Yogesh Ojha a700bbed03 feat(scans): concurrent scan limit with a launch-order queue ...

Launches past the limit stay pending and start in launch order when a slot
frees, so each running scan gets full speed and memory stays bounded.

- run_scan admits a pending scan under an advisory lock: running plus waiting
  scans ahead of it must be under the limit
- finalize, cancel, pause, delete and a limit change start the next scans;
  the reaper re-sends only scans whose turn has come
- automatic limit: live worker-scans stage slots over the widest step,
  so --scale raises it; Settings sets a fixed limit from 1 to 50
- watch probes skip the queue, resume is never held
- queued scans show how many are ahead

2026-09-25 05:38:23 +05:30

..

ai

chore: production-readiness review across the tree

2026-09-13 18:03:29 +05:30

api_key

chore: production-readiness review across the tree

2026-09-13 18:03:29 +05:30

asset_export

feat(tables): select rows and act on them from one action bar

2026-09-15 07:38:48 +05:30

asset_query

feat(correlation): tracking accounts as a correlation kind

2026-09-24 23:47:45 +05:30

bounty_providers

feat(bounty-hub): HackerOne reports and earnings with program cross-links

2026-09-24 17:51:30 +05:30

correlation

feat(correlation): tracking accounts as a correlation kind

2026-09-24 23:47:45 +05:30

domain_posture

fix(posture): mail rows judged on sender checks only, ranked MX sweep

2026-09-15 12:38:47 +05:30

orchestrator

feat(worker): split scan stages, scan control and background jobs into three workers

2026-09-24 21:00:44 +05:30

scan_surface

feat(oast): an instance-owned callback server, and a tier that pays the wait once

2026-09-21 20:53:01 +05:30

secret_mining

feat(secrets): mine every stored response a scan holds

2026-09-20 09:01:51 +05:30

surface_query

fix(ips): the address sort casts the way the filters do

2026-09-16 12:50:27 +05:30

__init__.py

Refactor validation and DNS tools, implementation of onboarding wizard

2026-06-21 21:56:20 +05:30

activity_log.py

fix(scans): one NUL byte in a response no longer costs a 66-minute stage

2026-09-06 03:59:33 +05:30

bgp_summary.py

chore: production-readiness review across the tree

2026-09-13 18:03:29 +05:30

bounty_feed.py

feat(whats-new): a timeline of what changed since the last visit

2026-09-24 20:49:34 +05:30

bounty_programs.py

feat(whats-new): a timeline of what changed since the last visit

2026-09-24 20:49:34 +05:30

bounty_reports.py

feat(bounty-hub): HackerOne reports and earnings with program cross-links

2026-09-24 17:51:30 +05:30

celery_dispatch.py

feat(scans): concurrent scan limit with a launch-order queue

2026-09-25 05:38:23 +05:30

cert_freshness.py

copy: state the fact, delete the explanation

2026-09-12 11:35:07 +05:30

debounce.py

style: strip explanatory comments across the codebase

2026-09-11 14:11:23 +05:30

endpoint_inventory.py

feat(secrets): mine every stored response a scan holds

2026-09-20 09:01:51 +05:30

endpoint_judge.py

fix(net): a malformed URL port is rejected, not raised, everywhere .port is read

2026-09-16 08:04:06 +05:30

endpoint_noise.py

fix(endpoints): a URL whose port does not read is rejected, not raised

2026-09-16 05:54:41 +05:30

event_publisher.py

Refactor validation and DNS tools, implementation of onboarding wizard

2026-06-21 21:56:20 +05:30

exploitation.py

feat(vulnerabilities): rebuild the finding sheet around triage and the web asset

2026-09-24 09:38:08 +05:30

focused.py

feat(bounty-hub): watch a program

2026-09-12 21:51:18 +05:30

interest.py

refactor(interest): the shipped rule is built in one place

2026-09-16 12:44:36 +05:30

ip_asn.py

fix(ip-asn): fill the network on scans that ran before the ranges landed

2026-09-13 19:09:33 +05:30

ip_inventory.py

style: strip explanatory comments across the codebase

2026-09-11 14:11:23 +05:30

launch_plan.py

refactor(engines): remove the two engine settings no stage read

2026-09-13 11:43:20 +05:30

locks.py

feat(scans): concurrent scan limit with a launch-order queue

2026-09-25 05:38:23 +05:30

name_ownership.py

feat(stages): name ownership, owned names another organisation's server answers

2026-09-24 22:27:25 +05:30

new_checks.py

feat(nuclei): monitor targets against new checks, and a review pass on the pipeline

