jramos/cve-dashboard
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Release v2.5.0 — NetBox integration, quick-create CVE, User Guide, Admin tools

Browse Source 
New features:
- NetBox device inventory API framework (future Granite replacement)
- Quick-create CVE from tooltip on missing CVEs
- Auto-convert .msg attachments to PDF for FP workflows
- APPID + APPREFID searchable picker in Granite Loader
- BU Lookup tool in Admin panel
- In-app User Guide with TOC navigation
- User Management search/filter/sort
- Admin scope toggle for team-filtered views
- Dual-port TLS support for FQDN access

Fixes:
- EQUIP_INST_ID extraction fallbacks
- APPID picker crash
- BU reassignment banner accuracy
- User Guide TOC scroll navigation
- CI verify jobs HTTPS support
This commit is contained in:
Jordan Ramos
2026-07-06 15:22:06 -06:00
parent 121d044fb6
commit 94718cbdde
2 changed files with 66 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

33
CHANGELOG.md
View File

@@ -6,6 +6,39 @@ Format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and this
---
## [v2.5.0] — 2026-07-06
### Added
- **NetBox device inventory integration** — new API framework (`/api/netbox`) for managing device records in NetBox as a future replacement for Granite. Supports full CRUD on devices, IP-to-device cross-reference, and reference data lookups (sites, device types, roles). Optional — gracefully disabled when env vars are unset.
- **Quick-create CVE from tooltip** — when a CVE referenced in an Ivanti finding doesn't exist in the local database, users can create it directly from the hover tooltip with one click.
- **Auto-convert .msg attachments to PDF** — Outlook .msg files attached to Ivanti FP workflows are automatically converted to PDF before upload to the Ivanti API.
- **APPID + APPREFID searchable picker** — Granite Loader now includes a searchable dropdown for selecting application IDs, with common APPIDs pinned to the top.
- **BU Lookup tool** — Admin panel tool for querying SVP org hierarchy and BU discovery.
- **In-app User Guide** — comprehensive end-user guide accessible from the user menu, with smooth-scroll TOC navigation.
- **User Management search/filter/sort** — Admin panel user table now supports searching by name/username, filtering by group/team, and column sorting.
- **Admin scope toggle** — Admin users can filter dashboard data by specific teams via `?teams=` parameter for targeted views.
- **Dual-port TLS support** — FQDN access via HTTPS on a second port alongside the primary HTTP port.
- **DNS migration plan** — documented migration path for `aegis.charterlab.com` FQDN.
### Changed
- **AEGIS shield logo** — replaced the default React favicon with the AEGIS brand icon.
- **Activity feed** — admin-only actions (impersonation events) are hidden from non-Admin users.
- **Anomaly banner** — BU reassignment detail now fetches by count instead of time window for more accurate display.
- **CARD enrichment** — skips already-enriched devices on retry to avoid redundant API calls.
- **Deploy pipeline** — excludes `backend/certs` from rsync to preserve CA certificates on target hosts; regenerates TLS certs if missing after rsync; verify jobs support HTTPS with HTTP fallback.
### Fixed
- **EQUIP_INST_ID extraction** — added fallback sources (card_flags, ivanti_assets, top-level asset fields) for cases where NCIM/Granite data is missing.
- **APPID picker crash** — fixed SearchableSelect to use plain strings instead of objects.
- **BU reassignment detail display** — corrected the anomaly banner detail view to show accurate counts.
- **User Guide TOC** — added heading IDs and smooth scroll anchor links for proper navigation.
- **CI verify jobs** — support HTTPS endpoints with graceful fallback to HTTP.
---
## [v2.4.0] — 2026-06-24
### Added

33
docs/release-notes/v2.5.0.md Normal file
View File

@@ -0,0 +1,33 @@
# AEGIS Security Dashboard — v2.5.0
**Released:** 2026-07-06
## What's New
- **NetBox inventory integration** — the dashboard now connects to NetBox for device inventory management, laying the groundwork for replacing Granite loader sheets with direct API-driven updates. Look up devices by IP, search by name or serial, and manage device records directly.
- **Quick-create CVE from findings** — when hovering over a CVE in the triage queue that isn't tracked yet, you can now create it in one click without leaving the page.
- **Automatic .msg to PDF conversion** — Outlook .msg file attachments are automatically converted to PDF when submitting False Positive workflows, so Ivanti always receives a readable format.
- **Application ID picker** — the Granite Loader now includes a searchable dropdown for selecting APP_ID and APPREFID values, with your most-used applications pinned to the top.
- **BU Lookup tool** — Admins can now explore SVP org hierarchy and discover BU assignments from the Admin panel.
- **In-app User Guide** — a comprehensive guide for security engineers is now accessible from the user menu, with a clickable table of contents.
- **User Management improvements** — the Admin user table now supports searching, filtering by group or team, and column sorting.
- **Admin team scope toggle** — Admins can now filter the dashboard to show only specific teams' data for focused reviews.
## Improvements
- **AEGIS branding** — the browser tab now shows the AEGIS shield logo instead of the default React icon.
- **Faster CARD enrichment** — devices that are already enriched are skipped on retry, reducing redundant API calls.
- **Cleaner activity feed** — admin-only events (like impersonation) are no longer shown to non-Admin users.
- **Dual-port TLS** — the dashboard now supports HTTPS access on a dedicated port alongside the standard HTTP port for FQDN-based access.
## Fixes
- **EQUIP_INST_ID now resolves from additional data sources** — Granite Loader sheets will populate the equipment instance ID in more cases than before.
- **Application ID picker stability** — resolved a crash that occurred when selecting certain APPID values.
- **BU reassignment banner** — the detail view now shows accurate counts for findings that moved between teams.
- **User Guide navigation** — table of contents links now scroll smoothly to the correct section.
## Notes
- NetBox integration is optional. If your environment does not have NetBox configured, all existing workflows continue unchanged.
- To enable NetBox, set `NETBOX_API_URL` and `NETBOX_API_TOKEN` in your backend environment. Contact your admin for token provisioning.