Commit Graph

Select branches

Hide Pull Requests

codex/fix-issue-35

codex/merge-pr56-security-fixes

main

#1

#11

#12

#13

#14

#15

#16

#17

#18

#19

#2

#21

#21/merge

#22

#25

#26

#27

#28

#28/merge

#3

#31

#36

#37

#37/merge

#4

#43

#44

#45

#46

#48

#5

#50

#51

#52

#56

#57

#58

#59

#6

#60

#61

#62

#63

#7

#8

#9

v0.3.15

v0.3.16

v0.3.17

v0.3.18

v0.3.19

v0.3.20

v0.3.21

v0.3.22

v0.3.23

v0.3.24

Mono Color

• b9b137dc91 fix: preserve blank lines when copying HTTP packets ji ruo 2026-10-13 17:30:44 +08:00
• bd0ba56c82 Merge pull request #8 from RuoJi6/codex/fix-task-finding-counts RuoJi6 2026-10-13 16:10:12 +08:00
• 600007873c fix: preserve task severity counts after finding grouping ji ruo 2026-10-13 15:30:11 +08:00
• 5f94c9c46e Merge pull request #7 from RuoJi6/codex/fix-shell-review v0.3.20 RuoJi6 2026-10-13 14:13:12 +08:00
• 6aa0c56d81 fix: improve static script review and default to model judgement ji ruo 2026-10-13 14:08:00 +08:00
• e47f367a7d Merge pull request #6 from RuoJi6/codex/fix-command-review-snapshot v0.3.19 RuoJi6 2026-10-12 20:07:16 +08:00
• 139e997ba8 fix: remove empty approval detail space ji ruo 2026-10-12 19:58:40 +08:00
• dc72b5b4a9 feat: configure incomplete script review path ji ruo 2026-10-12 18:01:49 +08:00
• 97213e357b fix: avoid false script snapshot reviews ji ruo 2026-10-12 17:31:33 +08:00
• 648bafb593 docs(release): prepare v0.3.18 v0.3.18 ji ruo 2026-10-12 14:30:09 +08:00
• 0a0ef70bfb Merge pull request #5 from RuoJi6/codex/review-script-sidechat RuoJi6 2026-10-12 13:42:27 +08:00
• 99c54bfa33 fix: use consistent approval date picker labels ji ruo 2026-10-12 12:48:47 +08:00
• 2f2b78cc78 feat: search approval history by content and date ji ruo 2026-10-12 12:38:31 +08:00
• e33eedeb17 fix: preserve chat height when side panel is closed ji ruo 2026-10-12 12:09:18 +08:00
• a908eb28e4 fix: show explicit script toggle direction ji ruo 2026-10-12 11:56:09 +08:00
• a757ece8c3 fix: keep approval script details visible ji ruo 2026-10-12 11:42:41 +08:00
• 86c376943f fix: render approval details at intrinsic height ji ruo 2026-10-12 11:26:49 +08:00
• 8b95ad1664 fix: prevent approval script panel clipping ji ruo 2026-10-12 11:20:17 +08:00
• 9b0d1bdb3c feat: expose scripts to review and add approval side chat ji ruo 2026-10-12 11:06:38 +08:00
• ee413324c8 docs(release): prepare v0.3.17 v0.3.17 ji ruo 2026-10-10 09:28:39 +08:00
• 5f9d491681 Merge pull request #4 from RuoJi6/codex/schedule-date-range RuoJi6 2026-10-10 09:17:42 +08:00
• 0af7132ab7 修复计划暂停来源和时间线刷新 ji ruo 2026-10-10 09:16:28 +08:00
• 87e62fb904 支持计划任务批量选择操作 ji ruo 2026-10-10 09:01:21 +08:00
• 96a10878ad 重新设计计划任务运行时间线 ji ruo 2026-10-10 08:56:13 +08:00
• 8a1c9debbb 让立即运行直接恢复任务 ji ruo 2026-10-10 08:50:15 +08:00
• 8067f3286b 修复计划任务立即运行并区分状态颜色 ji ruo 2026-10-10 08:45:06 +08:00
• a5cfec025f 固定显示计划任务时间线入口 ji ruo 2026-10-10 08:39:55 +08:00
• e52fe67171 将计划任务改为字段表格展示 ji ruo 2026-10-10 00:47:14 +08:00
• aed3062b4d 增加计划任务检索分页和时间线 ji ruo 2026-10-10 00:38:22 +08:00
• 30db68a86a 优化计划任务列表展示 ji ruo 2026-10-10 00:30:51 +08:00
• 98321d8262 支持计划任务日期范围 ji ruo 2026-10-09 23:50:05 +08:00
• 6a2bba4637 Merge pull request #3 from RuoJi6/codex/scheduled-tasks RuoJi6 2026-10-09 23:21:06 +08:00
