Skip to content

Conversation

@Qnadia
Copy link
Contributor

@Qnadia Qnadia commented Nov 3, 2025

Cette Pull Request ajoute le fichier map-DNSSI_2023-iso27001_2022.yml, qui relie la Directive Nationale de la Sécurité des Systèmes d’Information (DNSSI 2023) aux mesures de sécurité de l’ISO/IEC 27001 : 2022.

Contenu du fichier :

Alignement des règles opérationnelles DNSSI 2023 avec les contrôles ISO 27002 : 2022

Références croisées entre les objectifs marocains (Gouvernance, Risques, SSI) et les domaines ISO

Objectif :
Permettre l’analyse automatique de conformité entre les politiques nationales marocaines (DGSSI) et le cadre ISO 27001 : 2022, pour soutenir la gouvernance de la cybersécurité et la préparation aux audits.

Mohamed-Hacene and others added 30 commits December 23, 2024 14:55
When writing a custom `get_object` method in a viewset, we must perform
call `self.check_object_permissions(request, obj)`. Otherwise,
`RBACPermissions.has_object_permission` will **not** be called.
New format is <branch>-<timestamp>-<artifact name>
ab-smith and others added 28 commits January 26, 2025 23:57
fix broken word export when IG name is a number
* starting point

* variant with filesystem - experimental

* First implementation

* checkpoint

* checkpoint

* checkpoint valkey

* sqlite backend for huey, compatible with pg for the rest of the app

* compose preperation

* Introduce MAIL_DEBUG env variable

* checkpoint

* logging and error management

* wip

* target value

* slow down the scheduler given the current use cases to save CPU

* fixup

* back to default worker class for now

* Use the global setting and default to false
…em#1430)

* small optimizations of library presentation headers

* Ajustement du code pour CI Semantics
* Check permissions for each model to import before attempting to create objects

* Wrap form return values with withFiles wrapper

* Localize domain import permission denied error

* Style domain import button

* Remove dead code

* Tidy import domain functions

* Use RoleAsignment.is_access_allowed rather than user.permissions

* Enforce RBAC on domain export

* chore: Remove duplicate import
intuitem#1431)

Add files via upload

Added so called elementary threats by german BSI in order to assign in risk-management
annotated base query for better perf
…ios (intuitem#1442)

* freat: current/residual criticality filters for risk scenarios

* fix: created correct filter

* fix: minor fix
…item#1445)

Expose extra variables for a more flexible infra tuning
* checkpoint

* error management

* Moving component

* counters asynchronously as well

* clean up and cleaner syntax
* Align EE settings

* Fix languages
* feat: check required libraries after domain creation

* feat: improve error handling

* chore: format
* Add a progress field on applied controls

* changed save model function & regionalize

* inverse colors and add a validator on the progress field model
* fix: diffentiate cell's tooltips using matrixName%

* fix: typo and code readability
* Increase limit_request_line param for gunicorn

Increase limit_request_line param for gunicorn, this allows some IDP (such as GoAuthentik) provider to work as the request line often goes beyond the default value of 4094.

* Update startup.sh

Forgot backslash...
…1451)

* put entityy mendatory with red star UI

* changed implementation
@coderabbitai
Copy link
Contributor

coderabbitai bot commented Nov 3, 2025

Warning

Rate limit exceeded

@Qnadia has exceeded the limit for the number of commits or files that can be reviewed per hour. Please wait 28 minutes and 11 seconds before requesting another review.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

📥 Commits

Reviewing files that changed from the base of the PR and between 1993bfa and f829284.

