Releases: Hack23/cia-compliance-manager
Releases · Hack23/cia-compliance-manager
CIA Compliance Manager v1.1.55
Immutable
release. Only release title and notes can be modified.
What's Changed
🏗️ Infrastructure & Performance
- build(deps-dev): bump knip from 6.5.0 to 6.6.0 @dependabot[bot] (#1138)
- build(deps-dev): bump the vitest group with 3 updates @dependabot[bot] (#1137)
- build(deps-dev): bump the tailwindcss group with 2 updates @dependabot[bot] (#1135)
- build(deps-dev): bump typescript-eslint from 8.58.2 to 8.59.0 in the eslint group @dependabot[bot] (#1134)
📝 Documentation
- docs: review and update all 13 ISMS-required documents to v1.1.54 @copilot-swe-agent[bot] (#1136)
📦 Dependencies
- build(deps-dev): bump knip from 6.5.0 to 6.6.0 @dependabot[bot] (#1138)
- build(deps-dev): bump the vitest group with 3 updates @dependabot[bot] (#1137)
- build(deps-dev): bump the tailwindcss group with 2 updates @dependabot[bot] (#1135)
- build(deps-dev): bump typescript-eslint from 8.58.2 to 8.59.0 in the eslint group @dependabot[bot] (#1134)
📦 npm Package
npm install cia-compliance-managerVerify provenance: npm audit signatures
📊 Release Metrics & Evidence
All test reports, coverage metrics, and API documentation are generated during build and available in the Documentation Hub.
🔐 Security & Supply Chain Protection
This release includes:
- ✅ SLSA Build Provenance Attestations — Cryptographically signed build provenance
- ✅ Software Bill of Materials (SBOM) — Complete dependency inventory in SPDX format
- ✅ npm Provenance — Package published with npm provenance for supply chain integrity
- ✅ CodeQL Security Scanning — Automated vulnerability detection
- ✅ Dependency Scanning — Continuous vulnerability monitoring with Dependabot
Verify attestations:
gh attestation verify cia-compliance-manager-1.1.55.zip -R Hack23/cia-compliance-managerBrowse attestations: View all attestations
Code Quality & Security Analysis
📋 ISMS Compliance & Policies
Compliance Frameworks
CIA Compliance Manager follows Hack23 AB's comprehensive ISMS with defense-in-depth architecture and documented security controls.
Test Documentation
Compliance Evidence
🏛️ Architecture Documentation
| Document | Description |
|---|---|
| 🏛️ Architecture | System architecture overview |
| 🔒 Security Architecture | Security design and controls |
| 🛡️ Threat Model | Threat analysis and mitigations |
| 📊 Data Model | Data structures and relationships |
| 🔄 Flowchart | Application workflows |
| 📈 State Diagram | State machine documentation |
| 🧠 Mindmap | Conceptual overview |
| 💼 SWOT Analysis | Strategic analysis |
📦 Release Artifacts
| Artifact | Description | Verification |
|---|---|---|
cia-compliance-manager-1.1.55.zip |
Production build | SHA-256 checksum, SLSA attestation |
cia-compliance-manager-1.1.55.spdx.json |
SBOM (SPDX format) | SBOM attestation |
*.intoto.jsonl |
SLSA attestations | gh attestation verify |
| npm package | cia-compliance-manager |
npm provenance |
🚀 Deployment & Links
- Live Application: https://ciacompliancemanager.com
- API Documentation: https://ciacompliancemanager.com/docs/api/
- npm Package: https://www.npmjs.com/package/cia-compliance-manager
- GitHub Repository: https://github.com/Hack23/cia-compliance-manager
Hack23 Ecosystem
| Project | Live Site | API Docs |
|---|---|---|
| CIA Platform | — | — |
| CIA Compliance Manager | ciacompliancemanager.com | API Docs |
| Riksdagsmonitor | riksdagsmonitor.com | API Docs |
| [EU Parliament Monitor](https://github.com/Hack23/European-Parliament-MC... |
Contributors
pethers and dependabot
Assets 7
CIA Compliance Manager v1.1.54
Immutable
release. Only release title and notes can be modified.
What's Changed
🏗️ Infrastructure & Performance
- build(deps-dev): bump knip from 6.4.1 to 6.5.0 @dependabot[bot] (#1133)
- build(deps): bump step-security/harden-runner from 2.18.0 to 2.19.0 @dependabot[bot] (#1132)
- build(deps-dev): bump vite from 8.0.8 to 8.0.9 in the vite group @dependabot[bot] (#1131)
- build(deps): bump actions/setup-node from 6.3.0 to 6.4.0 @dependabot[bot] (#1130)
🔒 Security & Compliance
- build(deps): bump step-security/harden-runner from 2.18.0 to 2.19.0 @dependabot[bot] (#1132)
- build(deps): bump actions/setup-node from 6.3.0 to 6.4.0 @dependabot[bot] (#1130)
📦 Dependencies
- build(deps-dev): bump knip from 6.4.1 to 6.5.0 @dependabot[bot] (#1133)
- build(deps): bump step-security/harden-runner from 2.18.0 to 2.19.0 @dependabot[bot] (#1132)
- build(deps-dev): bump vite from 8.0.8 to 8.0.9 in the vite group @dependabot[bot] (#1131)
- build(deps): bump actions/setup-node from 6.3.0 to 6.4.0 @dependabot[bot] (#1130)
📦 npm Package
npm install cia-compliance-managerVerify provenance: npm audit signatures
📊 Release Metrics & Evidence
All test reports, coverage metrics, and API documentation are generated during build and available in the Documentation Hub.
🔐 Security & Supply Chain Protection
This release includes:
- ✅ SLSA Build Provenance Attestations — Cryptographically signed build provenance
- ✅ Software Bill of Materials (SBOM) — Complete dependency inventory in SPDX format
- ✅ npm Provenance — Package published with npm provenance for supply chain integrity
- ✅ CodeQL Security Scanning — Automated vulnerability detection
- ✅ Dependency Scanning — Continuous vulnerability monitoring with Dependabot
Verify attestations:
gh attestation verify cia-compliance-manager-1.1.54.zip -R Hack23/cia-compliance-managerBrowse attestations: View all attestations
Code Quality & Security Analysis
📋 ISMS Compliance & Policies
Compliance Frameworks
CIA Compliance Manager follows Hack23 AB's comprehensive ISMS with defense-in-depth architecture and documented security controls.
Test Documentation
Compliance Evidence
🏛️ Architecture Documentation
| Document | Description |
|---|---|
| 🏛️ Architecture | System architecture overview |
| 🔒 Security Architecture | Security design and controls |
| 🛡️ Threat Model | Threat analysis and mitigations |
| 📊 Data Model | Data structures and relationships |
| 🔄 Flowchart | Application workflows |
| 📈 State Diagram | State machine documentation |
| 🧠 Mindmap | Conceptual overview |
| 💼 SWOT Analysis | Strategic analysis |
📦 Release Artifacts
| Artifact | Description | Verification |
|---|---|---|
cia-compliance-manager-1.1.54.zip |
Production build | SHA-256 checksum, SLSA attestation |
cia-compliance-manager-1.1.54.spdx.json |
SBOM (SPDX format) | SBOM attestation |
*.intoto.jsonl |
SLSA attestations | gh attestation verify |
| npm package | cia-compliance-manager |
npm provenance |
🚀 Deployment & Links
- Live Application: https://ciacompliancemanager.com
- API Documentation: https://ciacompliancemanager.com/docs/api/
- npm Package: https://www.npmjs.com/package/cia-compliance-manager
- GitHub Repository: https://github.com/Hack23/cia-compliance-manager
Hack23 Ecosystem
| Project | Live Site | API Docs |
|---|---|---|
| CIA Platform | — | — |
| CIA Compliance Manager | ciacompliancemanager.com | API Docs |
| Riksdagsmonitor | riksdagsmonitor.com | [API Docs](https:/... |
Contributors
pethers and dependabot
Assets 7
CIA Compliance Manager v1.1.53
Immutable
release. Only release title and notes can be modified.
What's Changed
🏗️ Infrastructure & Performance
- build(deps-dev): bump eslint from 10.2.0 to 10.2.1 in the eslint group @dependabot[bot] (#1129)
- docs(agents,skills): extend ISMS policy integration and Copilot coding agent capabilities @copilot-swe-agent[bot] (#1128)
- build(deps-dev): bump typescript from 6.0.2 to 6.0.3 @dependabot[bot] (#1127)
- build(deps-dev): bump cypress from 15.13.1 to 15.14.0 in the cypress group @dependabot[bot] (#1126)
📝 Documentation
- docs(agents,skills): extend ISMS policy integration and Copilot coding agent capabilities @copilot-swe-agent[bot] (#1128)
📦 Dependencies
- build(deps-dev): bump eslint from 10.2.0 to 10.2.1 in the eslint group @dependabot[bot] (#1129)
- build(deps-dev): bump typescript from 6.0.2 to 6.0.3 @dependabot[bot] (#1127)
- build(deps-dev): bump cypress from 15.13.1 to 15.14.0 in the cypress group @dependabot[bot] (#1126)
📦 npm Package
npm install cia-compliance-managerVerify provenance: npm audit signatures
📊 Release Metrics & Evidence
All test reports, coverage metrics, and API documentation are generated during build and available in the Documentation Hub.
🔐 Security & Supply Chain Protection
This release includes:
- ✅ SLSA Build Provenance Attestations — Cryptographically signed build provenance
- ✅ Software Bill of Materials (SBOM) — Complete dependency inventory in SPDX format
- ✅ npm Provenance — Package published with npm provenance for supply chain integrity
- ✅ CodeQL Security Scanning — Automated vulnerability detection
- ✅ Dependency Scanning — Continuous vulnerability monitoring with Dependabot
Verify attestations:
gh attestation verify cia-compliance-manager-1.1.53.zip -R Hack23/cia-compliance-managerBrowse attestations: View all attestations
Code Quality & Security Analysis
📋 ISMS Compliance & Policies
Compliance Frameworks
CIA Compliance Manager follows Hack23 AB's comprehensive ISMS with defense-in-depth architecture and documented security controls.
Test Documentation
Compliance Evidence
🏛️ Architecture Documentation
| Document | Description |
|---|---|
| 🏛️ Architecture | System architecture overview |
| 🔒 Security Architecture | Security design and controls |
| 🛡️ Threat Model | Threat analysis and mitigations |
| 📊 Data Model | Data structures and relationships |
| 🔄 Flowchart | Application workflows |
| 📈 State Diagram | State machine documentation |
| 🧠 Mindmap | Conceptual overview |
| 💼 SWOT Analysis | Strategic analysis |
📦 Release Artifacts
| Artifact | Description | Verification |
|---|---|---|
cia-compliance-manager-1.1.53.zip |
Production build | SHA-256 checksum, SLSA attestation |
cia-compliance-manager-1.1.53.spdx.json |
SBOM (SPDX format) | SBOM attestation |
*.intoto.jsonl |
SLSA attestations | gh attestation verify |
| npm package | cia-compliance-manager |
npm provenance |
🚀 Deployment & Links
- Live Application: https://ciacompliancemanager.com
- API Documentation: https://ciacompliancemanager.com/docs/api/
- npm Package: https://www.npmjs.com/package/cia-compliance-manager
- GitHub Repository: https://github.com/Hack23/cia-compliance-manager
Hack23 Ecosystem
| Project | Live Site | API Docs |
|---|---|---|
| CIA Platform | — | — |
| CIA Compliance Manager | ciacompliancemanager.com | API Docs |
| Riksdagsmonitor | riksdagsmonitor.com | API Docs |
| EU Parliament Monitor | [euparliame... |
Contributors
pethers and dependabot
Assets 6
CIA Compliance Manager v1.1.52
Immutable
release. Only release title and notes can be modified.
What's Changed
🏗️ Infrastructure & Performance
- build(deps): bump github/codeql-action from 4.35.1 to 4.35.2 @dependabot[bot] (#1125)
- build(deps-dev): bump postcss from 8.5.9 to 8.5.10 in the tailwindcss group @dependabot[bot] (#1124)
- build(deps-dev): bump follow-redirects from 1.15.11 to 1.16.0 @dependabot[bot] (#1123)
- build(deps): bump step-security/harden-runner from 2.17.0 to 2.18.0 @dependabot[bot] (#1122)
🔒 Security & Compliance
- build(deps): bump github/codeql-action from 4.35.1 to 4.35.2 @dependabot[bot] (#1125)
- build(deps): bump step-security/harden-runner from 2.17.0 to 2.18.0 @dependabot[bot] (#1122)
📦 Dependencies
- build(deps): bump github/codeql-action from 4.35.1 to 4.35.2 @dependabot[bot] (#1125)
- build(deps-dev): bump postcss from 8.5.9 to 8.5.10 in the tailwindcss group @dependabot[bot] (#1124)
- build(deps-dev): bump follow-redirects from 1.15.11 to 1.16.0 @dependabot[bot] (#1123)
- build(deps): bump step-security/harden-runner from 2.17.0 to 2.18.0 @dependabot[bot] (#1122)
📦 npm Package
npm install cia-compliance-managerVerify provenance: npm audit signatures
📊 Release Metrics & Evidence
All test reports, coverage metrics, and API documentation are generated during build and available in the Documentation Hub.
🔐 Security & Supply Chain Protection
This release includes:
- ✅ SLSA Build Provenance Attestations — Cryptographically signed build provenance
- ✅ Software Bill of Materials (SBOM) — Complete dependency inventory in SPDX format
- ✅ npm Provenance — Package published with npm provenance for supply chain integrity
- ✅ CodeQL Security Scanning — Automated vulnerability detection
- ✅ Dependency Scanning — Continuous vulnerability monitoring with Dependabot
Verify attestations:
gh attestation verify cia-compliance-manager-1.1.52.zip -R Hack23/cia-compliance-managerBrowse attestations: View all attestations
Code Quality & Security Analysis
📋 ISMS Compliance & Policies
Compliance Frameworks
CIA Compliance Manager follows Hack23 AB's comprehensive ISMS with defense-in-depth architecture and documented security controls.
