feat: Security-as-Code for Provider Management (Closes #11)#53

Merged

sangalo20 merged 20 commits into

mainfrom

feat/issue-11-security-as-code

May 5, 2026

Commits on May 5, 2026

feat: implement security-as-code and audit logging (Issue #11)
sangalo20
committed
fix(review): address anti-gravity review feedback for Issue #11
sangalo20
committed
docs: add Security-as-Code and Audit Log documentation (Issue #11)
sangalo20
committed
fix(copilot-review): address all 10 Copilot PR comments
sangalo20
committed
fix(ci): use repo comparison to guard plan step for forked PRs
sangalo20
committed
fix(cli): fetch full profile for accurate drift detection
sangalo20
committed
fix(cli): fail fast on unset environment variables during manifest apply
sangalo20
committed
fix(cli): use PATCH instead of PUT to prevent nulling omitted columns
sangalo20
committed
fix(audit): return json.Marshal errors instead of silently discarding
sangalo20
committed
docs: align audit event types with actual code emissions
sangalo20
committed
docs: fix audit endpoint path in security-model.md (/v1/audit → /audit)
sangalo20
committed
docs: fix providers endpoint path in security-as-code.md (/v1/providers → /providers)
sangalo20
committed
perf(cli): fetch provider profiles concurrently with bounded worker pool
sangalo20
committed
feat(cli): show field-level diff in plan output for UPDATE actions
sangalo20
committed
chore(cli): run go mod tidy to fix indirect annotation on yaml.v3
sangalo20
committed
fix(ci): pass provider credential secrets to CLI workflow env
sangalo20
committed
chore: remove CI workflow from open repo, update docs
sangalo20
committed
fix: address Copilot review round 2 (14 comments)
sangalo20
committed
fix: address Copilot review round 3 (5 comments)
sangalo20
committed
fix: final Copilot review pass
sangalo20
committed