⛔ Files ignored due to path filters (5)
  • backend/app_tests/sample_640x480.jpg is excluded by !**/*.jpg
  • backend/app_tests/test_image.jpg is excluded by !**/*.jpg
  • backend/core/templates/core/audit_report_template.docx is excluded by !**/*.docx
  • backend/core/templates/core/audit_report_template_en.docx is excluded by !**/*.docx
  • backend/core/templates/core/audit_report_template_fr.docx is excluded by !**/*.docx
📒 Files selected for processing (107)
  • .dockerignore (1 hunks)
  • .eslintrc.js (1 hunks)
  • .github/ISSUE_TEMPLATE/feature_request.md (1 hunks)
  • .github/workflows/backend-api-tests.yml (1 hunks)
  • .github/workflows/backend-coverage.yaml (1 hunks)
  • .github/workflows/backend-linters.yaml (1 hunks)
  • .github/workflows/backend-migrations-check.yaml (1 hunks)
  • .github/workflows/cla.yml (1 hunks)
  • .github/workflows/docker-build-and-push-dummy.yml (1 hunks)
  • .github/workflows/docker-build-and-push-ee.yml (1 hunks)
  • .github/workflows/docker-build-and-push.yml (1 hunks)
  • .github/workflows/frontend-coverage.yaml (1 hunks)
  • .github/workflows/frontend-linters.yaml (1 hunks)
  • .github/workflows/frontend-unit-tests.yml (1 hunks)
  • .github/workflows/functional-tests.yml (1 hunks)
  • .github/workflows/startup-tests.yml (1 hunks)
  • .github/workflows/unit-test-ciso-assistant.yml (0 hunks)
  • .github/workflows/version-change-check.yml (1 hunks)
  • .gitignore (1 hunks)
  • .pre-commit-config.yaml (1 hunks)
  • CODE_OF_CONDUCT.md (1 hunks)
  • CONTRIBUTING.md (1 hunks)
  • Caddyfile (1 hunks)
  • Dockerfile (0 hunks)
  • LICENSE (0 hunks)
  • LICENSE-AGPL.txt (1 hunks)
  • LICENSE.md (1 hunks)
  • README.md (3 hunks)
  • SECURITY.md (1 hunks)
  • backend/.dockerignore (1 hunks)
  • backend/.gitignore (1 hunks)
  • backend/Dockerfile (1 hunks)
  • backend/app_tests/api/test_api_applied_controls.py (1 hunks)
  • backend/app_tests/api/test_api_assets.py (1 hunks)
  • backend/app_tests/api/test_api_compliance_assessments.py (1 hunks)
  • backend/app_tests/api/test_api_evidences.py (1 hunks)
  • backend/app_tests/api/test_api_folders.py (1 hunks)
  • backend/app_tests/api/test_api_libraries.py (1 hunks)
  • backend/app_tests/api/test_api_policies.py (1 hunks)
  • backend/app_tests/api/test_api_projects.py (1 hunks)
  • backend/app_tests/api/test_api_reference_controls.py (1 hunks)
  • backend/app_tests/api/test_api_requirement_assessments.py (1 hunks)
  • backend/app_tests/api/test_api_requirement_nodes.py (1 hunks)
  • backend/app_tests/api/test_api_risk_acceptances.py (1 hunks)
  • backend/app_tests/api/test_api_risk_assessments.py (1 hunks)
  • backend/app_tests/api/test_api_risk_scenarios.py (1 hunks)
  • backend/app_tests/api/test_api_threats.py (1 hunks)
  • backend/app_tests/api/test_api_user_groups.py (1 hunks)
  • backend/app_tests/api/test_api_users.py (1 hunks)
  • backend/app_tests/api/test_utils.py (1 hunks)
  • backend/app_tests/conftest.py (1 hunks)
  • backend/app_tests/test_file.txt (1 hunks)
  • backend/app_tests/test_vars.py (1 hunks)
  • backend/cal/admin.py (1 hunks)
  • backend/cal/apps.py (1 hunks)
  • backend/cal/migrations/0001_initial.py (1 hunks)
  • backend/cal/models.py (1 hunks)
  • backend/cal/tests/test_models.py (1 hunks)
  • backend/cal/tests/test_utils.py (1 hunks)
  • backend/cal/utils.py (1 hunks)
  • backend/ciso_assistant/VERSION (1 hunks)
  • backend/ciso_assistant/asgi.py (1 hunks)
  • backend/ciso_assistant/build.json (1 hunks)
