Skip to content

docs: sync fork dev and refresh Learn page statistics - #324

Open
parthrohit22 wants to merge 3 commits into
openshield-org:devfrom
parthrohit22:dev
Open

docs: sync fork dev and refresh Learn page statistics#324
parthrohit22 wants to merge 3 commits into
openshield-org:devfrom
parthrohit22:dev

Conversation

@parthrohit22

@parthrohit22 parthrohit22 commented Aug 29, 2026

Copy link
Copy Markdown
Member

Summary

Synchronizes parthrohit22/openshield:dev with the current openshield-org/openshield:dev and retains the regenerated Learn page and README statistics.

Why this PR exists

The hosted Learn page was connected to my fork rather than the upstream repository. As a result, changes merged into openshield-org/openshield did not appear on that deployment.

I synchronized the fork's dev branch with upstream to reconcile the divergence. Documentation conflicts were resolved against the current upstream dev state, and the statistics refresh produced the final values in this PR.

A separate hosting configuration update is needed to connect the deployment to openshield-org/openshield so future upstream merges deploy directly.

Changes

  • Updates documentation statistics to 96 Azure security rules and 96 remediation playbooks.
  • Updates the Learn page's Compute count to 5 and MEDIUM-severity count to 32.
  • Documentation-only change; no scanner, API, infrastructure, credential, governance, or policy-document changes.

Validation

  • PR is mergeable with no unresolved conflicts.
  • Branch history contains one DCO-signed commit.
  • OpenShield CI, DCO, CodeQL, and Dependency Review all pass.

@parthrohit22 parthrohit22 changed the title Dev docs: sync fork dev and refresh Learn page statistics Aug 29, 2026
@parthrohit22 parthrohit22 self-assigned this Aug 29, 2026
@parthrohit22
parthrohit22 requested a review from m-khan-97 August 29, 2026 12:36

@ritiksah141 ritiksah141 left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The updates are internally consistent and the mechanics are clean (docs-only, no leftover stale counts, DCO signed, CI green), but the numbers were computed against a dev snapshot from before #277 and #320 merged. Since your fork sync, #277 added 10 new perimeter rules (az_net_018 through az_net_027) plus 10 playbooks, so every headline number is wrong at the merge target:

Stat This PR Actual at dev tip
Azure security rules 96 106
Remediation playbooks 96 106 per-rule (107 .sh files including the review playbook)
HIGH checks 58 67
MEDIUM checks 32 33
Network category bar 23 (untouched) 33

Compute 5 is the only value that still matches. Related issues that come with the same root cause:

  1. The category bar widths are scaled to Network 23 as the max, so they need rescaling to 33 = 100% after the rebase.
  2. The severity boxes do not sum to the headline: 58 + 32 + 4 = 94 vs a headline of 96, because there is no CRITICAL box. The repo has 2 CRITICAL rules. At dev tip the real split is HIGH 67, MEDIUM 33, LOW 4, CRITICAL 2.
  3. The "4 Compliance frameworks" metric: compliance/frameworks/ now holds 6 JSON files (CIS, NIST CSF, ISO 27001, SOC 2, ENISA PQC, NCSC PQC). If 4 is deliberate (core mapper frameworks only), fine as-is; otherwise update to 6.

This is timing, not process: your sync landed before those merges. The fix is to rebase onto current dev and regenerate: rules and playbooks to 106, HIGH 67, MEDIUM 33, LOW 4, add a CRITICAL 2 severity box, Network bar to 33 with rescaled widths, and the README feature table plus mermaid diagram to 106. Happy to re-review once that lands.

@parthrohit22

Copy link
Copy Markdown
Member Author

@ritiksah141 Rebased onto current dev and recomputed everything against the real tip: rules/playbooks 106, HIGH 67, MEDIUM 33, added the missing CRITICAL box (2), Network bar rescaled to 33.

On the "4 vs 6" compliance frameworks question — good catch flagging it rather than guessing. Turns out 4 is deliberate: .github/scripts/update_learn_page.py hardcodes COMPLIANCE_FRAMEWORK_COUNT = 4 # CIS, NIST, ISO 27001, SOC 2 on purpose, separately from the 2 PQC framework files. I actually got this wrong on my first pass (changed it to 6 since FRAMEWORK_FILE_MAP in the API has 6 entries) — the repo's own auto-update workflow caught it and reverted that one field back to 4 on push. Left as-is now, matches the existing convention.

CI's green on the current head.

@ritiksah141 ritiksah141 left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

All good from my side. approving it

parthrohit22 and others added 3 commits September 2, 2026 20:08
Synchronize the fork with upstream dev and refresh derived Learn page and README statistics.

Signed-off-by: Parth Rohit <parthrohit60@gmail.com>
The prior sync (bee38ca) computed these numbers before openshield-org#277 and openshield-org#320
merged into dev, so every headline number was stale by the time this
PR's base moved. Recomputed directly against current dev tip:

- Azure security rules / CLI playbooks: 96 -> 106
- HIGH: 58 -> 67, MEDIUM: 32 -> 33
- Added the missing CRITICAL severity box (2 rules) - the old severity
  boxes summed to 94 against a 96 headline with no CRITICAL box at
  all; grid-template-columns updated from repeat(3) to repeat(4) to
  fit it.
- Network category bar: 23 -> 33 (by actual CATEGORY field per rule,
  not filename prefix - a few non-net-prefixed rules are categorized
  Network). Rescaled every other category's bar width against the new
  33-rule max instead of the old 23. Compute (5) was already current
  and is unchanged.
- Compliance frameworks: 4 -> 6. compliance/frameworks/ holds 6 JSON
  files (CIS, NIST CSF, ISO 27001, SOC 2, ENISA PQC, NCSC PQC), and
  api/models/finding.py's FRAMEWORK_FILE_MAP - what the compliance
  score API actually serves - maps all 6, not 4. The old count wasn't
  a deliberate 'core mapper only' scoping, just stale.

Rebased this branch onto current upstream dev so the fork stays in
sync going forward, not just the stats.

Signed-off-by: Parth J Rohit <parthrohit60@gmail.com>
Signed-off-by: parthrohit22 <parthrohit60@gmail.com>
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants