-
cb8d6a8 Change notification emails in .asf.yaml (#3414) by PJ Fanning · 8 weeks ago master
-
79a3116 build(deps-dev): bump brace-expansion from 1.1.11 to 1.1.18 (#3413) by dependabot[bot] · 8 weeks ago
-
e7c2cbf build(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (#3409) by dependabot[bot] · 8 weeks ago
-
a69c190 build(deps): bump postcss from 8.5.22 to 8.5.25 (#3408) by dependabot[bot] · 8 weeks ago
-
e0b5e1c build(deps): bump aiohttp, cryptography, and asyncssh for security advisories (#3412) by Ricky Chen · 8 weeks ago
-
ff2845a remove stale survey by RCM · 3 months ago
-
46af343 build(deps): bump postcss from 8.5.10 to 8.5.22 (#3402) by dependabot[bot] · 3 months ago
-
f129110 ci: skip SonarQube scan on Dependabot PR runs (#3403) by deacon-mp · 3 months ago
-
29f2dd0 Add .asf.yaml for repository configuration (#3400) by deacon-mp · 3 months ago
-
e9d746f build(deps): bump setuptools to 83.0.0 and pyasn1 to 0.6.4 (#3401) by deacon-mp · 3 months ago
-
04e4abd build(deps-dev): bump js-yaml from 4.1.1 to 4.3.0 (#3399) by dependabot[bot] · 4 months ago
-
1aee970 encrypt user-uploaded payloads and decrypt on read (#3361) by uruwhy · 4 months ago
-
c2c1d7e Fix the building error with Python 3.14 (#3368) (#3372) by Frédéric Fauberteau · 4 months ago
-
9c52c7a Change MITRE Caldera to Apache Caldera (#3381) by deacon-mp · 4 months ago
-
f14109b updating submodules pins references (#3398) by deacon-mp · 4 months ago
-
9fe74d7 Delete SECURITY.md (#3387) by PJ Fanning · 4 months ago
-
000ebed Add DISCLAIMER file for Apache Caldera project (#3385) by deacon-mp · 4 months ago
-
f584107 Add NOTICE file with copyright information (#3389) by PJ Fanning · 4 months ago
-
28ce9ba build(deps): bump aiohttp to 3.14.1 and cryptography to 48.0.1 (#3394) by deacon-mp · 4 months ago
-
3735d9e security(file_svc): containment check on save_file to block agent-contact path traversal (#3380) by deacon-mp · 5 months ago
-
0433803 security(ci): pin SonarSource/sonarqube-scan-action to a commit SHA (#3379) by deacon-mp · 5 months ago
-
35563c6 ci: swap safety check for pip-audit (PyPA, no API key) (#3377) by deacon-mp · 5 months ago
-
3f5d449 security(ci): fix SONAR_TOKEN exfiltration via pull_request_target sonar_fork_pr (#3376) by deacon-mp · 5 months ago
-
c12162e ci: add .safety-policy.yml and use --policy-file in tox safety env (#3375) by deacon-mp · 5 months ago
-
fd515c8 build(deps): bump postcss from 8.4.31 to 8.5.10 (#3369) by dependabot[bot] · 5 months ago
-
cc93a0f build(deps): bump lxml from 6.0.2 to 6.1.0 (#3365) by dependabot[bot] · 6 months ago
-
c90d553 encode link commands in unit tests (#3371) by uruwhy · 6 months ago
-
8ac92d1 remove update configuration functionality from rest API v1 (#3370) by uruwhy · 6 months ago
-
17615ac Bump picomatch from 2.3.1 to 2.3.2 (#3350) by dependabot[bot] · 6 months ago
-
ba8d473 build(deps): bump cryptography from 46.0.5 to 46.0.7 (#3360) by dependabot[bot] · 6 months ago
-
3c38876 Bump flatted from 3.2.9 to 3.4.2 (#3348) by dependabot[bot] · 6 months ago
-
0cd64e0 fix: upgrade pyasn1 to address CVE-2026-30922 (#3346) by deacon-mp · 6 months ago
-
f630405 fix: --fresh fails to clean cookie_storage, auth_svc crashes on key mismatch (#3355) by deacon-mp · 6 months ago
-
28a9be4 fix: sanitize object IDs to prevent path traversal in BaseApiManager (#3299) by deacon-mp · 7 months ago
-
c928eb2 Bump aiohttp from 3.13.3 to 3.13.4 (#3353) by dependabot[bot] · 7 months ago
-
ab2adb7 feat: add search filter to payload list API (#3288) by deacon-mp · 7 months ago
-
e568f4a fix(deps): upgrade aioftp from ~=0.20.0 to ==0.27.2 (#3333) by deacon-mp · 7 months ago
-
29706f9 Feature/persistent sessions (#3264) by David Clute · 7 months ago
-
a29906d fix: register SIGTERM handler in run_tasks() to save state on service shutdown (#3018) (#3277) by deacon-mp · 7 months ago
-
973ed61 fix: validate upload filename character set in file_svc (#3267) by deacon-mp · 7 months ago
-
e534004 fix: correct exfil operation filter and patch path traversal bypass (#3280) by deacon-mp · 7 months ago
-
b6ee9ca fix: prevent operation report from returning null when link paw absent (#3048) (#3279) by deacon-mp · 7 months ago
-
981ab92 fix: resolve trait-only relationship facts from source fact list on operation init (#3278) by deacon-mp · 7 months ago
-
c7be7b1 fix: guard against None agent in operations summary endpoint (#3181) (#3276) by deacon-mp · 7 months ago
-
bc39c02 fix: degrade gracefully when magma plugin dist is absent (#3275) by deacon-mp · 7 months ago
-
bca138a fix: reduce global client_max_size and add configurable setting (#3268) by deacon-mp · 7 months ago
-
5c63df5 fix: replace deprecated asyncio.get_event_loop() with new_event_loop() (#3266) by deacon-mp · 7 months ago
-
d748c6b fix: replace create_subprocess_shell (#3265) by deacon-mp · 7 months ago
-
b6156b9 hash passwords and API keys in main config (#3257) by Daniel Matthews · 7 months ago
-
8373f7c Add architecture field to agent deployment commands (#3260) by Chris Lenk · 7 months ago
-
688e17d Bump minimatch from 3.1.2 to 3.1.5 (#3258) by dependabot[bot] · 7 months ago
-
899528e fix: reuse existing fact source on operation close (#3261) by ChenFryd · 7 months ago
-
94f99bf fix: bump cryptography to 46.0.5 and expand CI security coverage by deacon-mp · 7 months ago
-
62a41f8 Update server to launch without magma plugin (#3255) by Kara Pepper · 8 months ago
-
4bf7465 improve DNS contact unit test coverage (#3251) by Daniel Matthews · 8 months ago
-
4ed3182 fix: docker-compose, volumes don't overwrite UI (#3205) by nblair2 · 8 months ago
-
fc70ba9 calculate agent alive/dead status server-side (#3249) by Daniel Matthews · 8 months ago
-
b272e09 Edit core code to launch / run unit tests when magma plugin is not present (#3250) by Kara Pepper · 9 months ago
-
473bebe decouple manx from core (#3242) by Daniel Matthews · 9 months ago
-
a9371d4 create placeholder facts if they're None when creating relationships (#3248) by Daniel Matthews · 9 months ago
-
20bfc01 make data_svc load_ability_file function more resilient (#3244) by Daniel Matthews · 9 months ago
-
222b42a Eliminate Caldera Core Dependencies on Plugins: stockpile (#3243) by Kara Pepper · 9 months ago
-
9ecebcc Clean up generated YML files from unit tests (#3237) by Daniel Matthews · 9 months ago
-
1a19420 Addressing some unit test warnings (#3222) by Daniel Matthews · 9 months ago
-
0f2fca5 Update app_svc.py (#3198) by Tim Brigham OC · 10 months ago
-
c3b8bbc Bump postcss from 8.4.30 to 8.4.31 (#2830) by dependabot[bot] · 10 months ago
-
6e15b84 ignore fact creation timestamp comparison in test_update_schedule (#3241) by Daniel Matthews · 10 months ago
-
e28b4c2 Bump js-yaml from 4.1.0 to 4.1.1 (#3229) by dependabot[bot] · 10 months ago
-
72a0317 Bump braces from 3.0.2 to 3.0.3 (#3003) by dependabot[bot] · 10 months ago
-
cf7c441 Bump aiohttp from 3.12.14 to 3.13.3 (#3239) by dependabot[bot] · 10 months ago
-
b0cf23c update lxml requirement to match svglib dependency (#3238) by Daniel Matthews · 10 months ago
-
950a52b Fix typo in feature request template (#3240) by Chris Lenk · 10 months ago
-
258d141 Bump marshmallow from 3.20.1 to 3.26.2 (#3236) by dependabot[bot] · 10 months ago
-
7c2936e Fix empty Everything Bagel adversary (replace !='training' with =='training') (#3234) by Louis · 10 months ago
-
806d63a Remove auto assigned responders (#3231) by Chris Lenk · 11 months ago
-
c2fbedb fix asyncmock and atomic planner test (#3219) by Daniel Matthews · 11 months ago
-
fa8a44c Update Magma Submodule (#3225) by Ricky Chen · 12 months ago
-
54dd264 set finished and cleanup state properly for operations (#3214) by Daniel Matthews · 1 year ago
-
0ff0bff don't override coverage path for sonar (#3216) by Daniel Matthews · 1 year ago
-
38bc3d4 ignore fact creation timestamp comparison in scheduling unit test (#3215) by Daniel Matthews · 1 year ago
-
5eb0f29 remove python 3.9 from tox (#3210) by Daniel Matthews · 1 year ago
-
802589f Fix Data Loading Issue (#3207) by Devon Colmer · 1 year, 1 month ago
-
e626e3e update installation info (#3199) by Daniel Matthews · 1 year, 1 month ago
-
5849e3c Use updated golang version in dockerfile (#3202) by Daniel Matthews · 1 year, 1 month ago
-
18529aa fix(3078, 3079): Resolve issues in Operations API Manager and Plugin Hooks (#3187) by Ricky Chen · 1 year, 1 month ago
-
a12cab9 Refactor SonarQube scan for forked PRs by deacon-mp · 1 year, 1 month ago
-
29a83a5 Enable SonarQube scan for forked PRs by deacon-mp · 1 year, 1 month ago
-
29f7170 Disable SonarQube scan for forked pull requests by deacon-mp · 1 year, 1 month ago
-
74fb323 Delete .github/workflows/sonar-fork-pr.yml by deacon-mp · 1 year, 1 month ago
-
1bd1815 Deacon mp patch SonarC (#3213) by deacon-mp · 1 year, 1 month ago
-
e394b03 Add SonarQube workflow for forked pull requests by deacon-mp · 1 year, 1 month ago
-
4f7432b Enhance DELETE Payload Sanitization in API Handler (#3188) by Ricky Chen · 1 year, 1 month ago
-
f1bb6c3 Bump SonarSource/sonarqube-scan-action in /.github/workflows (#3209) by dependabot[bot] · 1 year, 1 month ago
-
b4d8c37 Switch to SonarQube (#3201) by Daniel Matthews · 1 year, 1 month ago
-
3b796f3 Bump aiohttp from 3.10.11 to 3.12.14 (#3189) by dependabot[bot] · 1 year, 2 months ago
-
4935b8a Merge pull request #3197 from HackedRico/fix-docker-workflow by Daniel Matthews · 1 year, 2 months ago
-
cffbedd fix!: Docker Workflow indentation by Ricky · 1 year, 2 months ago
-
3917b80 Update tox.ini by deacon-mp · 1 year, 2 months ago
-
032ec16 Merge pull request #3178 from mitre/dependabot/pip/setuptools-78.1.1 by deacon-mp · 1 year, 4 months ago
-
48447d2 Update security.yml by deacon-mp · 1 year, 4 months ago