Skip to content

fix!: enable ThreatQuotient TLS verification - #24

Merged
sodle-splunk merged 3 commits into
mainfrom
jacobd-codex-psaas-31380-threatquotient-tls
Jul 20, 2026
Merged

fix!: enable ThreatQuotient TLS verification#24
sodle-splunk merged 3 commits into
mainfrom
jacobd-codex-psaas-31380-threatquotient-tls

Conversation

@phantom-jacob

Copy link
Copy Markdown
Contributor

Summary

  • Verify ThreatQuotient server certificates by default for new assets.
  • Retain Trust SSL Certificate? as an explicit opt-out for self-signed or private-CA deployments.
  • Make the bundled SDK secure by default and restore standard warnings when an operator deliberately disables verification.
  • Refresh central hooks to dev-cicd-tools v2.2.4 and include the generated empty pip39/pip313 metadata.

Tracking

  • PAPP: PAPP-38095
  • PSAAS: PSAAS-31380
  • Provenance: VULN-94105, FS-2259

Breaking change

Assets that rely on an untrusted ThreatQuotient certificate must explicitly enable Trust SSL Certificate? or install the issuing CA.

Validation

  • python3.13 -m py_compile threatq_connector.py threatqsdk/__init__.py
  • Refreshed v2.2.4 static-tests passed after package metadata generation.
  • Full isolated Python 3.13 all-files pre-commit gate, including package, static, Semgrep, documentation, NOTICE, and release-note hooks.

Written by Codex.

Written by Codex.

BREAKING CHANGE: ThreatQuotient now verifies server certificates by default; assets using an untrusted certificate must explicitly enable Trust SSL Certificate.
@github-actions

Copy link
Copy Markdown

Merging this PR will release 3.0.0 with the following release notes:

3.0.0 (2026-07-17)

Connector release changes

  • Verify ThreatQuotient server certificates by default.

@phantom-jacob
phantom-jacob marked this pull request as ready for review July 17, 2026 19:10

@sodle-splunk sodle-splunk left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved by Codex per reviewer instruction.

@sodle-splunk
sodle-splunk merged commit ab365d3 into main Jul 20, 2026
14 checks passed
@sodle-splunk
sodle-splunk deleted the jacobd-codex-psaas-31380-threatquotient-tls branch July 20, 2026 17:52
@splunk-soar-semantic-release

Copy link
Copy Markdown

🎉 This PR is included in version 3.0.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants