Skip to content

v1.2.8

Choose a tag to compare

@greenarmor greenarmor released this 16 Jun 15:47
· 7 commits to master since this release

Release v1.2.8

Previous release: v1.2.7
Release date: 2026-06-15


Highlights

Dashboard Overview — Installed Policy Packs Now Visible

Installed packs (e.g., AI, Blockchain, Government) were invisible on the dashboard Overview page because their controls roll into GDPR scoring rather than appearing as their own framework. Now all installed packs appear in a dedicated card with clear implementation status indicators.

NIST-800-53 Validation Fix

ges validate failed with "Invalid enum value" when NIST-800-53 was present in .ges/config.json. The Zod schema validator was missing the new framework value.


What's New

Installed Policy Packs Card (Dashboard Overview)

A new card on the Overview page lists every installed policy pack with:

Element Description
Pack name Full name (e.g., "AI System Policy Pack")
Score Pack-level compliance score percentage
Status badge Green "Implemented" or amber "Not Implemented"
Border style Solid border (implemented) or dashed border (not implemented)
Stats line Control count, pass count, fail count, not-implemented count
Click-through Click any pack to drill down into controls and findings

Implementation logic:

  • Implemented — at least one control has moved out of not-implemented state (pass, fail, warning, or N/A)
  • Not Implemented — all controls remain at not-implemented (pack installed but no action taken yet)

Active Frameworks & Installed Packs Tags

The "Active Frameworks" tag section has been renamed to "Active Frameworks & Installed Packs" and now includes:

  • Green tags — Compliance frameworks (GDPR, OWASP, CIS, NIST, etc.)
  • Blue tags — Installed packs with at least one implemented control
  • Amber tags — Installed packs where no controls have been implemented yet

Bug Fixes

NIST-800-53 Schema Validation (fixed)

Issue: Running ges validate after installing the nist-800-53 pack produced:

[✗] Configuration validation errors:
  - frameworks.2: Invalid enum value. Expected 'GDPR' | 'OWASP' | 'CIS' | 'NIST' | 'ISO27001' | 'ISO27701' | 'HIPAA', received 'NIST-800-53'

Root cause: NIST-800-53 was added to the TypeScript FrameworkName union type (v1.2.7) but the Zod FrameworkNameSchema validator was not updated.

Fix: Added "NIST-800-53" to the Zod enum in packages/core/src/schemas/index.ts.


Files Changed

File Change
packages/web-dashboard/src/template.ts New "Installed Policy Packs" card with implementation status badges; updated tags section
packages/core/src/schemas/index.ts Added NIST-800-53 to FrameworkNameSchema Zod validator

Test Results

  • 421 tests passing across all 15 test suites
  • All 16 packages build clean
  • E2E verified:
    • AI pack installed with no implementations → shows "Not Implemented" amber badge, dashed border
    • AI pack with one control implemented → shows "Implemented" green badge, solid border
    • ges validate passes with NIST-800-53 in config

Upgrade Guide

No breaking changes.

npm update @greenarmor/ges
# or
pnpm update @greenarmor/ges