Google Git
Sign in
apache/caldera/HEAD
  1. ff2845a remove stale survey by RCM · 3 weeks ago master
  2. 46af343 build(deps): bump postcss from 8.5.10 to 8.5.22 (#3402) by dependabot[bot] · 4 weeks ago
  3. f129110 ci: skip SonarQube scan on Dependabot PR runs (#3403) by deacon-mp · 4 weeks ago
  4. 29f2dd0 Add .asf.yaml for repository configuration (#3400) by deacon-mp · 4 weeks ago
  5. e9d746f build(deps): bump setuptools to 83.0.0 and pyasn1 to 0.6.4 (#3401) by deacon-mp · 4 weeks ago
  6. 04e4abd build(deps-dev): bump js-yaml from 4.1.1 to 4.3.0 (#3399) by dependabot[bot] · 6 weeks ago
  7. 1aee970 encrypt user-uploaded payloads and decrypt on read (#3361) by uruwhy · 6 weeks ago
  8. c2c1d7e Fix the building error with Python 3.14 (#3368) (#3372) by Frédéric Fauberteau · 6 weeks ago
  9. 9c52c7a Change MITRE Caldera to Apache Caldera (#3381) by deacon-mp · 6 weeks ago
  10. f14109b updating submodules pins references (#3398) by deacon-mp · 6 weeks ago
  11. 9fe74d7 Delete SECURITY.md (#3387) by PJ Fanning · 6 weeks ago
  12. 000ebed Add DISCLAIMER file for Apache Caldera project (#3385) by deacon-mp · 6 weeks ago
  13. f584107 Add NOTICE file with copyright information (#3389) by PJ Fanning · 6 weeks ago
  14. 28ce9ba build(deps): bump aiohttp to 3.14.1 and cryptography to 48.0.1 (#3394) by deacon-mp · 6 weeks ago
  15. 3735d9e security(file_svc): containment check on save_file to block agent-contact path traversal (#3380) by deacon-mp · 3 months ago
  16. 0433803 security(ci): pin SonarSource/sonarqube-scan-action to a commit SHA (#3379) by deacon-mp · 3 months ago
  17. 35563c6 ci: swap safety check for pip-audit (PyPA, no API key) (#3377) by deacon-mp · 3 months ago
  18. 3f5d449 security(ci): fix SONAR_TOKEN exfiltration via pull_request_target sonar_fork_pr (#3376) by deacon-mp · 3 months ago
  19. c12162e ci: add .safety-policy.yml and use --policy-file in tox safety env (#3375) by deacon-mp · 3 months ago
  20. fd515c8 build(deps): bump postcss from 8.4.31 to 8.5.10 (#3369) by dependabot[bot] · 3 months ago
  21. cc93a0f build(deps): bump lxml from 6.0.2 to 6.1.0 (#3365) by dependabot[bot] · 4 months ago
  22. c90d553 encode link commands in unit tests (#3371) by uruwhy · 4 months ago
  23. 8ac92d1 remove update configuration functionality from rest API v1 (#3370) by uruwhy · 4 months ago
  24. 17615ac Bump picomatch from 2.3.1 to 2.3.2 (#3350) by dependabot[bot] · 4 months ago
  25. ba8d473 build(deps): bump cryptography from 46.0.5 to 46.0.7 (#3360) by dependabot[bot] · 4 months ago
  26. 3c38876 Bump flatted from 3.2.9 to 3.4.2 (#3348) by dependabot[bot] · 4 months ago
  27. 0cd64e0 fix: upgrade pyasn1 to address CVE-2026-30922 (#3346) by deacon-mp · 4 months ago
  28. f630405 fix: --fresh fails to clean cookie_storage, auth_svc crashes on key mismatch (#3355) by deacon-mp · 4 months ago
  29. 28a9be4 fix: sanitize object IDs to prevent path traversal in BaseApiManager (#3299) by deacon-mp · 5 months ago
  30. c928eb2 Bump aiohttp from 3.13.3 to 3.13.4 (#3353) by dependabot[bot] · 5 months ago
  31. ab2adb7 feat: add search filter to payload list API (#3288) by deacon-mp · 5 months ago
  32. e568f4a fix(deps): upgrade aioftp from ~=0.20.0 to ==0.27.2 (#3333) by deacon-mp · 5 months ago
  33. 29706f9 Feature/persistent sessions (#3264) by David Clute · 5 months ago
  34. a29906d fix: register SIGTERM handler in run_tasks() to save state on service shutdown (#3018) (#3277) by deacon-mp · 5 months ago
  35. 973ed61 fix: validate upload filename character set in file_svc (#3267) by deacon-mp · 5 months ago
  36. e534004 fix: correct exfil operation filter and patch path traversal bypass (#3280) by deacon-mp · 5 months ago
  37. b6ee9ca fix: prevent operation report from returning null when link paw absent (#3048) (#3279) by deacon-mp · 5 months ago
  38. 981ab92 fix: resolve trait-only relationship facts from source fact list on operation init (#3278) by deacon-mp · 5 months ago
  39. c7be7b1 fix: guard against None agent in operations summary endpoint (#3181) (#3276) by deacon-mp · 5 months ago
  40. bc39c02 fix: degrade gracefully when magma plugin dist is absent (#3275) by deacon-mp · 5 months ago
  41. bca138a fix: reduce global client_max_size and add configurable setting (#3268) by deacon-mp · 5 months ago
  42. 5c63df5 fix: replace deprecated asyncio.get_event_loop() with new_event_loop() (#3266) by deacon-mp · 5 months ago
  43. d748c6b fix: replace create_subprocess_shell (#3265) by deacon-mp · 5 months ago
  44. b6156b9 hash passwords and API keys in main config (#3257) by Daniel Matthews · 5 months ago
  45. 8373f7c Add architecture field to agent deployment commands (#3260) by Chris Lenk · 5 months ago
  46. 688e17d Bump minimatch from 3.1.2 to 3.1.5 (#3258) by dependabot[bot] · 5 months ago
  47. 899528e fix: reuse existing fact source on operation close (#3261) by ChenFryd · 5 months ago
  48. 94f99bf fix: bump cryptography to 46.0.5 and expand CI security coverage by deacon-mp · 5 months ago
  49. 62a41f8 Update server to launch without magma plugin (#3255) by Kara Pepper · 6 months ago
  50. 4bf7465 improve DNS contact unit test coverage (#3251) by Daniel Matthews · 6 months ago
  51. 4ed3182 fix: docker-compose, volumes don't overwrite UI (#3205) by nblair2 · 6 months ago
  52. fc70ba9 calculate agent alive/dead status server-side (#3249) by Daniel Matthews · 6 months ago
  53. b272e09 Edit core code to launch / run unit tests when magma plugin is not present (#3250) by Kara Pepper · 6 months ago
  54. 473bebe decouple manx from core (#3242) by Daniel Matthews · 7 months ago
  55. a9371d4 create placeholder facts if they're None when creating relationships (#3248) by Daniel Matthews · 7 months ago
  56. 20bfc01 make data_svc load_ability_file function more resilient (#3244) by Daniel Matthews · 7 months ago
  57. 222b42a Eliminate Caldera Core Dependencies on Plugins: stockpile (#3243) by Kara Pepper · 7 months ago
  58. 9ecebcc Clean up generated YML files from unit tests (#3237) by Daniel Matthews · 7 months ago
  59. 1a19420 Addressing some unit test warnings (#3222) by Daniel Matthews · 7 months ago
  60. 0f2fca5 Update app_svc.py (#3198) by Tim Brigham OC · 7 months ago
  61. c3b8bbc Bump postcss from 8.4.30 to 8.4.31 (#2830) by dependabot[bot] · 8 months ago
  62. 6e15b84 ignore fact creation timestamp comparison in test_update_schedule (#3241) by Daniel Matthews · 8 months ago
  63. e28b4c2 Bump js-yaml from 4.1.0 to 4.1.1 (#3229) by dependabot[bot] · 8 months ago
  64. 72a0317 Bump braces from 3.0.2 to 3.0.3 (#3003) by dependabot[bot] · 8 months ago
