• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

opendefensecloud / solution-arsenal
80%

Build:
DEFAULT BRANCH: main
Repo Added 05 Dec 2025 04:45PM UTC
Files 89
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH main
branch: SELECT
CHANGE BRANCH
x
  • No branch selected
  • boilerplate
  • bufix/rendrartifact-stale-secret
  • bugfix/258-discovery-filter-fix
  • bugfix/26-fix-empty-resourceversion
  • bugfix/350-fix-error-reporting
  • bugfix/fix-codegen
  • bugfix/go-updates-via-renovate
  • chore/150-refactor-backoff
  • chore/189-code-quality-imrpovements
  • chore/237-docker-build-caching
  • chore/28-migrate-runners
  • chore/322-update-controller-tests-watch-namespace
  • chore/437-consolidate-tegistry-types
  • chore/556-envtest
  • chore/649-ci-flake
  • chore/add-missing-methods-to-v1alpha1-types
  • chore/add-osv-scanner
  • chore/envtest-sideloading-macos
  • chore/event-recorder-api-change
  • chore/github-action-triggers
  • chore/golangci-gh-action-trigger
  • chore/golangci-lint
  • chore/harden-github-workflows
  • chore/improve-branch-protection
  • chore/improve-commit-hook-performance
  • chore/prevent-cache-e2e-tests
  • chore/replace-get-event-recorder-for
  • chore/update-deps
  • chore/update-docs-streamline-new-user-exp
  • chore/update-flake
  • chore/update-go
  • chore/use-golangci-action
  • chore/validate-conventional-commits-and-title
  • ci/fix-kind-version-mismatch
  • ci/tighten-golangci-lint
  • dependabot/github_actions/actions/checkout-6
  • dependabot/github_actions/codecov/codecov-action-5
  • dependabot/github_actions/dependabot/fetch-metadata-2.5.0
  • dependabot/github_actions/docker/build-push-action-6
  • dependabot/github_actions/golangci/golangci-lint-action-9
  • dependabot/github_actions/softprops/action-gh-release-2
  • dependabot/go_modules/github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream-1.7.8
  • dependabot/go_modules/github.com/aws/aws-sdk-go-v2/service/s3-1.97.3
  • dependabot/go_modules/github.com/go-git/go-git/v5-5.16.5
  • dependabot/go_modules/github.com/go-git/go-git/v5-5.17.1
  • dependabot/go_modules/github.com/go-jose/go-jose/v4-4.1.4
  • dependabot/go_modules/github.com/onsi/ginkgo/v2-2.27.4
  • dependabot/go_modules/github.com/onsi/ginkgo/v2-2.28.1
  • dependabot/go_modules/github.com/onsi/gomega-1.39.0
  • dependabot/go_modules/github.com/onsi/gomega-1.39.1
  • dependabot/go_modules/github.com/sigstore/cosign/v2-2.6.2
  • dependabot/go_modules/github.com/sigstore/fulcio-1.8.5
  • dependabot/go_modules/github.com/sigstore/rekor-1.5.0
  • dependabot/go_modules/github.com/sigstore/sigstore-1.10.4
  • dependabot/go_modules/github.com/theupdateframework/go-tuf/v2-2.4.1
  • dependabot/go_modules/go.opendefense.cloud/kit-0.1.5
  • dependabot/go_modules/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc-1.39.0
  • dependabot/go_modules/go.opentelemetry.io/otel/sdk/metric-1.39.0
  • dependabot/go_modules/google.golang.org/grpc-1.77.0
  • dependabot/go_modules/google.golang.org/grpc-1.78.0
  • dependabot/go_modules/google.golang.org/grpc-1.79.3
  • dependabot/go_modules/ocm.software/ocm-0.35.0
