refactor(audit): replace magic strings with AuditModules/AuditActions constants

- Replace 349 .Audited("module", "action") calls with typed constants across 91 files
- Add 21 missing action constants to AuditActions.cs (Policy, Attestor, Evidence, Scanner)
- Compile-time safety for module/action naming across all 15 services

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
master
2026-04-09 12:40:18 +03:00
parent c698ff40cc
commit 5d245f958f
91 changed files with 346 additions and 325 deletions

View File

@@ -36,7 +36,7 @@ public static class IntegrationEndpoints
.RequireAuthorization(IntegrationPolicies.Operate)
.WithName("RunAiCodeGuard")
.WithDescription(_t("integrations.ai_code_guard.run_description"))
.Audited("integrations", "run_code_guard");
.Audited(AuditModules.Integrations, AuditActions.Integrations.RunCodeGuard);
// List integrations
group.MapGet("/", async (
@@ -89,7 +89,7 @@ public static class IntegrationEndpoints
.RequireAuthorization(IntegrationPolicies.Write)
.WithName("CreateIntegration")
.WithDescription(_t("integrations.integration.create_description"))
.Audited("integrations", "create");
.Audited(AuditModules.Integrations, AuditActions.Integrations.Create);
// Update integration
group.MapPut("/{id:guid}", async (
@@ -107,7 +107,7 @@ public static class IntegrationEndpoints
.RequireAuthorization(IntegrationPolicies.Write)
.WithName("UpdateIntegration")
.WithDescription(_t("integrations.integration.update_description"))
.Audited("integrations", "update");
.Audited(AuditModules.Integrations, AuditActions.Integrations.Update);
// Delete integration
group.MapDelete("/{id:guid}", async (
@@ -124,7 +124,7 @@ public static class IntegrationEndpoints
.RequireAuthorization(IntegrationPolicies.Write)
.WithName("DeleteIntegration")
.WithDescription(_t("integrations.integration.delete_description"))
.Audited("integrations", "delete");
.Audited(AuditModules.Integrations, AuditActions.Integrations.Delete);
// Test connection
group.MapPost("/{id:guid}/test", async (
@@ -141,7 +141,7 @@ public static class IntegrationEndpoints
.RequireAuthorization(IntegrationPolicies.Operate)
.WithName("TestIntegrationConnection")
.WithDescription(_t("integrations.integration.test_description"))
.Audited("integrations", "test");
.Audited(AuditModules.Integrations, AuditActions.Integrations.Test);
// Discover resources
group.MapPost("/{id:guid}/discover", async (
@@ -170,7 +170,7 @@ public static class IntegrationEndpoints
.RequireAuthorization(IntegrationPolicies.Operate)
.WithName("DiscoverIntegrationResources")
.WithDescription("Discover resources exposed by the integration provider.")
.Audited("integrations", "discover");
.Audited(AuditModules.Integrations, AuditActions.Integrations.Discover);
// Health check
group.MapGet("/{id:guid}/health", async (