Repository navigation
feat(reports): point-in-time compliance reports with hashed evidence … - #197
Merged
Merged
Conversation
eniac111
force-pushed
the
feat/compliance-reports
branch
from
October 28, 2026 22:17
6e2568b to
4c7b44e
Compare
Add the web UI for compliance reports, a Bor Enterprise feature, and the
generic extension hooks an enterprise module needs to provide it. The
community server contains no report implementation; the pages are shown
only when the server advertises the reports edition feature, and a
notice explains the feature otherwise. The live Compliance page is
unchanged and stays in every edition.
Edition and extension API (pkg/edition, pkg/ext, internal/exthost):
- edition.ComplianceReports ("reports")
- HandleUser for routes that authorize per request, with Authorize and
DenyOutOfScope returning the caller's node-group scope
- RegisterScopableResource; authz scopable resources are now registrable
- Agents().Resync to ask an agent for a fresh policy sync
- RegisterComplianceListener, fed by the compliance upsert, which now
returns the previous status so listeners see changes only
- SIEM() to format and forward events through the configured syslog
sinks (syslog ForwardRaw and Format)
- PKI() with pki.IssueDocumentSigningCert: certificates with the
id-kp-documentSigning usage (RFC 9336) and no TLS usages
- RegisterMetrics to add Prometheus collectors to /metrics; a collector
the registry rejects is logged and left out
Web UI: Fleet -> Reports with the report list, generate dialog, report
detail (summary, nodes, results, controls, compare, sign-off,
downloads), schedules and waivers tabs, scope fields, a compliance trend
chart and a dashboard trend card, and report actions on the Compliance
page. Extension settings panels tolerate tables without rows. The
bundled frontend is rebuilt.
Docs: reports user guide, server configuration, permissions, editions,
compliance, audit log and monitoring pages.
Open the compliance reports page with the Bor Enterprise notice, label the navigation entry "(Enterprise)" and the audit log's compliance reports row "(Bor Enterprise)", so readers see the edition before the feature description.
eniac111
force-pushed
the
feat/compliance-reports
branch
from
October 28, 2026 22:38
4c7b44e to
3fb1bc9
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.