  • dependabot/go_modules/sigs.k8s.io/structured-merge-diff/v6-6.3.1
  • dependabot/go_modules/sigs.k8s.io/structured-merge-diff/v6-6.3.2
  • docs/165-registry-credentials-poc
  • feat/035-webhook-server
  • feat/043-generic-webhook
  • feat/104-add-helm-chart-for-solar
  • feat/154-rendering-backoff
  • feat/176-integrate-library
  • feat/185-consider-profiles-in-hydrated-target
  • feat/185-profile-integs
  • feat/212-webhook-router-unregister-handler
  • feat/242-add-unique-name-to-release-api
  • feat/243-release-priority
  • feat/244-add-anti-affinity-fields-to-release-api
  • feat/246-implement-release-resolver
  • feat/254-ca-support-discovery
  • feat/28-solar-client-options
  • feat/32-implement-solar-discovery-controller
  • feat/34-define-solar-discovery-worker-event-types
  • feat/37-implement-ocm-qualifier-pipeline-step
  • feat/38-componenthandler-with-support-for-helm
  • feat/40-check-if-componentversion-needs-updates
  • feat/440-rendering-secrets
  • feat/490-reference-grants
  • feat/84-table-converter
  • feat/97-populate-secret-properly
  • feat/98-create-service-for-discovery-pod
  • feat/99-integs-discovery
  • feat/implement-deletion-protection
  • feat/improve-dev-flow
  • feat/integ-test-namespace
  • feat/make-demo
  • feat/object-reference-613
  • feat/ocm-access-types-discovery
  • feat/standalone-discovery
  • feat/target-split
  • feat/ui-experiment
  • feature/100-test-release-rendering-v2
  • feature/101-target-e2e-test
  • feature/102-deployment-e2e-test
  • feature/103-implement-dev-cluster
  • feature/13-update-stale-common.mk
  • feature/160-cleanup-failed-rendertask-jobs
  • feature/184-secret-reference
  • feature/196-add-router-tests
  • feature/231-rename-registryURL
  • feature/239-release-targetnamespace
  • feature/239-release-targetnamespace-2
  • feature/240-add-custom-ca-support-for-rendertasks
  • feature/259-adjust-zot-webhooks
  • feature/259-adjust-zot-webhooks-e2e-test
  • feature/259-adjust-zot-webhooks-v2
  • feature/288-rename-hydrated-target
  • feature/315-rendertask-as-clusterwide-ressource
  • feature/33-pin-gh-actions
  • feature/358-artifact-cleanup
  • feature/411-resoure-details-views-web
  • feature/412-web-ui-crud
  • feature/413-deploy-status-visualisation
  • feature/422-chaining-e2e-test
  • feature/481-include-e2e-in-ci
  • feature/557-codegen-ci
  • feature/560-infer-imagePullSecrets-in-helm-charts
  • feature/568-strict-mode-rb-e2e-tests
  • feature/62-solar-ui-zitadel-integration
  • feature/627-integrate-ui-e2e-tests-to-ci
  • feature/646-component-reconciler
  • feature/667-split-tests
  • feature/api-surface
  • feature/componentversion-writer
  • feature/hydrated-target-controller
  • feature/hydrated-target-renderer
  • feature/publish-renderer-image
  • feature/release-controller
  • feature/render-release-job
  • feature/rendertask-controller
  • feature/track-e2e-dependencies
  • feature/use-flake
  • fix/101-target-e2e-test
  • fix/155-remove-polling-II
  • fix/155-remove-polling-and-finalizers
  • fix/155-remove-polling-render-jobs
  • fix/205-fix-license-headers
  • fix/236-delete-event-fails
  • fix/260-rendertask-basic-auth
