Skip to content

RedDock v0.5.0 — Phase 4 Correlation

Choose a tag to compare

View all tags
@chriswayneh chriswayneh released this 05 Sep 03:15
· 31 commits to master since this release
v0.5.0
9365bb7

Phase 4 adds deterministic, evidence-linked correlation over RedDock's stored state and introduces the RedPath visualization.

Highlights

  • Immutable correlation snapshots with hashed normalized and metadata evidence
  • Exact-address web-to-host asset relationships backed by retained discovery evidence
  • Same-asset and related-asset finding correlations carrying both findings' evidence hashes
  • Fixed, versioned CWE mappings that classify findings without changing them
  • RedPath graph APIs and UI, with every relationship explaining its basis
  • Additive schema-upgrade, API, isolation, frontend, and end-to-end smoke coverage

Safety properties

Correlation accepts no target, selector, weight, script, or plugin and has no network or process capability. Missing evidence causes a relationship to be omitted. RedPath does not claim reachability, exploitability, causation, likelihood, or aggregate risk, and snapshots are capped at 5,000 edges.

Verification

The Phase 3-to-Phase 4 security diff review completed with full coverage and no findings. GitHub CI passed backend tests and lint, frontend audit/lint/typecheck/tests/build, and the production container smoke test on both the release commit and the v0.5.0 tag.

Full changelog: v0.4.0...v0.5.0

Assets 2
Loading