OpenShield v0.3.0

What's in v0.3.0

Infrastructure

• Async scan execution with background worker
• Scan state persistence and Render restart recovery
• Render auto deploy switched to manual trigger
• Structured JSON logging and Prometheus metrics
• Split health and readiness probes

Scanner

• Identity rules AZ-IDN-005 to AZ-IDN-009
• Post-quantum cryptography rules AZ-PQC-001 to AZ-PQC-003
• CIS benchmark de-duplication across 13 rules
• TLS version numeric comparison fix
• Graph API pagination fix

AI and Observability

• Request correlation via X-Request-ID
• Per-rule scanner error counter
• LLM and NVD latency metrics

Testing and Docs

• MockAzureClient offline test harness
• 146 tests passing
• Azure scanner validation framework documented

Security

• CodeQL high findings resolved
• XSS innerHTML replaced with textContent
• Clear text logging fixed in identity rules

OpenShield v0.1.0

First release of OpenShield — open source Cloud Security
Posture Management for Azure.

What is included

Scanner

• 20 Azure misconfiguration scan rules across Storage, Network,
  Identity, Database, Compute, and Key Vault
• Automated remediation playbooks for every rule
• CIS Azure Benchmark, NIST CSF, ISO 27001, and SOC 2
  compliance mappings

Sentinel Integration

• Findings pushed to Microsoft Sentinel via Log Analytics
• 4 KQL detection rules covering HIGH severity findings,
  misconfiguration waves, persistent misconfigurations,
  and new resource type critical findings

API

• Flask REST API with JWT authentication
• Endpoints for findings, scans, compliance scores,
  and security posture score

CI Pipeline

• GitHub Actions workflow with 7 automated checks
• Python syntax, rule structure, credential scan, playbook
  validation, compliance JSON validation, API syntax,
  and compliance cross-reference

Documentation

• Full architecture documentation
• Azure setup guide
• Rule contribution guide with real-world breach scenarios
• API reference
• CI pipeline guide

Contributors

@TFT444 @parthrohit22 @ritiksah141

Getting started

See README.md for quick start instructions.

Note

This is an MVP release. The React dashboard and production
deployment are in active development.