  • fix/268-reg-creds-in-discovery-handler
  • fix/275-incomplete-write-api-resource-event
  • fix/285-creds-scanner
  • fix/316-release-deployment
  • fix/319-processing-second-discovery-event
  • fix/366-api-ref-list-types
  • fix/374-false-positive-deletion
  • fix/535-non-ocm-discovery-errors
  • fix/536-discover-root-level-components
  • fix/618-http-tag-deletion
  • fix/619-terminating-renderartifacts
  • fix/623-registry-resources
  • fix/628-parse-registry-host-port
  • fix/631-http-ocirepository
  • fix/91-discoveryreconciler-does-not-remove-secrets
  • fix/add-missing-target-permission
  • fix/bootstrap-input-unique-name-key
  • fix/certificate-e2e-tests
  • fix/component-gc-terminating-cv-race
  • fix/demo-setup-scripts
  • fix/discovery-integs-steps-order
  • fix/e2e-ci-mode
  • fix/e2e-timeout-budget
  • fix/errors-during-controller-tests
  • fix/fix-e2e-test-componentversion-version
  • fix/fix-e2e-test-discovery-watch
  • fix/golang-gh-action
  • fix/golangci-lint-with-go-26-1
  • fix/json-key-release-type
  • fix/missing-return-discovery-finalization
  • fix/namespace-discovery-worker
  • fix/osv-scan-cves
  • fix/osv-scanner-findings
  • fix/osv-scanner-pypi
  • fix/pipeline-errors
  • fix/rbac-declaration-events
  • fix/re-fetch-config-secret-after-creation
  • fix/refactor-without-clientset
  • fix/registry-credentials
  • fix/render-artifact-terminating
  • fix/sanitize-digest-label-strings-cut
  • fix/use-local-dir-for-dex-certs
  • fix/webhook-server-errors-is
  • fixup/160-fix-cleanup-and-add-tests
  • main
  • prototype-implementation
  • quickfix/api-violations-list-type-conditions
  • renovate/actions-cache-6.x
  • renovate/actions-checkout-7.x
  • renovate/all-minor-updates
  • renovate/all-patch-and-digest-updates
  • renovate/all-patch-updates
  • renovate/configure
  • renovate/ginkgo-2.x
  • renovate/github.com-cenkalti-backoff-v4-5.x
  • renovate/github.com-cenkalti-backoff-v5-6.x
  • renovate/github.com-cenkalti-backoff-v5-7.x
  • renovate/github.com-google-go-containerregistry-0.x
  • renovate/github.com-mandelsoft-goutils-digest
  • renovate/github.com-onsi-ginkgo-v2-2.x
  • renovate/github.com-onsi-gomega-1.x
  • renovate/go-oras.land-oras-go-v2-vulnerability
  • renovate/go-version
  • renovate/go.opendefense.cloud-kit-0.x
  • renovate/go.opendefense.cloud-ocm-kit-0.x
  • renovate/go.uber.org-zap-1.x
  • renovate/golang-1.x
  • renovate/golang.org-x-time-0.x
  • renovate/golangci-golangci-lint-action-digest
  • renovate/google-osv-scanner-action-digest
  • renovate/helm.sh-helm-v3-4.x
  • renovate/helm.sh-helm-v4-4.x
  • renovate/k8s-updates
  • renovate/k8s.io-kube-openapi-digest
  • renovate/k8s.io-utils-digest
  • renovate/kubernetes-go
  • renovate/kubernetes-monorepo
  • renovate/ocm-0.x
  • renovate/ocm.software-ocm-0.x
  • renovate/osv-scanner-2.x
  • renovate/quay.io-coreos-etcd-3.x
  • renovate/sigs.k8s.io-controller-runtime-0.x
  • renovate/sigs.k8s.io-structured-merge-diff-v6-6.x
  • revert-370-renovate/go-version
  • spike/314-reference-grant-poc
  • test/604-improve-coverage
  • test/coveralls
  • tests/fix-coverage-filter-and-add-some-coverage

