ahmido
a449ecec5b
Beschreibung Implementiert das Drift MVP Feature (Spec: 044-drift-mvp) mit Fokus auf automatische Drift-Erkennung zwischen Inventory Sync Runs und Bulk-Triage für Findings. Was wurde implementiert? Drift-Erkennung: Vergleicht Policy-Snapshots, Assignments und Scope Tags zwischen Baseline- und Current-Runs. Deterministische Fingerprints verhindern Duplikate. Findings UI: Neue Filament Resource für Findings mit Listen- und Detail-Ansicht. DB-only Diffs (keine Graph-Calls zur Laufzeit). Bulk Acknowledge: "Acknowledge selected" (Bulk-Action auf der Liste) "Acknowledge all matching" (Header-Action, respektiert aktuelle Filter; Type-to-Confirm bei >100 Findings) Scope Tag Fix: Behebt False Positives bei Legacy-Daten ohne scope_tags.ids (inferiert Default-Werte). Authorization: Tenant-isoliert, Rollen-basiert (Owner/Manager/Operator können acknowledge). Tests: Vollständige Pest-Coverage (28 Tests, 347 Assertions) für Drift-Logik, UI und Bulk-Actions. Warum diese Änderungen? Problem: Keine automatisierte Drift-Erkennung; manuelle Triage bei vielen Findings ist mühsam. Lösung: Async Drift-Generierung mit persistenter Findings-Tabelle. Safe Bulk-Tools für Massen-Triage ohne Deletes. Konformität: Folgt AGENTS.md Workflow, Spec-Kit (Tasks + Checklists abgehakt), Laravel/Filament Best Practices. Technische Details Neue Dateien: ~40 (Models, Services, Tests, Views, Migrations) Änderungen: Filament Resources, Jobs, Policies DB: Neue findings Tabelle (JSONB für Evidence, Indexes für Performance) Tests: ./vendor/bin/sail artisan test tests/Feature/Drift --parallel → 28 passed Migration: ./vendor/bin/sail artisan migrate (neue Tabelle + Indexes) Screenshots / Links Spec: spec.md Tasks: tasks.md (alle abgehakt) UI: Findings-Liste mit Bulk-Actions; Detail-View mit Diffs Checklist Tests passieren (parallel + serial) Code formatiert (./vendor/bin/pint --dirty) Migration reversibel Tenant-Isolation enforced No Graph-Calls in Views Authorization checks Spec + Tasks aligned Deployment Notes Neue Migration: create_findings_table Neue Permissions: drift.view, drift.acknowledge Queue-Job: GenerateDriftFindingsJob (async, deduped)
108 lines
4.2 KiB
PHP
108 lines
4.2 KiB
PHP
<x-filament::page>
|
|
<x-filament::section>
|
|
<div class="flex flex-col gap-3">
|
|
<div class="text-sm text-gray-600 dark:text-gray-300">
|
|
Review new drift findings between the last two inventory sync runs for the current scope.
|
|
</div>
|
|
|
|
@if (filled($scopeKey))
|
|
<div class="text-sm text-gray-600 dark:text-gray-300">
|
|
Scope: {{ $scopeKey }}
|
|
@if ($baselineRunId && $currentRunId)
|
|
· Baseline
|
|
@if ($this->getBaselineRunUrl())
|
|
<a class="text-primary-600 hover:underline" href="{{ $this->getBaselineRunUrl() }}">
|
|
#{{ $baselineRunId }}
|
|
</a>
|
|
@else
|
|
#{{ $baselineRunId }}
|
|
@endif
|
|
@if (filled($baselineFinishedAt))
|
|
({{ $baselineFinishedAt }})
|
|
@endif
|
|
· Current
|
|
@if ($this->getCurrentRunUrl())
|
|
<a class="text-primary-600 hover:underline" href="{{ $this->getCurrentRunUrl() }}">
|
|
#{{ $currentRunId }}
|
|
</a>
|
|
@else
|
|
#{{ $currentRunId }}
|
|
@endif
|
|
@if (filled($currentFinishedAt))
|
|
({{ $currentFinishedAt }})
|
|
@endif
|
|
@endif
|
|
</div>
|
|
@endif
|
|
|
|
@if ($state === 'blocked')
|
|
<x-filament::badge color="gray">
|
|
Blocked
|
|
</x-filament::badge>
|
|
|
|
@if (filled($message))
|
|
<div class="text-sm text-gray-600 dark:text-gray-300">
|
|
{{ $message }}
|
|
</div>
|
|
@endif
|
|
@elseif ($state === 'generating')
|
|
<x-filament::badge color="warning">
|
|
Generating
|
|
</x-filament::badge>
|
|
|
|
<div class="text-sm text-gray-600 dark:text-gray-300">
|
|
Drift generation has been queued. Refresh this page once it finishes.
|
|
</div>
|
|
|
|
@if ($this->getBulkRunUrl())
|
|
<div class="text-sm">
|
|
<a class="text-primary-600 hover:underline" href="{{ $this->getBulkRunUrl() }}">
|
|
View run #{{ $bulkOperationRunId }}
|
|
</a>
|
|
</div>
|
|
@endif
|
|
@elseif ($state === 'error')
|
|
<x-filament::badge color="danger">
|
|
Error
|
|
</x-filament::badge>
|
|
|
|
@if (filled($message))
|
|
<div class="text-sm text-gray-600 dark:text-gray-300">
|
|
{{ $message }}
|
|
</div>
|
|
@endif
|
|
|
|
@if ($this->getBulkRunUrl())
|
|
<div class="text-sm">
|
|
<a class="text-primary-600 hover:underline" href="{{ $this->getBulkRunUrl() }}">
|
|
View run #{{ $bulkOperationRunId }}
|
|
</a>
|
|
</div>
|
|
@endif
|
|
@elseif ($state === 'ready')
|
|
<div class="flex flex-wrap gap-3">
|
|
<x-filament::badge color="success">
|
|
New: {{ (int) ($statusCounts['new'] ?? 0) }}
|
|
</x-filament::badge>
|
|
</div>
|
|
|
|
@if (filled($message))
|
|
<div class="text-sm text-gray-600 dark:text-gray-300">
|
|
{{ $message }}
|
|
</div>
|
|
@endif
|
|
@else
|
|
<x-filament::badge color="gray">
|
|
Ready
|
|
</x-filament::badge>
|
|
@endif
|
|
|
|
<div class="flex flex-wrap gap-3">
|
|
<x-filament::button tag="a" :href="$this->getFindingsUrl()">
|
|
Findings
|
|
</x-filament::button>
|
|
</div>
|
|
</div>
|
|
</x-filament::section>
|
|
</x-filament::page>
|