Skip to content

[comp] Production Deploy#2835

Merged
tofikwest merged 5 commits into
releasefrom
main
May 13, 2026
Merged

[comp] Production Deploy#2835
tofikwest merged 5 commits into
releasefrom
main

Conversation

@github-actions
Copy link
Copy Markdown
Contributor

@github-actions github-actions Bot commented May 13, 2026

This is an automated pull request to release the candidate branch into production, which will trigger a deployment.
It was created by the [Production PR] action.


Summary by cubic

Require authorization consent before starting any pentest and clarify scan coverage with better copy and tooltips to set expectations and reduce legal/ToS risk.

  • New Features

    • Added an authorization checkbox to start a scan (new AuthorizationConsentField using @trycompai/design-system).
    • “Scan coverage” panel opens by default; clearer headings and helper text for evidence levels.
    • Impact-proof confirmation modal now only appears for impact-proof runs, with clearer title/CTA.
    • Added per-check tooltips via Tooltip and Information icon to explain each vulnerability check.
    • Copy updates: target field notes an external, unauthenticated scan; “Add code context” replaces “Configure scope”.
    • Introduced check and evidence descriptions in scan-profiles.ts for use in UI and tooltips.
  • Bug Fixes

    • Fixed screen reader support for the authorization error by wiring aria-invalid/aria-describedby and role="alert" on the error message.

Written for commit a62c19f. Summary will update on new commits.

github-actions Bot and others added 5 commits May 13, 2026 18:54
Surface what a pentest covers and what access it has by defaulting the
"Scan coverage" panel open, adding plain-English tooltips on each of
the 12 vulnerability checks, and rewriting evidence-level helper text.
Require an authorization checkbox on every scan to close legal/ToS
exposure, and scope the intensity confirmation modal to impact-proof
only with clearer wording.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
… aria-describedby

Screen readers couldn't announce the error context — the message was
in the DOM but not associated with the checkbox. Now the checkbox
flips aria-invalid and aria-describedby when validation fails, and
the error span uses role="alert" with a referenced id.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
feat(pentest): improve copy and add authorization gate
@vercel
Copy link
Copy Markdown

vercel Bot commented May 13, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
app (staging) Ready Ready Preview, Comment May 13, 2026 8:22pm
comp-framework-editor (staging) Ready Ready Preview, Comment May 13, 2026 8:22pm
1 Skipped Deployment
Project Deployment Actions Updated (UTC)
portal (staging) Skipped Skipped May 13, 2026 8:22pm

Request Review

Copy link
Copy Markdown
Contributor

@cubic-dev-ai cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 7 files

Confidence score: 5/5

  • Automated review surfaced no issues in the provided summaries.
  • No files require special attention.

@tofikwest tofikwest merged commit 2e9b83a into release May 13, 2026
14 checks passed
@claudfuen
Copy link
Copy Markdown
Contributor

🎉 This PR is included in version 3.53.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants