feat: exploit intelligence integration

[Strum355]

Summary

Feature branch merge for Exploit Intelligence integration.

Tasks implemented:

• TC-4675: feat(entity): add exploit intelligence job tracking entities and migration #2435
• TC-4677: feat: add exploit-intelligence job polling, configuration & API endpoints #2464

Implements TC-4441

Related trustify-ui PR: guacsec/trustify-ui#1125

[sourcery-ai]

Sorry @Strum355, your pull request is larger than the review limit of 150000 diff characters

[codecov]

Codecov Report

❌ Patch coverage is 77.86733% with 357 lines in your changes missing coverage. Please review.
✅ Project coverage is 72.51%. Comparing base (7316619) to head (de5108a).
⚠️ Report is 2 commits behind head on main.

Files with missing lines	Patch %	Lines
modules/exploit-intelligence/src/runner/polling.rs	64.24%	102 Missing and 36 partials ⚠️
modules/exploit-intelligence/src/runner/worker.rs	51.28%	56 Missing and 1 partial ⚠️
modules/exploit-intelligence/src/service/mod.rs	72.85%	52 Missing and 5 partials ⚠️
...odules/exploit-intelligence/src/runner/analysis.rs	78.48%	12 Missing and 22 partials ⚠️
modules/exploit-intelligence/src/runner/mod.rs	63.41%	15 Missing ⚠️
server/src/profile/api.rs	92.85%	9 Missing and 2 partials ⚠️
modules/exploit-intelligence/src/endpoints/mod.rs	87.50%	0 Missing and 9 partials ⚠️
modules/exploit-intelligence/src/error.rs	33.33%	8 Missing ⚠️
modules/exploit-intelligence/src/model/mod.rs	95.97%	5 Missing and 3 partials ⚠️
entity/src/exploit_intelligence_job.rs	0.00%	6 Missing ⚠️
... and 4 more

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #2534      +/-   ##
==========================================
+ Coverage   72.17%   72.51%   +0.34%     
==========================================
  Files         465      480      +15     
  Lines       28702    30309    +1607     
  Branches    28702    30309    +1607     
==========================================
+ Hits        20715    21980    +1265     
- Misses       6813     7069     +256     
- Partials     1174     1260      +86     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[ctron]

I assume if exploit_intelligence_url is set, so must be this one (and others). We need to make sure this information is available. Clap supports this.

[Strum355]

I assume if exploit_intelligence_url is set, so must be this one (and others).

Not necessarily true, although it may be the most common case in practice. The EI client both serves the UI and provides the API (or an API gateway, whichever) so its entirely possible that the same URL is used.

[ctron]

I think that, unless impossible, this should go into it's own module. It doesn't seem to be "fundemental".

Also, how can the UI evaluate if this feature is configured or not?

[ruromero]

Review: Exploit Intelligence Integration

Solid feature with well-designed job queue, comprehensive tests, and good resilience patterns. The convention and code quality items below should be addressed before merge.

See inline comments for details.

[Strum355]

Also, how can the UI evaluate if this feature is configured or not?

Thanks for pointing this out, seems my changes disappeared into a git stash. Im taking the approach of adding a flag to /.well-known/trustify, any concerns with that? Seems reasonably straightforward and clean

{"version":"0.5.0-rc.1","readOnly":false,"exploitIntelligence":false,"build":{...}}

I think that, unless impossible, this should go into it's own module. It doesn't seem to be "fundemental".

Ill have a look into this 👍