Google Git
Sign in
apache/caldera/HEAD
  1. 46af343 build(deps): bump postcss from 8.5.10 to 8.5.22 (#3402) by dependabot[bot] · 7 days ago master
  2. f129110 ci: skip SonarQube scan on Dependabot PR runs (#3403) by deacon-mp · 8 days ago
  3. 29f2dd0 Add .asf.yaml for repository configuration (#3400) by deacon-mp · 8 days ago
  4. e9d746f build(deps): bump setuptools to 83.0.0 and pyasn1 to 0.6.4 (#3401) by deacon-mp · 8 days ago
  5. 04e4abd build(deps-dev): bump js-yaml from 4.1.1 to 4.3.0 (#3399) by dependabot[bot] · 3 weeks ago
  6. 1aee970 encrypt user-uploaded payloads and decrypt on read (#3361) by uruwhy · 3 weeks ago
  7. c2c1d7e Fix the building error with Python 3.14 (#3368) (#3372) by Frédéric Fauberteau · 3 weeks ago
  8. 9c52c7a Change MITRE Caldera to Apache Caldera (#3381) by deacon-mp · 3 weeks ago
  9. f14109b updating submodules pins references (#3398) by deacon-mp · 3 weeks ago
  10. 9fe74d7 Delete SECURITY.md (#3387) by PJ Fanning · 3 weeks ago
  11. 000ebed Add DISCLAIMER file for Apache Caldera project (#3385) by deacon-mp · 3 weeks ago
  12. f584107 Add NOTICE file with copyright information (#3389) by PJ Fanning · 3 weeks ago
  13. 28ce9ba build(deps): bump aiohttp to 3.14.1 and cryptography to 48.0.1 (#3394) by deacon-mp · 3 weeks ago
  14. 3735d9e security(file_svc): containment check on save_file to block agent-contact path traversal (#3380) by deacon-mp · 2 months ago
  15. 0433803 security(ci): pin SonarSource/sonarqube-scan-action to a commit SHA (#3379) by deacon-mp · 2 months ago
  16. 35563c6 ci: swap safety check for pip-audit (PyPA, no API key) (#3377) by deacon-mp · 2 months ago
  17. 3f5d449 security(ci): fix SONAR_TOKEN exfiltration via pull_request_target sonar_fork_pr (#3376) by deacon-mp · 2 months ago
  18. c12162e ci: add .safety-policy.yml and use --policy-file in tox safety env (#3375) by deacon-mp · 2 months ago
  19. fd515c8 build(deps): bump postcss from 8.4.31 to 8.5.10 (#3369) by dependabot[bot] · 2 months ago
  20. cc93a0f build(deps): bump lxml from 6.0.2 to 6.1.0 (#3365) by dependabot[bot] · 3 months ago
  21. c90d553 encode link commands in unit tests (#3371) by uruwhy · 3 months ago
  22. 8ac92d1 remove update configuration functionality from rest API v1 (#3370) by uruwhy · 3 months ago
  23. 17615ac Bump picomatch from 2.3.1 to 2.3.2 (#3350) by dependabot[bot] · 4 months ago
  24. ba8d473 build(deps): bump cryptography from 46.0.5 to 46.0.7 (#3360) by dependabot[bot] · 4 months ago
  25. 3c38876 Bump flatted from 3.2.9 to 3.4.2 (#3348) by dependabot[bot] · 4 months ago
  26. 0cd64e0 fix: upgrade pyasn1 to address CVE-2026-30922 (#3346) by deacon-mp · 4 months ago
  27. f630405 fix: --fresh fails to clean cookie_storage, auth_svc crashes on key mismatch (#3355) by deacon-mp · 4 months ago
  28. 28a9be4 fix: sanitize object IDs to prevent path traversal in BaseApiManager (#3299) by deacon-mp · 4 months ago
  29. c928eb2 Bump aiohttp from 3.13.3 to 3.13.4 (#3353) by dependabot[bot] · 4 months ago
  30. ab2adb7 feat: add search filter to payload list API (#3288) by deacon-mp · 4 months ago
  31. e568f4a fix(deps): upgrade aioftp from ~=0.20.0 to ==0.27.2 (#3333) by deacon-mp · 4 months ago
  32. 29706f9 Feature/persistent sessions (#3264) by David Clute · 4 months ago
  33. a29906d fix: register SIGTERM handler in run_tasks() to save state on service shutdown (#3018) (#3277) by deacon-mp · 5 months ago
  34. 973ed61 fix: validate upload filename character set in file_svc (#3267) by deacon-mp · 5 months ago
  35. e534004 fix: correct exfil operation filter and patch path traversal bypass (#3280) by deacon-mp · 5 months ago
  36. b6ee9ca fix: prevent operation report from returning null when link paw absent (#3048) (#3279) by deacon-mp · 5 months ago
  37. 981ab92 fix: resolve trait-only relationship facts from source fact list on operation init (#3278) by deacon-mp · 5 months ago
  38. c7be7b1 fix: guard against None agent in operations summary endpoint (#3181) (#3276) by deacon-mp · 5 months ago
  39. bc39c02 fix: degrade gracefully when magma plugin dist is absent (#3275) by deacon-mp · 5 months ago
  40. bca138a fix: reduce global client_max_size and add configurable setting (#3268) by deacon-mp · 5 months ago
  41. 5c63df5 fix: replace deprecated asyncio.get_event_loop() with new_event_loop() (#3266) by deacon-mp · 5 months ago
  42. d748c6b fix: replace create_subprocess_shell (#3265) by deacon-mp · 5 months ago
  43. b6156b9 hash passwords and API keys in main config (#3257) by Daniel Matthews · 5 months ago
  44. 8373f7c Add architecture field to agent deployment commands (#3260) by Chris Lenk · 5 months ago
  45. 688e17d Bump minimatch from 3.1.2 to 3.1.5 (#3258) by dependabot[bot] · 5 months ago
  46. 899528e fix: reuse existing fact source on operation close (#3261) by ChenFryd · 5 months ago
  47. 94f99bf fix: bump cryptography to 46.0.5 and expand CI security coverage by deacon-mp · 5 months ago
  48. 62a41f8 Update server to launch without magma plugin (#3255) by Kara Pepper · 5 months ago
  49. 4bf7465 improve DNS contact unit test coverage (#3251) by Daniel Matthews · 5 months ago
  50. 4ed3182 fix: docker-compose, volumes don't overwrite UI (#3205) by nblair2 · 6 months ago
  51. fc70ba9 calculate agent alive/dead status server-side (#3249) by Daniel Matthews · 6 months ago
  52. b272e09 Edit core code to launch / run unit tests when magma plugin is not present (#3250) by Kara Pepper · 6 months ago
  53. 473bebe decouple manx from core (#3242) by Daniel Matthews · 6 months ago
  54. a9371d4 create placeholder facts if they're None when creating relationships (#3248) by Daniel Matthews · 6 months ago
  55. 20bfc01 make data_svc load_ability_file function more resilient (#3244) by Daniel Matthews · 6 months ago
  56. 222b42a Eliminate Caldera Core Dependencies on Plugins: stockpile (#3243) by Kara Pepper · 6 months ago
  57. 9ecebcc Clean up generated YML files from unit tests (#3237) by Daniel Matthews · 6 months ago
  58. 1a19420 Addressing some unit test warnings (#3222) by Daniel Matthews · 6 months ago
  59. 0f2fca5 Update app_svc.py (#3198) by Tim Brigham OC · 7 months ago
  60. c3b8bbc Bump postcss from 8.4.30 to 8.4.31 (#2830) by dependabot[bot] · 7 months ago
  61. 6e15b84 ignore fact creation timestamp comparison in test_update_schedule (#3241) by Daniel Matthews · 7 months ago
  62. e28b4c2 Bump js-yaml from 4.1.0 to 4.1.1 (#3229) by dependabot[bot] · 7 months ago
  63. 72a0317 Bump braces from 3.0.2 to 3.0.3 (#3003) by dependabot[bot] · 7 months ago