Test Documentation
Compliance Evidence
🏛️ Architecture Documentation
| Document | Description |
|---|---|
| 🏛️ Architecture | System architecture overview |
| 🔒 Security Architecture | Security design and controls |
| 🛡️ Threat Model | Threat analysis and mitigations |
| 📊 Data Model | Data structures and relationships |
| 🔄 Flowchart | Application workflows |
| 📈 State Diagram | State machine documentation |
| 🧠 Mindmap | Conceptual overview |
| 💼 SWOT Analysis | Strategic analysis |
📦 Release Artifacts
| Artifact | Description | Verification |
|---|---|---|
cia-compliance-manager-1.1.52.zip |
Production build | SHA-256 checksum, SLSA attestation |
cia-compliance-manager-1.1.52.spdx.json |
SBOM (SPDX format) | SBOM attestation |
*.intoto.jsonl |
SLSA attestations | gh attestation verify |
| npm package | cia-compliance-manager |
npm provenance |
🚀 Deployment & Links
- Live Application: https://ciacompliancemanager.com
- API Documentation: https://ciacompliancemanager.com/docs/api/
- npm Package: https://www.npmjs.com/package/cia-compliance-manager
- GitHub Repository: https://github.com/Hack23/cia-compliance-manager
Hack23 Ecosystem
| Project | Live Site | API Docs |
|---|---|---|
| CIA Platform | — | — |
| CIA Compliance Manager | ciacompliancemanager.com | API Docs |
| Riksdagsmonitor | [riksda... |
Contributors
pethers and dependabot
Assets 7
CIA Compliance Manager v1.1.51
Immutable
release. Only release title and notes can be modified.
What's Changed
🏗️ Infrastructure & Performance
- build(deps-dev): bump typescript-eslint from 8.58.1 to 8.58.2 in the eslint group @dependabot[bot] (#1121)
- build(deps): bump actions/cache from 5.0.4 to 5.0.5 @dependabot[bot] (#1120)
🔒 Security & Compliance
- build(deps): bump actions/cache from 5.0.4 to 5.0.5 @dependabot[bot] (#1120)
📦 Dependencies
- build(deps-dev): bump typescript-eslint from 8.58.1 to 8.58.2 in the eslint group @dependabot[bot] (#1121)
- build(deps): bump actions/cache from 5.0.4 to 5.0.5 @dependabot[bot] (#1120)
📦 npm Package
npm install cia-compliance-managerVerify provenance: npm audit signatures
📊 Release Metrics & Evidence
All test reports, coverage metrics, and API documentation are generated during build and available in the Documentation Hub.
🔐 Security & Supply Chain Protection
This release includes:
- ✅ SLSA Build Provenance Attestations — Cryptographically signed build provenance
- ✅ Software Bill of Materials (SBOM) — Complete dependency inventory in SPDX format
- ✅ npm Provenance — Package published with npm provenance for supply chain integrity
- ✅ CodeQL Security Scanning — Automated vulnerability detection
- ✅ Dependency Scanning — Continuous vulnerability monitoring with Dependabot
Verify attestations:
gh attestation verify cia-compliance-manager-1.1.51.zip -R Hack23/cia-compliance-managerBrowse attestations: View all attestations
Code Quality & Security Analysis
📋 ISMS Compliance & Policies
Compliance Frameworks
CIA Compliance Manager follows Hack23 AB's comprehensive ISMS with defense-in-depth architecture and documented security controls.
Test Documentation
Compliance Evidence
🏛️ Architecture Documentation
| Document | Description |
|---|---|
| 🏛️ Architecture | System architecture overview |
| 🔒 Security Architecture | Security design and controls |
| 🛡️ Threat Model | Threat analysis and mitigations |
| 📊 Data Model | Data structures and relationships |
| 🔄 Flowchart | Application workflows |
| 📈 State Diagram | State machine documentation |
| 🧠 Mindmap | Conceptual overview |
| 💼 SWOT Analysis | Strategic analysis |
📦 Release Artifacts
| Artifact | Description | Verification |
|---|---|---|
cia-compliance-manager-1.1.51.zip |
Production build | SHA-256 checksum, SLSA attestation |
cia-compliance-manager-1.1.51.spdx.json |
SBOM (SPDX format) | SBOM attestation |
*.intoto.jsonl |
SLSA attestations | gh attestation verify |
| npm package | cia-compliance-manager |
npm provenance |
🚀 Deployment & Links
- Live Application: https://ciacompliancemanager.com
- API Documentation: https://ciacompliancemanager.com/docs/api/
- npm Package: https://www.npmjs.com/package/cia-compliance-manager
- GitHub Repository: https://github.com/Hack23/cia-compliance-manager
Hack23 Ecosystem
🏗️ Built With
- ⚡ Vite 8.x — Lightning-fast build tool
- ⚛️ React 19.x — Modern UI framework
- 🔷 TypeScript 6.0 — Type-safe development
- 📊 Chart.js 4.x — Interactive data visualization
- 🧪 ...
Contributors
pethers and dependabot
Assets 7
CIA Compliance Manager v1.1.50
Immutable
release. Only release title and notes can be modified.
