feat(cloud-security): cloud tests v2 — services, remediation, multi-provider adapters#2493

Open

tofikwest wants to merge 52 commits intomainfrom

tofik/q1-cloud-tests-v2

Commits on Apr 9, 2026

feat(cloud-security): cloud tests v2 — services, remediation, and multi-provider adapters

tofikwest
and
claude
committed
fix(cloud-security): address Bugbot review findings

tofikwest
and
claude
committed
Merge branch 'main' into tofik/q1-cloud-tests-v2
tofikwest
authored
fix(cloud-security): address CodeQL URL sanitization and role escalation

tofikwest
and
claude
committed
fix(cloud-security): address remaining review findings

tofikwest
and
claude
committed
fix(auth): validate x-user-id header against organization membership

tofikwest
and
claude
committed
fix(cloud-security): address final Bugbot review findings

tofikwest
and
claude
committed
fix(cloud-security): fix plan cache key, wildcard IAM, and async poll

tofikwest
and
claude
committed
fix(cloud-security): scope check result queries by connection

tofikwest
and
claude
committed
fix(cloud-security): catch async poll exceptions in Azure executor

tofikwest
and
claude
committed
fix(cloud-security): use composite plan cache key for AWS remediation

tofikwest
and
claude
committed
fix(cloud-security): remove unused @UserId from scan, validate subscriptionId

tofikwest
and
claude
committed
fix(cloud-security): fix undeclared userId crash and ARM token for Graph

tofikwest
and
claude
committed
fix(cloud-security): remove Azure self-healing role grant entirely

tofikwest
and
claude
committed
fix(cloud-security): handle malformed AI-generated URLs in GCP preview

tofikwest
and
claude
committed

Commits on Apr 10, 2026

Commits on Apr 11, 2026

fix(cloud-security): remove redundant needs_permissions check in retry else branch

tofikwest
and
claude
committed

Commits on Apr 13, 2026