2026-09-20 09:02:17 +05:30

notification_sync.py

chore: production-readiness review across the tree

2026-09-13 18:03:29 +05:30

notification.py

feat(bounty-hub): watch a program

2026-09-12 21:51:18 +05:30

notifier.py

fix(remote-control): a dev pivot link broke every reply, an unbounded lock leaked

2026-09-16 08:08:10 +05:30

nvd_corpus.py

feat(cve): CVEs become a surface of their own

2026-09-12 18:28:41 +05:30

oast.py

feat(oast): an instance-owned callback server, and a tier that pays the wait once

2026-09-21 20:53:01 +05:30

organization.py

fix(api): two names that reduce to the same slug returned 500

2026-09-07 07:04:45 +05:30

origin_exposure.py

fix(origin-probe): narrow what a shared fingerprint may claim

2026-09-22 19:36:48 +05:30

planner_stats.py

perf: make the read path scale with the estate

2026-09-12 08:49:41 +05:30

port_inventory.py

style: strip explanatory comments across the codebase

2026-09-11 14:11:23 +05:30

proxy_resolve.py

fix(scan): close the last gaps between a scan context and its tools

2026-09-13 12:31:26 +05:30

proxy_sync.py

chore: production-readiness review across the tree

2026-09-13 18:03:29 +05:30

recheck.py

chore: production-readiness review across the tree

2026-09-13 18:03:29 +05:30

report_fonts.py

feat(reports): templates as a filtered table with default and custom badges

2026-09-24 19:07:57 +05:30

response_names.py

feat(http_probe): follow the names responses mention

2026-09-24 22:37:08 +05:30

retention.py

feat(secrets): mine every stored response a scan holds

2026-09-20 09:01:51 +05:30

scan_admission.py

feat(scans): concurrent scan limit with a launch-order queue

2026-09-25 05:38:23 +05:30

scan_factory.py

feat(targets): store the assets you already know and seed every scan with them

2026-09-13 07:21:10 +05:30

scan_resolve.py

fix(stages): a stage with passive and active sources says so

2026-09-14 12:43:52 +05:30

scan_scope.py

fix(coverage): findings come from the run that scanned for them

2026-09-24 18:53:54 +05:30

schedule_timing.py

feat: implement scan scheduling functionality

2026-06-24 08:10:21 +05:30

scope_filter.py

style: strip explanatory comments across the codebase

2026-09-11 14:11:23 +05:30

screenshot_store.py

chore: production-readiness review across the tree

2026-09-13 18:03:29 +05:30

software_match.py

feat(software): name the nearest release in the scan that does not carry each CVE

2026-09-24 23:00:30 +05:30

surface_scope_sync.py

feat(exports): run an export as a job, and keep the recipe

2026-09-13 08:21:50 +05:30

tag.py

fix(api): two names that reduce to the same slug returned 500

2026-09-07 07:04:45 +05:30

target_seeds.py

feat(targets): store the assets you already know and seed every scan with them

2026-09-13 07:21:10 +05:30

threat_intel.py

feat(cve): CVEs become a surface of their own

2026-09-12 18:28:41 +05:30

vuln_inventory.py

feat(nuclei): monitor targets against new checks, and a review pass on the pipeline

2026-09-20 09:02:17 +05:30

vuln_templates.py

feat(oast): an instance-owned callback server, and a tier that pays the wait once

2026-09-21 20:53:01 +05:30

vulnx.py

chore: production-readiness review across the tree

2026-09-13 18:03:29 +05:30

watch_sync.py

fix(scan): claim and dispatch a canvas under one row lock

2026-09-13 11:36:38 +05:30

web_hygiene.py

feat(correlation): tracking accounts as a correlation kind

2026-09-24 23:47:45 +05:30

wordlists.py

feat(arsenal): one layout and one vocabulary across nuclei, wordlists and exploit intel

2026-09-24 18:53:17 +05:30

worker_presence.py

feat(scans): concurrent scan limit with a launch-order queue

2026-09-25 05:38:23 +05:30