Scan Workspace

◆ ClaudeSec DevSecOps Dashboard v{{VERSION}}

코드, 클라우드, GitHub, 아키텍처, 네트워크 보안 상태를 기능별로 탐색하고 우선순위를 정리하는 화면입니다.

Grade {{GRADE}} {{TOTAL_ISSUES}} issues Scan {{NOW}} {{DURATION}}s

Functional Security View

한눈에 위험을 분류하고, 바로 고쳐야 할 항목부터 lane별로 내려가며 확인합니다.

이 화면은 triage-first dashboard입니다. 먼저 Immediate Priorities와 Critical / High Queue를 확인한 뒤, Code Security, Cloud CSPM, GitHub Security, Network & Telemetry, Architecture lane으로 drill-down 하세요.

Grade {{GRADE}} {{TOTAL_ISSUES}} actionable findings {{SCANNER_TOTAL}} local checks {{ENV_CONNECTED}} / {{ENV_TOTAL}} integrations connected

ISMS 메인 대시보드 로컬 스캐너 바로가기

Security Score

현재 스캔 결과의 총괄 점수와 등급

Cloud Failures

Prowler 기반 클라우드/CSPM 실패 항목

GitHub Findings

GitHub 보안 및 워크플로우 관련 이슈

Network Signals

Trivy, TLS, Datadog, 네트워크 수집 상태

📊

Findings

🔴

Critical

🟠

High

🟡

Medium

✓

Passed

⚠

Warning

Critical {{N_CRIT}} High {{N_HIGH}} Medium {{N_MED}} Warning {{N_WARN}} Low {{N_LOW}}

Immediate Priorities

Highest-confidence remediation targets across scanner and CSPM evidence

Open critical queue →

Coverage Snapshot

What is connected, monitored, and currently producing evidence

Open telemetry lane →

Investigation Lanes

Choose the lane that matches the remediation decision you need to make

Open control map →

Overview

{{TOTAL_ISSUES}} issues

🧭

우선순위, 범위, 상위 위험, 환경 연결 상태를 운영 관점에서 빠르게 정리합니다.

Open workspace →

Cloud CSPM

{{TOTAL_PROWLER_FAIL}} fail

☁

계정, 클러스터, IaC 범위로 나눠 provider별 클라우드 실패를 추적합니다.

View provider lanes →

GitHub Security

{{GH_TOTAL}} findings

🐙

Actions 권한, 브랜치 보호, workflow security, secret exposure 리스크를 빠르게 찾습니다.

Open GitHub checks →

Code Security

{{SCANNER_ISSUES}} mapped

🧪

로컬 스캐너 결과를 OWASP, LLM Top 10, 컴플라이언스 맵과 함께 해석합니다.

Open code security map →

Architecture

Design map

🏗

영향 받는 보안 도메인과 설계 경계를 연결해 구조적 위험을 묶어 봅니다.

Inspect architecture →

Network & Telemetry

📡

TLS, HTTP header, Trivy, Datadog 증적을 한 lane에서 묶어 운영 가시성을 점검합니다.

Open telemetry lane →

Security Score

Grade {{GRADE}}

Scanner: {{PASSED}} passed / {{FAILED}} failed / {{WARNINGS}} warnings

Prowler: {{TOTAL_PROWLER_FAIL}} failed / {{TOTAL_PROWLER_PASS}} passed

Environment: {{ENV_CONNECTED}}/{{ENV_TOTAL}} connected

Provider Summary

🏗 Architecture Security Domains

View security impact by domain instead of by individual finding rows

View details →

🔬 Network & Telemetry

Network scan, TLS posture, Trivy, and Datadog evidence in one operating lane

View details →

🛡Scanner{{SCANNER_ISSUES}}

☁Prowler CSPM{{TOTAL_PROWLER_FAIL}}

🐙GitHub Security{{GH_TOTAL}}

📚Best Practices

🏗Architecture

🔬Network & security tools{{NETWORK_TOOLS_BADGE}}

🔥 Critical / High Queue

Grouped by unique check so repeat issues surface immediately

Runtime Integrations

{{ENV_CONNECTED}}/{{ENV_TOTAL}} connected · click any pill to configure credentials or prerequisites

📊 Scan trend

Security score and fail/warn deltas over time. Hover for detail.

🛡️ ClaudeSec Local Security Scanner {{SCANNER_TOTAL}} checks Static analysis of project source, config, CI workflows, and environment artifacts

✓ {{PASSED}} passed

✗ {{FAILED}} failed

⚠ {{WARNINGS}} warnings

— {{SKIPPED}} skipped

✓ {{PASS_PCT}}% passed ✗ {{FAIL_PCT}}% failed ⚠ {{WARN_PCT}}% warnings

Severity	Status	Check ID	Finding	Details / Remediation

Prowler cloud scan summary

Provider	Total	Critical	High	Medium	Low	Passed

☁ AWS findings ({{AWS_TOTAL}})

Severity	Check ID	Description

◈ GCP findings ({{GCP_TOTAL}})

Severity	Check ID	Description

🏢 Google Workspace findings ({{GWS_TOTAL}})

Severity	Check ID	Description

⎈ Kubernetes findings ({{K8S_TOTAL}})

Severity	Check ID	Description

◇ Azure findings ({{AZURE_TOTAL}})

Severity	Check ID	Description

📧 Microsoft 365 findings ({{M365_TOTAL}})

Severity	Check ID	Description

📋 IaC findings ({{IAC_TOTAL}})

Severity	Check ID	Description

GitHub security check results ({{GH_TOTAL}} findings)

Severity	Check ID	Description	Affected repos

OWASP Top 10:2025 + LLM Top 10:2025

Compliance framework mapping

📜 정보보호 규정·지침 ISMS-P 매핑 · Google Drive 연동

Architecture diagram

Architecture security domains