• 3254c90a03 新增日历式计划任务 ji ruo 2026-10-09 22:30:02 +08:00
• 9adbd54627 ci(release): allow replacing release when tag moves v0.3.16 ji ruo 2026-10-09 14:11:39 +08:00
• aca6e9a8fb fix(ui): match folder task labels to existing table rows ji ruo 2026-10-09 13:32:57 +08:00
• 012030b41d fix(ui): align merged folders with existing columns and omit duplicate headers ji ruo 2026-10-09 13:20:53 +08:00
• ada09f6c1a fix(ui): restore original controls and limit folders to merged findings ji ruo 2026-10-09 13:12:54 +08:00
• d36812b7e1 feat(findings): show consolidation across report task and asset views ji ruo 2026-10-09 12:41:46 +08:00
• d68594e81a fix(ui): hide completed finding review history from findings page ji ruo 2026-10-09 12:27:54 +08:00
• 7db7b71cdb fix(findings): protect historical reports and verify consolidation results ji ruo 2026-10-09 12:23:11 +08:00
• 71ec0f0efd docs(release): prepare v0.3.16 ji ruo 2026-10-09 11:14:57 +08:00
• e77c3ae9a3 Merge pull request #2 from RuoJi6/codex/finding-folders RuoJi6 2026-10-09 11:07:16 +08:00
• 444cf6e50a Merge pull request #1 from RuoJi6/codex/http-basic-auth RuoJi6 2026-10-09 11:05:40 +08:00
• 24d4726aee feat(findings): consolidate duplicate reports into expandable cases ji ruo 2026-10-09 10:43:53 +08:00
• ead58f0983 fix(auth): keep config persistence off the request lock ji ruo 2026-10-09 10:39:58 +08:00
• 04c8c54ff8 feat(auth): add optional HTTP Basic Auth access gate ji ruo 2026-10-09 10:11:57 +08:00
• 979e1fe4eb Update README.md RuoJi6 2026-10-09 09:26:37 +08:00
• 735dd61564 Update README.md RuoJi6 2026-10-09 09:26:23 +08:00
• a91b27feb7 fix(release): retain upstream version 0.3.15 v0.3.15 ji ruo 2026-10-09 09:03:33 +08:00
• dfef372b64 feat(release): publish standalone repository and Docker Hub images ji ruo 2026-10-09 09:01:25 +08:00
• 714b00cccb feat(update): publish fork releases for online self-update ji ruo 2026-10-09 08:45:33 +08:00
• e6ec569991 docs(changelog): 定版 0.3.15 Autumn-27 2026-10-07 08:54:02 -04:00
• fd86f3ceca Merge pull request #197 from Autumn-27/fix/auth-init-fail-open Autumn 2026-10-07 19:47:48 +08:00
• a951e4aad3 fix bug Autumn-27 2026-10-07 07:45:28 -04:00
• b55ceb1fdd Merge pull request #191 from Autumn-27/feat/judge-token-usage Autumn 2026-10-04 14:43:54 +08:00
• 86729b65dc feat(intercept): 模型兜底审批单独计量 token 并在配置页展示 Autumn-27 2026-10-04 02:43:26 -04:00
• d0033724a6 Merge pull request #189 from Autumn-27/fix/sse-same-origin Autumn 2026-10-03 08:10:35 +08:00
• e2c8a23a98 fix(web): SSE 活动流默认同源，修复反代部署连不上 :8787 Autumn-27 2026-10-02 20:10:08 -04:00
• 160fe13c24 Merge pull request #187 from Autumn-27/fix/notify-digest-and-mask Autumn 2026-10-01 19:00:43 +08:00
• 314105e827 Merge pull request #185 from lucksec/feat/vuln-im-push Autumn 2026-10-01 18:58:50 +08:00
• 5081d95b99 fix(notify): 邮件渠道的 SMTP 拨号补上 SSRF 守卫 Autumn-27 2026-10-01 06:43:48 -04:00
• 77834f0080 fix(notify): 目的地字段留空不应被判成地址变更 Autumn-27 2026-10-01 06:43:48 -04:00
• 93c1d39df3 fix(notify): 汇总模式按消息计量限流，批次大小不再被每轮请求预算掐死 Autumn-27 2026-10-01 06:43:29 -04:00
• f2f35ebc2e fix(notify): 复测判定「已修复」时也要推送状态变更 luckoneandClaude Code 2026-09-30 16:13:52 +08:00
• ee8929115e refactor(web): 通知页拆分为组件，1095 行降到 605 行 luckoneandClaude Code 2026-09-30 16:11:38 +08:00
• a049f09b97 fix(notify): 安全审计修复 —— 掩码绕过、SSRF、静默丢失等 12 项 luckoneandClaude Code 2026-09-30 16:11:33 +08:00