What's Changed
🏗️ Infrastructure & Performance
- build(deps-dev): bump knip from 6.4.0 to 6.4.1 @dependabot[bot] (#1119)
- build(deps-dev): bump globals from 17.4.0 to 17.5.0 @dependabot[bot] (#1118)
- build(deps-dev): bump typedoc from 0.28.18 to 0.28.19 in the documentation group @dependabot[bot] (#1117)
- build(deps-dev): bump knip from 6.3.1 to 6.4.0 @dependabot[bot] (#1116)
📦 Dependencies
- build(deps-dev): bump knip from 6.4.0 to 6.4.1 @dependabot[bot] (#1119)
- build(deps-dev): bump globals from 17.4.0 to 17.5.0 @dependabot[bot] (#1118)
- build(deps-dev): bump typedoc from 0.28.18 to 0.28.19 in the documentation group @dependabot[bot] (#1117)
- build(deps-dev): bump knip from 6.3.1 to 6.4.0 @dependabot[bot] (#1116)
📦 npm Package
npm install cia-compliance-managerVerify provenance: npm audit signatures
📊 Release Metrics & Evidence
All test reports, coverage metrics, and API documentation are generated during build and available in the Documentation Hub.
🔐 Security & Supply Chain Protection
This release includes:
- ✅ SLSA Build Provenance Attestations — Cryptographically signed build provenance
- ✅ Software Bill of Materials (SBOM) — Complete dependency inventory in SPDX format
- ✅ npm Provenance — Package published with npm provenance for supply chain integrity
- ✅ CodeQL Security Scanning — Automated vulnerability detection
- ✅ Dependency Scanning — Continuous vulnerability monitoring with Dependabot
Verify attestations:
gh attestation verify cia-compliance-manager-1.1.50.zip -R Hack23/cia-compliance-managerBrowse attestations: View all attestations
Code Quality & Security Analysis
📋 ISMS Compliance & Policies
Compliance Frameworks
CIA Compliance Manager follows Hack23 AB's comprehensive ISMS with defense-in-depth architecture and documented security controls.
Test Documentation
Compliance Evidence
🏛️ Architecture Documentation
| Document | Description |
|---|---|
| 🏛️ Architecture | System architecture overview |
| 🔒 Security Architecture | Security design and controls |
| 🛡️ Threat Model | Threat analysis and mitigations |
| 📊 Data Model | Data structures and relationships |
| 🔄 Flowchart | Application workflows |
| 📈 State Diagram | State machine documentation |
| 🧠 Mindmap | Conceptual overview |
| 💼 SWOT Analysis | Strategic analysis |
📦 Release Artifacts
| Artifact | Description | Verification |
|---|---|---|
cia-compliance-manager-1.1.50.zip |
Production build | SHA-256 checksum, SLSA attestation |
cia-compliance-manager-1.1.50.spdx.json |
SBOM (SPDX format) | SBOM attestation |
*.intoto.jsonl |
SLSA attestations | gh attestation verify |
| npm package | cia-compliance-manager |
npm provenance |
🚀 Deployment & Links
- Live Application: https://ciacompliancemanager.com
- API Documentation: https://ciacompliancemanager.com/docs/api/
- npm Package: https://www.npmjs.com/package/cia-compliance-manager
- GitHub Repository: https://github.com/Hack23/cia-compliance-manager
Hack23 Ecosystem
| Project | Live Site | API Docs |
|---|---|---|
| CIA Platform | — | — |
| CIA Compliance Manager | ciacompliancemanager.com | API Docs |
| Riksdagsmonitor | riksdagsmonitor.com | API Docs |
| EU Parliament Monitor | euparliamentmonitor.com | API Docs |
| Black Trigram | [blackt... |
Contributors
pethers and dependabot
Assets 7
CIA Compliance Manager v1.1.49
Immutable
release. Only release title and notes can be modified.
