This repository has been archived on 2026-08-04. You can view files and clone it, but cannot push or open issues or pull requests.
orchestrator/security-review/checkers
Adam Moussa 332652257b
feat(security-review): confluence-doc supports OAuth 2.0 client-credentials (service account) (#40)
Atlassian org service accounts have no classic API token — they authenticate via
OAuth 2.0 client-credentials (2LO). Add a dual-mode auth seam to confluence-doc:
- OAuth (preferred when CONFLUENCE_OAUTH_CLIENT_ID/_SECRET set): POST
  auth.atlassian.com/oauth/token (client_id+client_secret+grant_type=client_credentials)
  → 60-min Bearer; calls go to api.atlassian.com/ex/confluence/<cloudId>/wiki/api/v2/...
  cloudId auto-resolves from the site's public /_edge/tenant_info (no input needed).
- Basic (email+API token) retained as a fallback.
conf_api_init() picks the mode once; conf_get() does the authenticated GET. Any
failure (no cloudId / token request fails) → RUN_API=0, live checks SKIPPED, NO
false alarm (matches the existing no-data discipline). Secret passed in the request
body (--data-urlencode), never logged. Still read + recommend-only (D7); canary
unaffected (offline) — 3/3. shellcheck clean (accepted SC1091).
2026-06-22 19:45:42 -04:00
..
fixtures feat(secrev): wire full Plane-1 roster into checker coordinator + fix fixture SAM (#22) 2026-06-18 16:31:03 -04:00
aws-posture.sh feat(secrev): Plane-1 Phase 3 — doc-drift + IAM artifacts (aws-posture gated) (#19) 2026-06-18 16:25:40 -04:00
compliance-drift.sh feat(secrev): Plane-1 Phase 4 — plan-groomer + confluence-doc (recommend-only) (#20) 2026-06-18 16:03:37 -04:00
confluence-doc.sh feat(security-review): confluence-doc supports OAuth 2.0 client-credentials (service account) (#40) 2026-06-22 19:45:42 -04:00
dependency-cve.sh feat(secrev): Plane-1 Phase 2 — coordinator + dependency-cve checker (#16) 2026-06-18 15:08:58 -04:00
doc-drift.sh feat(secrev): Plane-1 Phase 3 — doc-drift + IAM artifacts (aws-posture gated) (#19) 2026-06-18 16:25:40 -04:00
plan-groomer.sh feat(secrev): Plane-1 Phase 4 — plan-groomer + confluence-doc (recommend-only) (#20) 2026-06-18 16:03:37 -04:00