All pull requests

Pull requests

• feat(servers): add FastMCP tool annotations across SecOps, SOAR, GTI, and SCC (fixes #320)

  ready-for-review
  #321·dandye opened Sep 25, 2026Collaborator·

  ·
  1

• feat(secops): consolidate comprehensive Chronicle 1P Case, Alert, and SOAR MCP tool suite

  #319·dandye opened Sep 19, 2026Collaborator·

  ·
  1

• Add MCP tools for Chronicle REST API Case Creation Endpoints

  #318·dandye opened Sep 19, 2026Collaborator·

  ·
  1

• fix(secops): log investigation diagnostics instead of printing

  #315·abdeltaehass opened Sep 10, 2026Contributor·

  ·
  1

  1

• feat: add case close root cause discovery tools (#124)

  #314·dandye opened Sep 9, 2026Collaborator·

  ·
  1

• fix(secops): ensure consistent string return types in security tools

  ready-for-review
  #313·dandye opened Sep 9, 2026Collaborator·

  ·
  1

• docs: address setup friction points and client config pitfalls (#123)

  #312·dandye opened Sep 9, 2026Collaborator·

  ·
  1

• feat(soar): enable trust_env in HttpClient session for corporate proxies (#198)

  ready-for-review
  #311·dandye opened Sep 9, 2026Collaborator·

  ·
  1

• fix(secops): validate alert_id and return structured dict for alert tools

  ready-for-review
  #310·dandye opened Sep 9, 2026Collaborator·

  ·
  1

• fix(adk): fast-follow fixes for ADK v2 CLI, MCP subprocess propagation, and credential auto-detection

  ready-for-review
  #309·dandye opened Sep 8, 2026Collaborator·

  ·
  

• feat(secops): add Detection Engineering Agent MCP tools and coverage evaluation skill

  ready-for-review
  #305·dandye opened Sep 3, 2026Collaborator·

  ·

• Add Antigravity (agy) subagent management system via tmux

  #304·dandye opened Sep 2, 2026Collaborator·

  ·

• feat(secops): support service account impersonation and credential fallbacks (#250)

  ready-for-review
  #302·dandye opened Aug 30, 2026Collaborator·

  ·
  1

• docs(adk): clarify Cloud Run deployer and runtime IAM roles (#132)

  ready-for-review
  #301·dandye opened Aug 30, 2026Collaborator·

  ·
  2

• chore(scc): bump version to 0.2.0, fix SetMuteRequest, and add unit test suite

  ready-for-review
  #300·dandye opened Aug 30, 2026Collaborator·

  ·
  

• fix(secops): surface all indicator fields and metadata in get_ioc_matches

  ready-for-review
  #297·dandye opened Aug 30, 2026Collaborator·

  ·
  1

• fix(secops-soar): resolve marketplace imports and synchronize setup.py (#151, #293, #294)

  ready-for-review
  #295·dandye opened Aug 29, 2026Collaborator·

  ·
  3

• fix(secops): standardize ISO datetime parsing and normalize to UTC

  ready-for-review
  #292·dandye opened Aug 29, 2026Collaborator·

  ·
  1

• feat(packaging): sync publishing for google-secops-mcp and secops-mcp

  ready-for-review
  #289·dandye opened Aug 28, 2026Collaborator·

  ·
  

• feat(secops): add comprehensive Chronicle 1P SOAR tool suite and docs

  enhancementpythonready-for-review
  #282·dandye opened Aug 13, 2026Collaborator·

  ·
  1

• fix(secops): resolve entity_lookup formatter issues (#269)

  ready-for-review
  #279·dandye opened Aug 13, 2026Collaborator·

  ·
  1

• Exclude noisy fields from collection and file behavior responses

  #275·avadhsonagara opened Jul 13, 2026·

  ·
  1

• Add GEPA optimization for MCP Tools

  #270·dandye opened Jun 3, 2026Collaborator·

  ·

• docs: add note highlighting Remote MCP Server as preferred SecOps path

  ready-for-review
  #254·dandye opened May 7, 2026Collaborator·

  ·
  

• Adding feature to update rules in place rather than having to only create new ones

  requested-changes
  #253·Pavornoc opened May 7, 2026·

  ·
  1