  64. cf7c441 Bump aiohttp from 3.12.14 to 3.13.3 (#3239) by dependabot[bot] · 7 months ago
  65. b0cf23c update lxml requirement to match svglib dependency (#3238) by Daniel Matthews · 7 months ago
  66. 950a52b Fix typo in feature request template (#3240) by Chris Lenk · 7 months ago
  67. 258d141 Bump marshmallow from 3.20.1 to 3.26.2 (#3236) by dependabot[bot] · 7 months ago
  68. 7c2936e Fix empty Everything Bagel adversary (replace !='training' with =='training') (#3234) by Louis · 8 months ago
  69. 806d63a Remove auto assigned responders (#3231) by Chris Lenk · 8 months ago
  70. c2fbedb fix asyncmock and atomic planner test (#3219) by Daniel Matthews · 8 months ago
  71. fa8a44c Update Magma Submodule (#3225) by Ricky Chen · 9 months ago
  72. 54dd264 set finished and cleanup state properly for operations (#3214) by Daniel Matthews · 10 months ago
  73. 0ff0bff don't override coverage path for sonar (#3216) by Daniel Matthews · 10 months ago
  74. 38bc3d4 ignore fact creation timestamp comparison in scheduling unit test (#3215) by Daniel Matthews · 10 months ago
  75. 5eb0f29 remove python 3.9 from tox (#3210) by Daniel Matthews · 10 months ago
  76. 802589f Fix Data Loading Issue (#3207) by Devon Colmer · 10 months ago
  77. e626e3e update installation info (#3199) by Daniel Matthews · 10 months ago
  78. 5849e3c Use updated golang version in dockerfile (#3202) by Daniel Matthews · 10 months ago
  79. 18529aa fix(3078, 3079): Resolve issues in Operations API Manager and Plugin Hooks (#3187) by Ricky Chen · 10 months ago
  80. a12cab9 Refactor SonarQube scan for forked PRs by deacon-mp · 10 months ago
  81. 29a83a5 Enable SonarQube scan for forked PRs by deacon-mp · 10 months ago
  82. 29f7170 Disable SonarQube scan for forked pull requests by deacon-mp · 10 months ago
  83. 74fb323 Delete .github/workflows/sonar-fork-pr.yml by deacon-mp · 10 months ago
  84. 1bd1815 Deacon mp patch SonarC (#3213) by deacon-mp · 10 months ago
  85. e394b03 Add SonarQube workflow for forked pull requests by deacon-mp · 10 months ago
  86. 4f7432b Enhance DELETE Payload Sanitization in API Handler (#3188) by Ricky Chen · 10 months ago
  87. f1bb6c3 Bump SonarSource/sonarqube-scan-action in /.github/workflows (#3209) by dependabot[bot] · 10 months ago
  88. b4d8c37 Switch to SonarQube (#3201) by Daniel Matthews · 10 months ago
  89. 3b796f3 Bump aiohttp from 3.10.11 to 3.12.14 (#3189) by dependabot[bot] · 11 months ago
  90. 4935b8a Merge pull request #3197 from HackedRico/fix-docker-workflow by Daniel Matthews · 11 months ago
  91. cffbedd fix!: Docker Workflow indentation by Ricky · 11 months ago
  92. 3917b80 Update tox.ini by deacon-mp · 12 months ago
  93. 032ec16 Merge pull request #3178 from mitre/dependabot/pip/setuptools-78.1.1 by deacon-mp · 1 year, 1 month ago
  94. 48447d2 Update security.yml by deacon-mp · 1 year, 1 month ago
  95. d41eb47 Update quality.yml by deacon-mp · 1 year, 1 month ago
  96. 5e9ad93 Update payload_api.py by deacon-mp · 1 year, 1 month ago
  97. 8312732 Merge pull request #3186 from RachHavoc/rcm/cwe-22-fix by deacon-mp · 1 year, 1 month ago
  98. 14c3562 adding some extra file sanitization by RachHavoc · 1 year, 1 month ago
  99. cd28656 remove unnecessary comments by RachHavoc · 1 year, 1 month ago
  100. 7afe808 fix cwe 22 by RachHavoc · 1 year, 1 month ago