[google-secops-siem-incidents] Creation of the connector (#5406)#6322

Open

Kakudou wants to merge 38 commits into

feat/create-google-secops

Commits on May 4, 2026

📦 chore(project): add tooling and dependency manifests
Kakudou
committed
✨ feat(boilerplate): add settings, converter stub, connector core, and entry point
Kakudou
committed
✅ test(boilerplate): add pytest suite for settings, connector, and entry point
Kakudou
committed
🐳 feat(docker): add containerisation with direct Python entrypoint
Kakudou
committed
📄 docs(config): add config.yml.sample, .env.sample, and config.yml
Kakudou
committed
✨ feat(api-engine): add exception hierarchy and ABC interfaces
Kakudou
committed
✨ feat(api-engine): add circuit breaker, rate limiter, HTTP client, and retry strategy
Kakudou
committed
✅ test(api-engine): add 35 BDD pytest tests for all engine components
Kakudou
committed
📝 docs(api-engine): add README
Kakudou
committed
🧬 feat(models): add RuleAlertResponse Pydantic models
Kakudou
committed
✅ test(chronicle-client): add RED tests with polyfactory factories
Kakudou
committed
🛂 feat(client-api): add GoogleAuthHook and GoogleSecOpsApiClient with pagination
Kakudou
committed
✅ test(converter-stix): add RED tests for mappers and converter
Kakudou
committed
🧬 feat(mappers): add incident, observable, and relationship mappers
Kakudou
committed
🔀 feat(converter): implement convert_rule_alert orchestrating all mappers
Kakudou
committed
🛂 feat(connector): implement async intelligence pipeline with pagination
Kakudou
committed
✅ test(e2e): add end-to-end integration tests with log fixtures
Kakudou
committed
✨ feat(state): integrate SDK ConnectorStateManager for typed state
Kakudou
committed
📝 docs(readme): add connector README
Kakudou
committed
🐛 fix(mappers): include rule_name in incident name and fallback to alert_id
Kakudou
committed
📊 feat(connector): add unique count to stix_count and type_summary logs
Kakudou
committed
♻️ refactor(client-api): fix Law of Demeter via public close() and call_api()
Kakudou
committed
♻️ refactor(connector): decompose god method into focused single-responsibility methods
Kakudou
committed
♻️ refactor(api-engine): propagate close() through strategy interface
Kakudou
committed
♻️ refactor(client-api): extract parse_ts to shared utility and publicize compute_pagination_pivot
Kakudou
committed
♻️ refactor(connector): use shared parse_ts, pure _send_bundle, and public pivot API
Kakudou
committed
✅ fix(tests): add RateLimiterRegistry cleanup and fix hidden test discovery
Kakudou
committed
⚰️ fixup! 🧬 feat(mappers): add incident, observable, and relationship mappers
Kakudou
committed
📦 chore(project): getting catalog ready
Kakudou
committed
:rotating_light: fix(linter): fix isort
Kakudou
committed
:heavy_plus_sign: fix(test-requirements): fix test-req
Kakudou
committed
:rotating_light: fix(ci): fix isort and manifest.json
Kakudou
committed
:boom: fix(isort) T_T
Kakudou
committed
refactor(connector): applying codestyle requirements

guzmud
authored and
Kakudou
committed
🔧 refactor(settings): remove chronicle_ prefix from all config fields
Kakudou
committed
🐛 fix(mappers): iterate all matching outcomes instead of first only
Kakudou
committed
♻️ refactor(settings): remove all Chronicle mentions from docstrings and descriptions
Kakudou
committed
:rotating_light: fix(linter)
Kakudou
committed