24 Aug 2026 11:40AM UTC coverage: 80.39% (+0.1%) from 80.288%
32723023306

push

github

web-flow
feat(ui): pxce implemented, local setup for remote zitadel in both au… (#764)

…th modes

## What
Switch the UI's OIDC login to the authorization code flow with PKCE so
it works as a
public (native) client against our zitadel, and add a dev target to run
against it.
Relates to odd internal #62

## Why
Adding the solar UI to the demo cluster and integrate it against zitadel

## Testing
- make test
- Manual against `https://zitadel.opendefense.cloud` both auth modes:
`make ui-dev-zitadel ZITADEL_USER=you@example.com` (impersonate) and the
same with
`ZITADEL_AUTH_MODE=token`. Login, `/api/auth/me`, and the
catalog/targets pages all work.

## Notes for reviewers
-

## Checklist
- [x] Tests added/updated
- [x] No breaking changes (or upgrade path documented above)
- [x] Readable commit history (squashed and cleaned up as desired)
- [x] AI code review considered and comments resolved


<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **New Features**
* Added secure OIDC sign-in for public clients using PKCE, without
requiring a client secret.
* Added support for connecting local UI development to remote Zitadel
authentication.
  * Added configurable UI development and browser test ports.
* **Documentation**
* Added guidance for remote Zitadel-based frontend development and
authentication modes.
* Added production Web UI installation instructions for OIDC, PKCE, port
forwarding, and API-server configuration.
* **Bug Fixes**
* Improved handling of authentication state and PKCE verification during
sign-in callbacks.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

25 of 25 new or added lines in 2 files covered. (100.0%)

2 existing lines in 1 file now uncovered.

5530 of 6879 relevant lines covered (80.39%)

36.91 hits per line

Relevant lines Covered
Build:
Build:
6879 RELEVANT LINES 5530 COVERED LINES
36.91 HITS PER LINE
Source Files on main
  • Tree
  • List 89
  • Changed 5
  • Source Changed 2
  • Coverage Changed 5
Coverage ∆ File Lines Relevant Covered Missed Hits/Line

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
32723023306 main feat(ui): pxce implemented, local setup for remote zitadel in both au… (#764) …th modes ## What Switch the UI's OIDC login to the authorization code flow with PKCE so it works as a public (native) client against our zitadel, and add a dev target... push 24 Aug 2026 12:02PM UTC web-flow github
80.39
32714786855 feature/62-solar-ui-zitadel-integration Merge 286e37e89 into 3d7c50868 Pull #764 24 Aug 2026 10:12AM UTC web-flow github
80.39
32714761232 feature/62-solar-ui-zitadel-integration Merge 098223422 into 3d7c50868 Pull #764 24 Aug 2026 10:12AM UTC web-flow github
80.39
32712475879 feature/62-solar-ui-zitadel-integration Merge c3a50d5de into 9afef5e8c Pull #764 24 Aug 2026 09:59AM UTC web-flow github
80.53
32713150327 main perf(hooks): take vulnerability scanning out of the commit path (#770) ## What Closes #669 Speed up the pre-commit hooks: warm commits drop from ~6.9s (code change) and ~78.5s (dependency change) to ~6s. ## Why Two independent causes, found by ... push 24 Aug 2026 09:53AM UTC web-flow github
80.29
32703087801 chore/improve-commit-hook-performance Merge 2dfd802c7 into 9afef5e8c Pull #770 24 Aug 2026 08:00AM UTC web-flow github
80.35
32697933616 main chore(deps): update dependencies (patch & digest) (#771) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | Type | U... push 24 Aug 2026 06:56AM UTC web-flow github
80.35
32696669607 chore/improve-commit-hook-performance Merge e38e9265b into 19448a6eb Pull #770 24 Aug 2026 06:38AM UTC web-flow github
80.32
32696783504 renovate/all-patch-and-digest-updates Merge cd821527e into 19448a6eb Pull #771 24 Aug 2026 06:33AM UTC web-flow github
80.26
32687782052 renovate/all-patch-and-digest-updates Merge 97903abfc into 4454e47f2 Pull #771 24 Aug 2026 06:24AM UTC web-flow github
80.35
See All Builds (1259)
  • Repo on GitHub
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE TRIAL · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc