1341404568
- S4: bump jinja2>=3.1.4, python-multipart>=0.0.18, httpx>=0.28.0
- S5: _detect_ecosystem — DEFAULT_ECOSYSTEM для неизвестных форматов
- S6: harvester — log.exception() вместо log.error()
- S8: _scan_component — urlencode параметров
- P1: scanner — proc.kill() при таймауте
- P3: api_packages — selectinload(Scan.findings), убран N+1
- P4+P5: утечка _url_locks и _llm_locks при early return
- P6: DB reaper — сброс {'status':'analyzing'} при старте
- UI: htmx-пагинация, фильтры не теряют flagged, 404 с layout
- UI: мобильные таблицы overflow-x, полная стата на дашборде
- UI: i18n статусов в _status_badge, urlencode package_name
- 16 новых тестов: analyze endpoint (6), scanner errors (4),
webhook signature (2), llm client (4)
55 lines
1.6 KiB
Python
55 lines
1.6 KiB
Python
"""REST API for findings (across all scans)."""
|
|
|
|
from fastapi import APIRouter, Depends, Query
|
|
from sqlalchemy import func, select
|
|
from sqlalchemy.ext.asyncio import AsyncSession
|
|
|
|
from ..constants import (
|
|
DEFAULT_OFFSET,
|
|
DEFAULT_PAGE_SIZE,
|
|
JSON_PATH_RULE,
|
|
JSON_PATH_SEVERITY,
|
|
MAX_PAGE_SIZE,
|
|
)
|
|
from ..db.engine import get_session
|
|
from ..db.models import Finding
|
|
|
|
router = APIRouter(prefix="/api/v1/findings", tags=["findings"])
|
|
|
|
|
|
@router.get("")
|
|
async def list_findings(
|
|
limit: int = Query(DEFAULT_PAGE_SIZE, le=MAX_PAGE_SIZE),
|
|
offset: int = Query(DEFAULT_OFFSET, ge=0),
|
|
rule: str | None = Query(None),
|
|
severity: str | None = Query(None),
|
|
scan_id: int | None = Query(None),
|
|
session: AsyncSession = Depends(get_session),
|
|
):
|
|
q = select(Finding)
|
|
if rule:
|
|
q = q.where(func.json_extract(Finding.data, JSON_PATH_RULE) == rule)
|
|
if severity:
|
|
q = q.where(func.json_extract(Finding.data, JSON_PATH_SEVERITY) == severity)
|
|
if scan_id:
|
|
q = q.where(Finding.scan_id == scan_id)
|
|
|
|
total = await session.scalar(select(func.count()).select_from(q.subquery()))
|
|
findings = (await session.execute(q.offset(offset).limit(limit))).scalars().all()
|
|
|
|
return {
|
|
"total": total,
|
|
"limit": limit,
|
|
"offset": offset,
|
|
"findings": [
|
|
{
|
|
"id": f.id,
|
|
"scan_id": f.scan_id,
|
|
**f.data,
|
|
"report": f.report,
|
|
"created_at": f.created_at.isoformat() if f.created_at else None,
|
|
}
|
|
for f in findings
|
|
],
|
|
}
|