What's Changed
🏗️ Infrastructure & Performance
- build(deps-dev): bump start-server-and-test from 3.0.0 to 3.0.2 @dependabot[bot] (#1115)
- build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 @dependabot[bot] (#1114)
- build(deps-dev): bump @types/node from 25.5.2 to 25.6.0 in the typescript-types group @dependabot[bot] (#1113)
- build(deps-dev): bump axios from 1.13.6 to 1.15.0 @dependabot[bot] (#1112)
- build(deps): bump step-security/harden-runner from 2.16.1 to 2.17.0 @dependabot[bot] (#1111)
- build(deps): bump release-drafter/release-drafter from 7.1.1 to 7.2.0 @dependabot[bot] (#1110)
- build(deps-dev): bump the vitest group across 1 directory with 3 updates @dependabot[bot] (#1109)
- build(deps-dev): bump vite from 8.0.7 to 8.0.8 in the vite group @dependabot[bot] (#1108)
🔒 Security & Compliance
- build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 @dependabot[bot] (#1114)
- build(deps): bump step-security/harden-runner from 2.16.1 to 2.17.0 @dependabot[bot] (#1111)
📦 Dependencies
- build(deps-dev): bump start-server-and-test from 3.0.0 to 3.0.2 @dependabot[bot] (#1115)
- build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 @dependabot[bot] (#1114)
- build(deps-dev): bump @types/node from 25.5.2 to 25.6.0 in the typescript-types group @dependabot[bot] (#1113)
- build(deps-dev): bump axios from 1.13.6 to 1.15.0 @dependabot[bot] (#1112)
- build(deps): bump step-security/harden-runner from 2.16.1 to 2.17.0 @dependabot[bot] (#1111)
- build(deps): bump release-drafter/release-drafter from 7.1.1 to 7.2.0 @dependabot[bot] (#1110)
- build(deps-dev): bump the vitest group across 1 directory with 3 updates @dependabot[bot] (#1109)
- build(deps-dev): bump vite from 8.0.7 to 8.0.8 in the vite group @dependabot[bot] (#1108)
📦 npm Package
npm install cia-compliance-managerVerify provenance: npm audit signatures
📊 Release Metrics & Evidence
All test reports, coverage metrics, and API documentation are generated during build and available in the Documentation Hub.
🔐 Security & Supply Chain Protection
This release includes:
- ✅ SLSA Build Provenance Attestations — Cryptographically signed build provenance
- ✅ Software Bill of Materials (SBOM) — Complete dependency inventory in SPDX format
- ✅ npm Provenance — Package published with npm provenance for supply chain integrity
- ✅ CodeQL Security Scanning — Automated vulnerability detection
- ✅ Dependency Scanning — Continuous vulnerability monitoring with Dependabot
Verify attestations:
gh attestation verify cia-compliance-manager-1.1.49.zip -R Hack23/cia-compliance-managerBrowse attestations: View all attestations
Code Quality & Security Analysis
📋 ISMS Compliance & Policies
Compliance Frameworks
CIA Compliance Manager follows Hack23 AB's comprehensive ISMS with defense-in-depth architecture and documented security controls.
Test Documentation
Compliance Evidence
🏛️ Architecture Documentation
| Document | Description |
|---|---|
| 🏛️ Architecture | System architecture overview |
| 🔒 Security Architecture | Security design and controls |
| 🛡️ Threat Model | Threat analysis and mitigations |
| 📊 Data Model | Data structures and relationships |
| 🔄 Flowchart | Application workflows |
| 📈 State Diagram | State machine documentation |
| 🧠 Mindmap | Conceptual overview |
| 💼 SWOT Analysis | Strategic analysis |
📦 Release Artifacts
| Artifact | Description | Verification |
|----------|...
Contributors
pethers and dependabot
Assets 7
CIA Compliance Manager v1.1.48
Immutable
release. Only release title and notes can be modified.
What's Changed
🏗️ Infrastructure & Performance
- build(deps-dev): bump the react group with 2 updates @dependabot[bot] (#1107)
- build(deps-dev): bump knip from 6.3.0 to 6.3.1 @dependabot[bot] (#1105)
- build(deps-dev): bump postcss from 8.5.8 to 8.5.9 in the tailwindcss group @dependabot[bot] (#1104)
- build(deps-dev): bump typescript-eslint from 8.58.0 to 8.58.1 in the eslint group @dependabot[bot] (#1103)
- build(deps-dev): bump cypress from 15.13.0 to 15.13.1 in the cypress group @dependabot[bot] (#1102)
- build(deps-dev): bump vite from 8.0.6 to 8.0.7 in the vite group @dependabot[bot] (#1101)
📝 Documentation
- fix: resolve broken mermaid diagrams and improve color coding to match ISMS style guide @copilot-swe-agent[bot] (#1106)
📦 Dependencies
- build(deps-dev): bump the react group with 2 updates @dependabot[bot] (#1107)
- build(deps-dev): bump knip from 6.3.0 to 6.3.1 @dependabot[bot] (#1105)
- build(deps-dev): bump postcss from 8.5.8 to 8.5.9 in the tailwindcss group @dependabot[bot] (#1104)
- build(deps-dev): bump typescript-eslint from 8.58.0 to 8.58.1 in the eslint group @dependabot[bot] (#1103)
- build(deps-dev): bump cypress from 15.13.0 to 15.13.1 in the cypress group @dependabot[bot] (#1102)
- build(deps-dev): bump vite from 8.0.6 to 8.0.7 in the vite group @dependabot[bot] (#1101)
📦 npm Package
npm install cia-compliance-managerVerify provenance: npm audit signatures
📊 Release Metrics & Evidence
All test reports, coverage metrics, and API documentation are generated during build and available in the Documentation Hub.