  65. cf7c441 Bump aiohttp from 3.12.14 to 3.13.3 (#3239) by dependabot[bot] · 8 months ago
  66. b0cf23c update lxml requirement to match svglib dependency (#3238) by Daniel Matthews · 8 months ago
  67. 950a52b Fix typo in feature request template (#3240) by Chris Lenk · 8 months ago
  68. 258d141 Bump marshmallow from 3.20.1 to 3.26.2 (#3236) by dependabot[bot] · 8 months ago
  69. 7c2936e Fix empty Everything Bagel adversary (replace !='training' with =='training') (#3234) by Louis · 8 months ago
  70. 806d63a Remove auto assigned responders (#3231) by Chris Lenk · 8 months ago
  71. c2fbedb fix asyncmock and atomic planner test (#3219) by Daniel Matthews · 9 months ago
  72. fa8a44c Update Magma Submodule (#3225) by Ricky Chen · 9 months ago
  73. 54dd264 set finished and cleanup state properly for operations (#3214) by Daniel Matthews · 10 months ago
  74. 0ff0bff don't override coverage path for sonar (#3216) by Daniel Matthews · 10 months ago
  75. 38bc3d4 ignore fact creation timestamp comparison in scheduling unit test (#3215) by Daniel Matthews · 10 months ago
  76. 5eb0f29 remove python 3.9 from tox (#3210) by Daniel Matthews · 10 months ago
  77. 802589f Fix Data Loading Issue (#3207) by Devon Colmer · 11 months ago
  78. e626e3e update installation info (#3199) by Daniel Matthews · 11 months ago
  79. 5849e3c Use updated golang version in dockerfile (#3202) by Daniel Matthews · 11 months ago
  80. 18529aa fix(3078, 3079): Resolve issues in Operations API Manager and Plugin Hooks (#3187) by Ricky Chen · 11 months ago
  81. a12cab9 Refactor SonarQube scan for forked PRs by deacon-mp · 11 months ago
  82. 29a83a5 Enable SonarQube scan for forked PRs by deacon-mp · 11 months ago
  83. 29f7170 Disable SonarQube scan for forked pull requests by deacon-mp · 11 months ago
  84. 74fb323 Delete .github/workflows/sonar-fork-pr.yml by deacon-mp · 11 months ago
  85. 1bd1815 Deacon mp patch SonarC (#3213) by deacon-mp · 11 months ago
  86. e394b03 Add SonarQube workflow for forked pull requests by deacon-mp · 11 months ago
  87. 4f7432b Enhance DELETE Payload Sanitization in API Handler (#3188) by Ricky Chen · 11 months ago
  88. f1bb6c3 Bump SonarSource/sonarqube-scan-action in /.github/workflows (#3209) by dependabot[bot] · 11 months ago
  89. b4d8c37 Switch to SonarQube (#3201) by Daniel Matthews · 11 months ago
  90. 3b796f3 Bump aiohttp from 3.10.11 to 3.12.14 (#3189) by dependabot[bot] · 12 months ago
  91. 4935b8a Merge pull request #3197 from HackedRico/fix-docker-workflow by Daniel Matthews · 12 months ago
  92. cffbedd fix!: Docker Workflow indentation by Ricky · 12 months ago
  93. 3917b80 Update tox.ini by deacon-mp · 1 year ago
  94. 032ec16 Merge pull request #3178 from mitre/dependabot/pip/setuptools-78.1.1 by deacon-mp · 1 year, 2 months ago
  95. 48447d2 Update security.yml by deacon-mp · 1 year, 2 months ago
  96. d41eb47 Update quality.yml by deacon-mp · 1 year, 2 months ago
  97. 5e9ad93 Update payload_api.py by deacon-mp · 1 year, 2 months ago
  98. 8312732 Merge pull request #3186 from RachHavoc/rcm/cwe-22-fix by deacon-mp · 1 year, 2 months ago
  99. 14c3562 adding some extra file sanitization by RachHavoc · 1 year, 2 months ago
  100. cd28656 remove unnecessary comments by RachHavoc · 1 year, 2 months ago