mirror of
https://github.com/SHOGGOTH-SECTOR/sica-fondt.git
synced 2026-08-01 08:30:20 +00:00
24f816b6a3
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):
- brain/ LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
dispatch, A51 channels, and the OSINT cluster
- knowledge/ LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
MITRE ATT&CK data
- reference/ defensive threat-reference (C3, shhbruh doc) + AdaYaml parser
License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.
Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.
https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
1.9 KiB
1.9 KiB
API Reference: GCP Security Assessment with Forseti
Google Cloud Security Command Center API
| Method | Description |
|---|---|
SecurityCenterClient.list_findings(parent, filter) |
List active findings by severity and state |
SecurityCenterClient.list_sources(parent) |
List security sources in an organization |
SecurityCenterClient.group_findings(parent, group_by) |
Group findings by category or severity |
Cloud Asset Inventory API
| Method | Description |
|---|---|
AssetServiceClient.search_all_iam_policies(scope, query) |
Search IAM policies across org |
AssetServiceClient.search_all_resources(scope, asset_types) |
Search resources by type |
AssetServiceClient.export_assets(parent, output_config) |
Export asset inventory to BigQuery |
Compute Engine API (Firewall)
| Method | Description |
|---|---|
FirewallsClient.list(project) |
List all VPC firewall rules |
FirewallsClient.get(project, firewall) |
Get specific firewall rule details |
Cloud Storage API
| Method | Description |
|---|---|
Client.list_buckets() |
List all buckets in a project |
Bucket.get_iam_policy() |
Get IAM policy for a bucket |
Python Libraries
| Library | Version | Purpose |
|---|---|---|
google-cloud-securitycenter |
>=1.23 | Security Command Center API access |
google-cloud-asset |
>=3.19 | Cloud Asset Inventory searches |
google-cloud-storage |
>=2.10 | Storage bucket auditing |
google-cloud-compute |
>=1.14 | Firewall rule enumeration |
References
- Security Command Center API: https://cloud.google.com/security-command-center/docs/reference/rest
- Cloud Asset API: https://cloud.google.com/asset-inventory/docs/reference/rest
- CIS GCP Foundations Benchmark: https://www.cisecurity.org/benchmark/google_cloud_computing_platform
- ScoutSuite: https://github.com/nccgroup/ScoutSuite