/dist (not needed anymore)

cd server
python3 manage.py collectstatic --no-input
cd ../frontend
npm run build

• fix nginx static files /opt/pecoret/server/static files e.g.

    location /static/ {
        alias /opt/pecoret/server/static/;
    }

    location / {
        proxy_pass http://127.0.0.1:8000;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto 'https';
        proxy_set_header Host $host;
    }

• delete legacy groups (not in use anymore)
  • Advisory Management
  • Vendor

What's Changed

• introduces a search similar to shodan/fofa and basic scanning feature by @blockisec in #276
• Prevent deletion of scan objects that have running scans by @blockisec in #286
• delete scan from UI (closes #288) by @blockisec in #289
• functionality for can_run_manually scan types by @blockisec in #287
• add findings model by @blockisec in #290
• add django ql search for URLs by @blockisec in #292
• add finding images for the attack surface application. by @blockisec in #294
• advisory ui fixes for tailwind and primevue4. by @blockisec in #295
• Update all non-major dependencies by @pecoret-bot in #297
• Update dependency Pillow to v11 by @pecoret-bot in #298
• Refactor frontend services by @blockisec in #302
• server side pages by @blockisec in #304
• Feat/sso by @blockisec in #306
• Create dependabot.yml by @blockisec in #310

New Contributors

• @dependabot made their first contribution in #313

Full Changelog: v0.2.0...v0.3.0-rc1

v0.2.0

What's Changed

• Breaking: Simplify report generator and customization by @blockisec in #125
• Update dependency axios to v1.6.5 by @pecoret-bot in #132
• Update dependency @vitejs/plugin-vue to v5.0.3 by @pecoret-bot in #131
• add new advisory status fields by @blockisec in #133
• tests for management commands by @blockisec in #123
• Update dependency jinja2 to v3.1.3 by @pecoret-bot in #136
• Update dependency django to v5.0.1 by @pecoret-bot in #135
• add ui to edit company information and contacts by @blockisec in #137
• fix advisory cannot be created from finding by @blockisec in #142
• new readme structure by @blockisec in #143
• add customer permissions and accounts by @blockisec in #145
• fix empty report template select field empty by @blockisec in #151
• add endpoint to delete a company by @blockisec in #152
• Update dependency cvss to v3 by @pecoret-bot in #153
• Update dependency axios to v1.6.7 by @pecoret-bot in #146
• Update dependency drf-spectacular to v0.27.1 by @pecoret-bot in #147
• Update all non-major dependencies by @pecoret-bot in #154
• Update dependency eslint-plugin-vue to v9.21.0 by @pecoret-bot in #155
• Update dependency eslint-plugin-vue to v9.21.1 by @pecoret-bot in #158
• fix broken mail template for new critical finding notification. by @blockisec in #157
• more consistent comment component by @blockisec in #160
• Update dependency prettier to v3.2.5 by @pecoret-bot in #159
• Update dependency primevue to v3.48.0 by @pecoret-bot in #161
• Update dependency django to v5.0.2 by @pecoret-bot in #162
• Update dependency primevue to v3.48.1 by @pecoret-bot in #163
• Update all non-major dependencies by @pecoret-bot in #164
• Update dependency vite to v5.1.0 by @pecoret-bot in #165
• Update all non-major dependencies by @pecoret-bot in #166
• Update dependency vite to v5.1.1 by @pecoret-bot in #167
• Update dependency @vitejs/plugin-vue to v5.0.4 by @pecoret-bot in #168
• Update dependency vue to v3.4.19 by @pecoret-bot in #171
• Update dependency vite to v5.1.2 by @pecoret-bot in #173
• Update dependency matplotlib to v3.8.3 by @pecoret-bot in #174
• Update dependency vite to v5.1.3 by @pecoret-bot in #175
• allow users to see advisory labels by @blockisec in #172
• Update dependency sass to v1.71.0 by @pecoret-bot in #176
• Update dependency weasyprint to v61 by @pecoret-bot in #170
• fix finding date cannot be changed in ui by @blockisec in #178
• make checklist categories an accordion component by @blockisec in #177
• Update all non-major dependencies by @pecoret-bot in #179
• Update all non-major dependencies by @pecoret-bot in #180
• Update all non-major dependencies by @pecoret-bot in #181
• Update all non-major dependencies by @pecoret-bot in #189
• Update dependency weasyprint to v61.2 by @pecoret-bot in #190
• Update dependency django-filter to v24 by @pecoret-bot in #191
• add basic functionality for attack surface dashboard by @blockisec in #194
• table row click and refactoring by @blockisec in #200
• Update all non-major dependencies by @pecoret-bot in #192
• Update all non-major dependencies by @pecoret-bot in #202
• have multiple researchers in advisory PDF by @blockisec in #204
• add technologies to advisories by @blockisec in #205
• add source code available field to technologies by @blockisec in #211
• Update dependency primeicons to v7 by @pecoret-bot in #207
• Update all non-major dependencies by @pecoret-bot in #203
• Update all non-major dependencies by @pecoret-bot in #212
• move advisory model to separate app by @blockisec in #213
• tag findings in addition to targets by @blockisec in #217
• Update finding UI by @blockisec in #221
• add global target list by @blockisec in #222
• Update all non-major dependencies by @pecoret-bot in #214
• add missing api scope and test cases by @blockisec in #224
• Project visibility by @blockisec in #226
• link technologies to assets by @blockisec in #230
• Update python workflow version by @blockisec in #232
• add target-meta-model to store key, value pairs related to a target by @blockisec in #235
• Update dependency weasyprint to v62 by @pecoret-bot in #236
• make admin set password on user creation by @blockisec in #246
• Update all non-major dependencies by @pecoret-bot in #233
• attack surface dashboard improvements by @blockisec in #243
• Update all non-major dependencies by @pecoret-bot in #248
• breaking change: simplify report templating. by @blockisec in #255
• overwrite jinja sections in report template presets by @blockisec in #256
• Update dependency eslint to v9 by @pecoret-bot in #254
• Update all non-major dependencies by @pecoret-bot in #250
• fix report search UI by @blockisec in #257
• fix syntax error by @blockisec in #258
• Update all non-major dependencies by @pecoret-bot in #259
• major improvements for api docs by @blockisec in #260
• make advisories accessible to all pentesters by @blockisec in #262
• filter advisories by vulnerability status field by @blockisec in #263
• share links for advisories by @blockisec in #264
• Update all non-major dependencies by @pecoret-bot in #261
• Update all non-major dependencies by @pecoret-bot in #265
• initial version using tailwind and primevue v4 by @blockisec in #266
• Update all non-major dependencies by @pecoret-bot in #267
• Update dependency vue to v3.5.8 by @pecoret-bot in #271
• Update dependency chart.js to v4 by @pecoret-bot in #269
• Update dependency eslint to v9 by @pecoret-bot in #270

Full Changelog: v0.1.5...v0.2.0

v0.2.0-rc1

What's Changed

• Update dependency eslint-plugin-vue to v9.21.1 by @pecoret-bot in #158
• fix broken mail template for new critical finding notification. by @blockisec in #157
• more consistent comment component by @blockisec in #160
• Update dependency prettier to v3.2.5 by @pecoret-bot in #159
• Update dependency primevue to v3.48.0 by @pecoret-bot in #161
• Update dependency django to v5.0.2 by @pecoret-bot in #162
• Update dependency primevue to v3.48.1 by @pecoret-bot in #163
• Update all non-major dependencies by @pecoret-bot in #164
• Update dependency vite to v5.1.0 by @pecoret-bot in #165
• Update all non-major dependencies by @pecoret-bot in #166
• Update dependency vite to v5.1.1 by @pecoret-bot in #167
• Update dependency @vitejs/plugin-vue to v5.0.4 by @pecoret-bot in #168
• Update dependency vue to v3.4.19 by @pecoret-bot in #171
• Update dependency vite to v5.1.2 by @pecoret-bot in #173
• Update dependency matplotlib to v3.8.3 by @pecoret-bot in #174
• Update dependency vite to v5.1.3 by @pecoret-bot in #175
• allow users to see advisory labels by @blockisec in #172
• Update dependency sass to v1.71.0 by @pecoret-bot in #176
• Update dependency weasyprint to v61 by @pecoret-bot in #170
• fix finding date cannot be changed in ui by @blockisec in #178
• make checklist categories an accordion component by @blockisec in #177
• Update all non-major dependencies by @pecoret-bot in #179
• Update all non-major dependencies by @pecoret-bot in #180
• Update all non-major dependencies by @pecoret-bot in #181
• Update all non-major dependencies by @pecoret-bot in #189
• Update dependency weasyprint to v61.2 by @pecoret-bot in #190
• Update dependency django-filter to v24 by @pecoret-bot in #191
• add basic functionality for attack surface dashboard by @blockisec in #194
• table row click and refactoring by @blockisec in #200
• Update all non-major dependencies by @pecoret-bot in #192
• Update all non-major dependencies by @pecoret-bot in #202
• have multiple researchers in advisory PDF by @blockisec in #204
• add technologies to advisories by @blockisec in #205
• add source code available field to technologies by @blockisec in #211
• Update dependency primeicons to v7 by @pecoret-bot in #207
• Update all non-major dependencies by @pecoret-bot in #203
• Update all non-major dependencies by @pecoret-bot in #212
• move advisory model to separate app by @blockisec in #213
• tag findings in addition to targets by @blockisec in #217
• Update finding UI by @blockisec in #221
• add global target list by @blockisec in #222
• Update all non-major dependencies by @pecoret-bot in #214
• add missing api scope and test cases by @blockisec in #224
• Project visibility by @blockisec in #226
• link technologies to assets by @blockisec in #230
• Update python workflow version by @blockisec in #232
• add target-meta-model to store key, value pairs related to a target by @blockisec in #235
• Update dependency weasyprint to v62 by @pecoret-bot in #236
• make admin set password on user creation by @blockisec in #246
• Update all non-major dependencies by @pecoret-bot in #233
• attack surface dashboard improvements by @blockisec in #243
• Update all non-major dependencies by @pecoret-bot in #248

Breaking Change

• breaking change: simplify report templating. by @blockisec in #255

Full Changelog: v0.1.6-rc1...v0.2.0-rc1

v0.1.6-rc1

What's Changed

• Breaking: Simplify report generator and customization by @blockisec in #125
• Update dependencies
• add new advisory status fields by @blockisec in #133
• tests for management commands by @blockisec in #123
• add ui to edit company information and contacts by @blockisec in #137
• fix advisory cannot be created from finding by @blockisec in #142
• new readme structure by @blockisec in #143
• add customer permissions and accounts by @blockisec in #145
• fix empty report template select field empty by @blockisec in #151
• add endpoint to delete a company by @blockisec in #152

Full Changelog: v0.1.5...v0.1.6-rc1

v0.1.5

What's Changed

• Update dependency chart.js to v4.4.1 by @pecoret-bot in #56
• Update dependency django-extra-settings to v0.11.0 by @pecoret-bot in #57
• add a more generic asset by @blockisec in #58
• Update dependency nh3 to v0.2.15 by @pecoret-bot in #60
• Update dependency prettier to v3.1.1 by @pecoret-bot in #63
• fix empty dashboard list due to breaking change in primevue dataview by @blockisec in #66
• refactor CVSS 3.1 implementation by @blockisec in #65
• Update dependency django-filter to v23.5 by @pecoret-bot in #64
• Update dependency weasyprint to v60.2 by @pecoret-bot in #68
• Update dependency drf-spectacular to v0.27.0 by @pecoret-bot in #105
• Update dependency primevue to v3.44.0 by @pecoret-bot in #106
• Update dependency @rushstack/eslint-patch to v1.6.1 by @pecoret-bot in #107
• Update dependency vite to v5.0.10 by @pecoret-bot in #108
• Update dependency eslint to v8.56.0 by @pecoret-bot in #109
• add views for checklists by @blockisec in #110
• Update dependency vue to v3.3.13 by @pecoret-bot in #111
• Update dependency sass to v1.69.6 by @pecoret-bot in #114
• Update dependency axios to v1.6.3 by @pecoret-bot in #113
• Update dependency @vitejs/plugin-vue to v5 by @pecoret-bot in #112
• track if finding requires auth with just one field and some fixes by @blockisec in #115
• introduce edit links for reports by @blockisec in #119
• Update dependency @vue/eslint-config-prettier to v9 by @pecoret-bot in #117
• fix project update not reflected in active project by @blockisec in #120
• change user password by @blockisec in #122

Full Changelog: v0.1.4...v0.1.5

v0.1.5-rc1

What's Changed

• Update dependency chart.js to v4.4.1 by @pecoret-bot in #56
• Update dependency django-extra-settings to v0.11.0 by @pecoret-bot in #57
• add a more generic asset by @blockisec in #58
• Update dependency nh3 to v0.2.15 by @pecoret-bot in #60
• Update dependency prettier to v3.1.1 by @pecoret-bot in #63
• fix empty dashboard list due to breaking change in primevue dataview by @blockisec in #66
• refactor CVSS 3.1 implementation by @blockisec in #65
• Update dependency django-filter to v23.5 by @pecoret-bot in #64
• Update dependency weasyprint to v60.2 by @pecoret-bot in #68
• Update dependency drf-spectacular to v0.27.0 by @pecoret-bot in #105
• Update dependency primevue to v3.44.0 by @pecoret-bot in #106
• Update dependency @rushstack/eslint-patch to v1.6.1 by @pecoret-bot in #107
• Update dependency vite to v5.0.10 by @pecoret-bot in #108
• Update dependency eslint to v8.56.0 by @pecoret-bot in #109
• add views for checklists by @blockisec in #110
• Update dependency vue to v3.3.13 by @pecoret-bot in #111
• Update dependency sass to v1.69.6 by @pecoret-bot in #114
• Update dependency axios to v1.6.3 by @pecoret-bot in #113
• Update dependency @vitejs/plugin-vue to v5 by @pecoret-bot in #112
• track if finding requires auth with just one field and some fixes by @blockisec in #115
• introduce edit links for reports by @blockisec in #119
• Update dependency @vue/eslint-config-prettier to v9 by @pecoret-bot in #117
• fix project update not reflected in active project by @blockisec in #120

Full Changelog: v0.1.4...v0.1.5-rc1

v0.1.4

What's Changed

• Update dependency pygments to v2.17.2 by @pecoret-bot in #39
• Update dependency django-filter to v23.4 by @pecoret-bot in #40
• fix missing severity icon in frontend by @blockisec in #41
• Update dependency vue to v3.3.9 by @pecoret-bot in #42
• Update dependency @rushstack/eslint-patch to v1.6.0 by @pecoret-bot in #43
• Update dependency @vitejs/plugin-vue to v4.5.1 by @pecoret-bot in #44
• Update dependency @fortawesome/fontawesome-free to v6.5.1 by @pecoret-bot in #45
• Update dependency eslint to v8.55.0 by @pecoret-bot in #46
• Update dependency eslint-plugin-vue to v9.19.2 by @pecoret-bot in #47
• Update dependency primevue to v3.42.0 by @pecoret-bot in #49
• move some settings in database by @blockisec in #50
• add some sample data by @blockisec in #51
• fix unique constraint error by @blockisec in #52
• Update dependency django to v5 by @pecoret-bot in #48
• add affected component to the finding list in report by @blockisec in #53
• automatically generate secret key by @blockisec in #54

Full Changelog: v0.1.3...v0.1.4

v0.1.3

Breaking

• Drop OWASP Risk Rating support

What's Changed

• Update dependency django to v4.2.7 by @pecoret-bot in #16
• new logo by @blockisec in #18
• Update dependency vue to v3.3.8 by @pecoret-bot in #20
• Update dependency @vitejs/plugin-vue to v4.4.1 by @pecoret-bot in #22
• Update dependency primevue to v3.40.1 by @pecoret-bot in #23
• Update dependency prettier to v3.1.0 by @pecoret-bot in #24
• set image caption in markdown and ui improvements by @blockisec in #25
• more ui improvements mostly focused on login ui by @blockisec in #27
• Update dependency axios to v1.6.2 by @pecoret-bot in #28
• Update dependency django-cors-headers to v4.3.1 by @pecoret-bot in #29
• CRUD endpoints for vulnerability templates by @blockisec in #30
• Update dependency matplotlib to v3.8.2 by @pecoret-bot in #31
• Update dependency @vitejs/plugin-vue to v4.5.0 by @pecoret-bot in #32
• implements CVSS 4 and drop OWASP Risk Rating by @blockisec in #33
• fix management script by @blockisec in #34
• Update dependency eslint to v8.54.0 by @pecoret-bot in #35
• Update dependency pygments to v2.17.1 by @pecoret-bot in #36
• new finding id scheme by @blockisec in #37
• add button loading attribute by @blockisec in #38

Full Changelog: v0.1.2-rc1...v0.1.3

v0.1.2-rc1

What's Changed

• migrate to github actions by @blockisec in #1
• Update dependency eslint-plugin-vue to v9.18.0 by @pecoret-bot in #2
• fix broken attachment upload by @blockisec in #4
• Update dependency sass to v1.69.5 by @pecoret-bot in #5
• Update dependency vue to v3.3.7 by @pecoret-bot in #6
• fixes PeCoReT/pecoret-issues/issues/28 by @blockisec in #7
• Update dependency eslint-plugin-vue to v9.18.1 by @pecoret-bot in #8
• Update dependency axios to v1.6.0 by @pecoret-bot in #9
• Update dependency primevue to v3.38.1 by @pecoret-bot in #10
• Update dependency markdown to v3.5.1 by @pecoret-bot in #11
• Update dependency matplotlib to v3.8.1 by @pecoret-bot in #12
• add notifications, when finding is updated on detail page. by @blockisec in #13
• show report preview in ui by @blockisec in #14
• add a simple note taking feature by @blockisec in #15

Full Changelog: v0.1.1...v0.1.2-rc1