• f3fb37f70d feat(notify): 漏洞发现支持推送到钉钉/飞书/企业微信等六种渠道 luckoneandClaude Code 2026-09-30 15:57:29 +08:00
• 18589b270e fix(db): 修正公司 ICP 归属用例连接关闭顺序导致的资产残留 luckoneandClaude Code 2026-09-30 15:57:29 +08:00
• 50b7b2a05b Merge pull request #184 from Autumn-27/fix/finding-asset-tree-scroll Autumn 2026-09-30 16:17:08 +08:00
• 4b1eda8e92 fix(findings): 「按资产」视图资产列表溢出时补回滚动条 Autumn-27 2026-09-30 04:16:43 -04:00
• b590898d1f Merge pull request #183 from Autumn-27/feat/intercept-delete-path Autumn 2026-09-30 16:15:15 +08:00
• 527092f23b feat(intercept): 新增内置拦截规则「删除类接口路径」 Autumn-27 2026-09-30 04:12:57 -04:00
• a8afd0bb98 Merge pull request #182 from Autumn-27/feat/traffic-clear-all Autumn 2026-09-30 14:55:47 +08:00
• 2f5f7c0227 feat(traffic): 流量列表新增「清空全部」，并借空库时机压实索引 Autumn-27 2026-09-30 02:50:49 -04:00
• 61d486160e Merge pull request #180 from Autumn-27/fix/traffic-index-reclaim Autumn 2026-09-30 13:54:28 +08:00
• 3227f2e54c fix(traffic): 删除流量后把索引空间真正还给操作系统 Autumn-27 2026-09-30 01:44:44 -04:00
• ca5512b48f Merge pull request #179 from Autumn-27/feat/traffic-search-filter-sort Autumn 2026-09-30 10:04:15 +08:00
• a4960b514e feat(traffic): 流量列表支持内容检索、路径/状态码/长度筛选与列排序 (#177) Autumn-27 2026-09-29 21:58:17 -04:00
• 02b1dbe6f8 chore(deps): 升级 norma 到 v0.4.3——工具输出全局兜底截断（harness 统一 CaptureOnce），任何工具都不再溢爆上下文 Autumn-27 2026-09-29 21:14:08 -04:00
• 71794729fc fix(tools): MCP/自定义工具输出统一走 Capture 截断，修复 mcp 截断不生效 (#176) Autumn-27 2026-09-29 10:09:23 -04:00
• 25b6018818 fix(llm): 一次性 LLM 调用补挂 session id，让自定义会话头真正生效 (#175) 榆木 2026-09-29 18:21:30 +08:00
• 69fe9357d3 chore(deps): 升级 norma 到 v0.4.2——修复 noa 压缩后 thinking/tool 消息被 provider 拒绝(#174) Autumn-27 2026-09-29 04:18:58 -04:00
• 86162d7eda docs(changelog): 定版 0.3.14 Autumn-27 2026-09-24 13:35:48 -04:00
• 87b3c3c770 feat(tasks): 漏洞列改为按严重度分档显示 严/高/中/低 Autumn-27 2026-09-24 13:32:45 -04:00
• e65d3e5202 feat(tasks): 任务列表新增漏洞数量列，描述/目标列收窄 Autumn-27 2026-09-24 13:26:22 -04:00
• 9bc8d16a0b fix(graph): 折叠后消除 digest↔finding 的反向重复边 Autumn-27 2026-09-24 13:23:06 -04:00
• b5704eb361 refactor(graph_overview): related_tasks 冷区统一走 coldDigestsRecent 并封顶 Autumn-27 2026-09-24 13:11:28 -04:00
• 3aac6754a8 refactor(graph_overview): 概览各列表加数量上限，止住上下文膨胀 Autumn-27 2026-09-24 13:05:27 -04:00
• 43d1743dc0 refactor(graph_overview): finding_list 限最新 10 条，findings 计数改名 findings_total Autumn-27 2026-09-24 12:32:43 -04:00
• 06a43f37ff refactor(graph_overview): 精简态势概览字段 Autumn-27 2026-09-24 12:23:29 -04:00
• bf7f414477 Update CHANGELOG.md Autumn 2026-09-19 23:37:57 +08:00
• 7b92395aa0 docs(changelog): 版本号改为 0.3.13 Autumn-27 2026-09-19 11:23:33 -04:00
• 2943eb2ea6 docs(changelog): 定版 0.4.0 Autumn-27 2026-09-19 11:20:03 -04:00
• 37950f4a6f fix(task-archive): 遇到符号链接跳过而非整包失败 Autumn-27 2026-09-19 11:08:15 -04:00
• 33c26dc72a fix(intercept): 收紧裁判输出协议，减少 1024 截断导致的 fail-open Autumn-27 2026-09-19 10:24:08 -04:00
• 777730e255 feat: 任务模板支持预设分类与任务级拦截/允许规则 Autumn-27 2026-09-19 09:27:03 -04:00
• d5359e1f04 feat: 资产拦截接入执行链，新增任务级拦截/允许规则 Autumn-27 2026-09-19 09:06:22 -04:00
• dfc9d2fa2e feat: 新增资产拦截规则（全局黑名单）增删改查 Autumn-27 2026-09-19 07:58:23 -04:00
• a590b415ba chore(deps): 升级 norma 至 v0.4.1 Autumn-27 2026-09-19 07:26:47 -04:00
• 6f6be46480 feat(web): 登录前新增使用须知与免责声明弹窗，须勾选同意后方可登录 Autumn-27 2026-09-18 08:09:05 -04:00