feat: add exploit-intelligence job polling, configuration & API endpoints#2464

Open

Strum355 wants to merge 25 commits into

guacsec:feature/exploit-intelligence-integrationfrom

Strum355:TC-4677

Commits on Jul 16, 2026

feat(exploit-intelligence): add orchestration module with API endpoints
Strum355
committed
fix(exploit-intelligence): add polling timeout, job deduplication, and integration tests

Strum355
and
claude
committed
fix(exploit-intelligence): expose finding as typed enum in API response

Strum355
and
claude
committed
fix(exploit-intelligence): replace fragile JSON pointer parsing with typed structs

Strum355
and
claude
committed
fix(exploit-intelligence): configure HTTP client with timeouts and connection pooling

Strum355
and
claude
committed
fix(exploit-intelligence): add OIDC client credentials auth with token refresh

Strum355
and
claude
committed
fix(exploit-intelligence): add retry logic with exponential backoff

Strum355
and
claude
committed
fix(exploit-intelligence): recover orphaned jobs after server restart

Strum355
and
claude
committed
feat(exploit-intelligence): add multi-component SPDX product flow
Strum355
committed
feat(exploit-intelligence): add separate UI URL config for report deep-links

Strum355
and
claude
committed
fix(exploit-intelligence): address review findings across module

Strum355
and
claude
committed
fix(exploit-intelligence): rename component_purl to component_ref and fix SubmissionFailure deserialization

Strum355
and
claude
committed
fix(exploit-intelligence): case-insensitive finding status comparison

Strum355
and
claude
committed
feat(exploit-intelligence): adapt orchestration to unified entity schema

Strum355
and
claude
committed
refactor(exploit-intelligence): use backon crate for retry and polling

Strum355
and
claude
committed
refactor(exploit-intelligence): move business logic from endpoints to runner module

Strum355
and
claude
committed
refactor(exploit-intelligence): make retry/poll values configurable with humantime

Strum355
and
claude
committed
feat(exploit-intelligence): add heartbeat locking for multi-instance safety

Strum355
and
claude
committed
fix(exploit-intelligence): replace expect() with error propagation in OIDC client builder

Strum355
and
claude
committed
refactor(exploit-intelligence): replace custom OIDC with existing trustify-auth infrastructure

Strum355
and
claude
committed
refactor(exploit-intelligence): replace heartbeat with PostgreSQL job queue pattern

Strum355
and
claude
committed
refactor(exploit-intelligence): address code style review comments

Strum355
and
claude
committed
chore: bump migration num and address more comments
Strum355
committed
fix(exploit-intelligence): use ActiveModel for single-row updates and fix enum casts

Strum355
and
claude
committed

Commits on Jul 17, 2026

feat(exploit-intelligence): add excluded component tracking, improve error handling and job completion logic

Strum355
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat: add exploit-intelligence job polling, configuration & API endpoints#2464

feat: add exploit-intelligence job polling, configuration & API endpoints#2464
Strum355 wants to merge 25 commits into
guacsec:feature/exploit-intelligence-integrationfrom
Strum355:TC-4677

Commits on Jul 16, 2026

feat(exploit-intelligence): add orchestration module with API endpoints

fix(exploit-intelligence): add polling timeout, job deduplication, and integration tests

fix(exploit-intelligence): expose finding as typed enum in API response

fix(exploit-intelligence): replace fragile JSON pointer parsing with typed structs

fix(exploit-intelligence): configure HTTP client with timeouts and connection pooling

fix(exploit-intelligence): add OIDC client credentials auth with token refresh

fix(exploit-intelligence): add retry logic with exponential backoff

fix(exploit-intelligence): recover orphaned jobs after server restart

feat(exploit-intelligence): add multi-component SPDX product flow

feat(exploit-intelligence): add separate UI URL config for report deep-links

fix(exploit-intelligence): address review findings across module

fix(exploit-intelligence): rename component_purl to component_ref and fix SubmissionFailure deserialization

fix(exploit-intelligence): case-insensitive finding status comparison

feat(exploit-intelligence): adapt orchestration to unified entity schema

refactor(exploit-intelligence): use backon crate for retry and polling

refactor(exploit-intelligence): move business logic from endpoints to runner module

refactor(exploit-intelligence): make retry/poll values configurable with humantime

feat(exploit-intelligence): add heartbeat locking for multi-instance safety

fix(exploit-intelligence): replace expect() with error propagation in OIDC client builder

refactor(exploit-intelligence): replace custom OIDC with existing trustify-auth infrastructure

refactor(exploit-intelligence): replace heartbeat with PostgreSQL job queue pattern

refactor(exploit-intelligence): address code style review comments

chore: bump migration num and address more comments

fix(exploit-intelligence): use ActiveModel for single-row updates and fix enum casts

Commits on Jul 17, 2026

feat(exploit-intelligence): add excluded component tracking, improve error handling and job completion logic