  • backend/ciso_assistant/scripts/generate_build_file.sh (1 hunks)
  • backend/ciso_assistant/settings.py (1 hunks)
  • backend/ciso_assistant/urls.py (1 hunks)
  • backend/ciso_assistant/wsgi.py (1 hunks)
  • backend/core/__init__.py (1 hunks)
  • backend/core/admin_config.py (1 hunks)
  • backend/core/apps.py (1 hunks)
  • backend/core/base_models.py (1 hunks)
  • backend/core/filters.py (7 hunks)
  • backend/core/generators.py (1 hunks)
  • backend/core/helpers.py (1 hunks)
  • backend/core/locale/fr/LC_MESSAGES/django.po (1 hunks)
  • backend/core/management/commands/reset_mail.py (1 hunks)
  • backend/core/management/commands/status.py (1 hunks)
  • backend/core/management/commands/welcome_mail.py (1 hunks)
  • backend/core/migrations/0001_initial.py (1 hunks)
  • backend/core/migrations/0002_initial.py (1 hunks)
  • backend/core/migrations/0003_alter_riskscenario_strength_of_knowledge.py (1 hunks)
  • backend/core/migrations/0004_complianceassessment_is_published_and_more.py (1 hunks)
  • backend/core/migrations/0005_alter_project_lc_status_alter_securitymeasure_effort.py (1 hunks)
  • backend/core/migrations/0006_remove_securitymeasure_security_function_and_more.py (1 hunks)
  • backend/core/migrations/0007_alter_requirementlevel_framework_and_more.py (1 hunks)
  • backend/core/migrations/0008_alter_complianceassessment_status_and_more.py (1 hunks)
  • backend/core/migrations/0009_framework_max_score_framework_min_score_and_more.py (1 hunks)
  • backend/core/migrations/0010_rename_score_definition_framework_scores_definition_and_more.py (1 hunks)
  • backend/core/migrations/0011_auto_20240501_1342.py (1 hunks)
  • backend/core/migrations/0012_alter_appliedcontrol_updated_at_and_more.py (1 hunks)
  • backend/core/migrations/0013_requirementnode_typical_evidence.py (1 hunks)
  • backend/core/migrations/0014_auto_20240522_1731.py (1 hunks)
  • backend/core/migrations/0015_remove_complianceassessment_result_and_more.py (1 hunks)
  • backend/core/migrations/0016_riskscenario_owner.py (1 hunks)
  • backend/core/migrations/0017_requirementassessment_mapping_inference_and_more.py (1 hunks)
  • backend/core/migrations/0018_appliedcontrol_csf_function_and_more.py (1 hunks)
  • backend/core/migrations/0018_framework_translations_loadedlibrary_translations_and_more.py (1 hunks)
  • backend/core/migrations/0019_merge_20240726_2156.py (1 hunks)
  • backend/core/migrations/0020_fix_libraries_objects_meta.py (1 hunks)
  • backend/core/migrations/0021_alter_framework_urn_alter_loadedlibrary_urn_and_more.py (1 hunks)
  • backend/core/migrations/0022_riskscenario_qualifications.py (1 hunks)
  • backend/core/migrations/0023_alter_appliedcontrol_status.py (1 hunks)
  • backend/core/migrations/0024_appliedcontrol_owner.py (1 hunks)
  • backend/core/migrations/0025_complianceassessment_folder_riskassessment_folder_and_more.py (1 hunks)
  • backend/core/migrations/0026_appliedcontrol_cost.py (1 hunks)
  • backend/core/migrations/0027_requirementassessment_answer_and_more.py (1 hunks)
  • backend/core/migrations/0028_complianceassessment_observation_and_more.py (1 hunks)
✨ Finishing touches
  • 📝 Generate docstrings
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

Copy link
Collaborator

@nas-tabchiche nas-tabchiche left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ditto #2818

Bonjour @Qnadia,

Merci pour vos contributions !
Afin que l'on puisse merge, pouvez-vous synchroniser vos branches avec main ?

Merci beaucoup.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.