🔐 Security & Supply Chain Protection
This release includes:
- ✅ SLSA Build Provenance Attestations — Cryptographically signed build provenance
- ✅ Software Bill of Materials (SBOM) — Complete dependency inventory in SPDX format
- ✅ npm Provenance — Package published with npm provenance for supply chain integrity
- ✅ CodeQL Security Scanning — Automated vulnerability detection
- ✅ Dependency Scanning — Continuous vulnerability monitoring with Dependabot
Verify attestations:
gh attestation verify cia-compliance-manager-1.1.48.zip -R Hack23/cia-compliance-managerBrowse attestations: View all attestations
Code Quality & Security Analysis
📋 ISMS Compliance & Policies
Compliance Frameworks
CIA Compliance Manager follows Hack23 AB's comprehensive ISMS with defense-in-depth architecture and documented security controls.
Test Documentation
Compliance Evidence
🏛️ Architecture Documentation
| Document | Description |
|---|---|
| 🏛️ Architecture | System architecture overview |
| 🔒 Security Architecture | Security design and controls |
| 🛡️ Threat Model | Threat analysis and mitigations |
| 📊 Data Model | Data structures and relationships |
| 🔄 Flowchart | Application workflows |
| 📈 State Diagram | State machine documentation |
| 🧠 Mindmap | Conceptual overview |
| 💼 SWOT Analysis | Strategic analysis |
📦 Release Artifacts
| Artifact | Description | Verification |
|---|---|---|
cia-compliance-manager-1.1.48.zip |
Production build | SHA-256 checksum, SLSA attestation |
cia-compliance-manager-1.1.48.spdx.json |
SBOM (SPDX format) | SBOM attestation |
*.intoto.jsonl |
SLSA attestations | gh attestation verify |
| npm package | cia-compliance-manager |
npm provenance |
🚀 Deployment & Links
- Live Application: https://ciacompliancemanager.com
- API Documentation: https://ciacompliancemanager.com/docs/api/
- npm Package: https://www.npmjs.com/package/cia-compliance-manager
- GitHub Repository: https://github.com/Hack23/cia-compliance-manager
#...
Contributors
pethers and dependabot
Assets 7
CIA Compliance Manager v1.1.47
Immutable
release. Only release title and notes can be modified.
What's Changed
🏗️ Infrastructure & Performance
- build(deps-dev): bump the vitest group across 1 directory with 3 updates @dependabot[bot] (#1100)
- build(deps-dev): bump vite from 8.0.5 to 8.0.6 in the vite group @dependabot[bot] (#1099)
- build(deps-dev): bump jsdom from 29.0.1 to 29.0.2 @dependabot[bot] (#1098)
- build(deps): bump aws-actions/configure-aws-credentials from 6.0.0 to 6.1.0 @dependabot[bot] (#1097)
📦 Dependencies
- build(deps-dev): bump the vitest group across 1 directory with 3 updates @dependabot[bot] (#1100)
- build(deps-dev): bump vite from 8.0.5 to 8.0.6 in the vite group @dependabot[bot] (#1099)
- build(deps-dev): bump jsdom from 29.0.1 to 29.0.2 @dependabot[bot] (#1098)
- build(deps): bump aws-actions/configure-aws-credentials from 6.0.0 to 6.1.0 @dependabot[bot] (#1097)
📦 npm Package
npm install cia-compliance-managerVerify provenance: npm audit signatures
📊 Release Metrics & Evidence
All test reports, coverage metrics, and API documentation are generated during build and available in the Documentation Hub.
🔐 Security & Supply Chain Protection
This release includes:
- ✅ SLSA Build Provenance Attestations — Cryptographically signed build provenance
- ✅ Software Bill of Materials (SBOM) — Complete dependency inventory in SPDX format
- ✅ npm Provenance — Package published with npm provenance for supply chain integrity
- ✅ CodeQL Security Scanning — Automated vulnerability detection
- ✅ Dependency Scanning — Continuous vulnerability monitoring with Dependabot
Verify attestations:
gh attestation verify cia-compliance-manager-1.1.47.zip -R Hack23/cia-compliance-managerBrowse attestations: View all attestations
Code Quality & Security Analysis
📋 ISMS Compliance & Policies
Compliance Frameworks
CIA Compliance Manager follows Hack23 AB's comprehensive ISMS with defense-in-depth architecture and documented security controls.
Test Documentation
Compliance Evidence
🏛️ Architecture Documentation
| Document | Description |
|---|---|
| 🏛️ Architecture | System architecture overview |
| 🔒 Security Architecture | Security design and controls |
| 🛡️ Threat Model | Threat analysis and mitigations |
| 📊 Data Model | Data structures and relationships |
| 🔄 Flowchart | Application workflows |
| 📈 State Diagram | State machine documentation |
| 🧠 Mindmap | Conceptual overview |
| 💼 SWOT Analysis | Strategic analysis |
📦 Release Artifacts
| Artifact | Description | Verification |
|---|---|---|
cia-compliance-manager-1.1.47.zip |
Production build | SHA-256 checksum, SLSA attestation |
cia-compliance-manager-1.1.47.spdx.json |
SBOM (SPDX format) | SBOM attestation |
*.intoto.jsonl |
SLSA attestations | gh attestation verify |
| npm package | cia-compliance-manager |
npm provenance |
🚀 Deployment & Links
- Live Application: https://ciacompliancemanager.com
- API Documentation: https://ciacompliancemanager.com/docs/api/
- npm Package: https://www.npmjs.com/package/cia-compliance-manager
- GitHub Repository: https://github.com/Hack23/cia-compliance-manager
Hack23 Ecosystem
| Project | Live Site | API Docs |
|---|---|---|
| CIA Platform | — | — |
| CIA Compliance Manager | ciacompliancemanager.com | API Docs |
| Riksdagsmonitor | riksdagsmonitor.com | API Docs |
| EU Parliament Monitor | euparliamentmonitor.com | [API Docs](https://euparliamentmonitor.com/docs/a... |
Contributors
pethers and dependabot
Assets 7
CIA Compliance Manager v1.1.46
Immutable
release. Only release title and notes can be modified.
What's Changed
🎨 UI/UX Improvements
- fix: improve widget container sizing and responsive layout across all viewports @copilot-swe-agent[bot] (#1095)
- fix: remove duplicate dark mode rules and !important text color overrides @copilot-swe-agent[bot] (#1094)
- fix: resolve conflicting dashboard grid CSS definitions between layout.css and utilities.css @copilot-swe-agent[bot] (#1093)
- refactor: standardize widget CSS class usage to WidgetClasses/cn pattern @copilot-swe-agent[bot] (#1091)
- refactor: remove duplicate TailwindCSS utility definitions from utilities.css @copilot-swe-agent[bot] (#1089)
- refactor: reduce !important in components.css from 390 to 3 and consolidate duplicate CSS blocks @copilot-swe-agent[bot] (#1088)
- fix: CSS selector overrides hidden attribute on inactive tab panels @copilot-swe-agent[bot] (#1087)
🏗️ Infrastructure & Performance
- build(deps-dev): bump vite from 8.0.4 to 8.0.5 @dependabot[bot] (#1096)
- build(deps-dev): bump vite from 8.0.3 to 8.0.4 in the vite group @dependabot[bot] (#1092)
- refactor: consolidate dual Tailwind config into single TypeScript config @copilot-swe-agent[bot] (#1090)
- refactor: remove duplicate TailwindCSS utility definitions from utilities.css @copilot-swe-agent[bot] (#1089)
📝 Documentation
- refactor: consolidate dual Tailwind config into single TypeScript config @copilot-swe-agent[bot] (#1090)
📦 Dependencies
- build(deps-dev): bump vite from 8.0.4 to 8.0.5 @dependabot[bot] (#1096)
- build(deps-dev): bump vite from 8.0.3 to 8.0.4 in the vite group @dependabot[bot] (#1092)
📦 npm Package
npm install cia-compliance-managerVerify provenance: npm audit signatures
📊 Release Metrics & Evidence
All test reports, coverage metrics, and API documentation are generated during build and available in the Documentation Hub.
🔐 Security & Supply Chain Protection
This release includes:
- ✅ SLSA Build Provenance Attestations — Cryptographically signed build provenance
- ✅ Software Bill of Materials (SBOM) — Complete dependency inventory in SPDX format
- ✅ npm Provenance — Package published with npm provenance for supply chain integrity
- ✅ CodeQL Security Scanning — Automated vulnerability detection
- ✅ Dependency Scanning — Continuous vulnerability monitoring with Dependabot
Verify attestations:
gh attestation verify cia-compliance-manager-1.1.46.zip -R Hack23/cia-compliance-managerBrowse attestations: View all attestations
Code Quality & Security Analysis
📋 ISMS Compliance & Policies
Compliance Frameworks
CIA Compliance Manager follows Hack23 AB's comprehensive ISMS with defense-in-depth architecture and documented security controls.
Test Documentation
Compliance Evidence
🏛️ Architecture Documentation
| Document | Description |
|---|---|
| 🏛️ Architecture | System architecture overview |
| 🔒 Security Architecture | Security design and controls |
| 🛡️ Threat Model | Threat analysis and mitigations |
| 📊 Data Model | Data structures and relationships |
| 🔄 Flowchart | Application workflows |
| 📈 State Diagram | State machine documentation |
| 🧠 Mindmap | Conceptual overview |
| 💼 SWOT Analysis | Strategic analysis |
📦 Release Artifacts
| Artifact | Description | Verification |
|---|---|---|
cia-compliance-manager-1.1.46.zip |
Production build | SHA-256 checksum, SLSA attestation |
cia-compliance-manager-1.1.46.spdx.json |
SBOM (SPDX format) | SBOM attestation |
*.intoto.jsonl |
SLSA attestations | gh attestation verify |
| npm package | `c... |
Contributors
pethers and dependabot