cambios profundos con grok

testcases/core/security/core-security-check-auto_enrollment_certificate_management_process.yaml

@@ -0,0 +1,41 @@
+# Updated via Autotest Editor - 2026-05-25T21:52:11.972Z
+# Source of truth: this YAML file
+
+id: core-security-check-auto_enrollment_certificate_management_process
+module: core
+group: core-security
+title: Verify auto-enrollment certificate management (ACME/Let's Encrypt) is configured and functional
+description: Verify auto-enrollment certificate management (ACME/Let's Encrypt) is configured and functional
+priority: Medium
+tags: []
+references: []
+dependencies:
+  - label: Admin Portal
+    value: https://pbx.local:4443 (configure via $BASE_URL)
+  - label: Repository URL
+    value: ${BASE_URL}/downloads or $REPO_URL
+  - label: Protocol
+    value: HTTPS (admin portal) + optional SSH/CLI
+  - label: Credentials
+    value: Admin user with sufficient privileges (portal + SSH where needed)
+  - label: Test Data
+    value: Clean test tenant or lab PBX instance (recommended isolated environment)
+preconditions: []
+postconditions: []
+steps:
+  - action: Open admin portal or repository URL in browser context
+    expected: ''
+  - action: Log in to the admin portal (if required)
+    expected: ''
+  - action: Navigate to the relevant settings section
+    expected: ''
+  - action: Read current configuration values via UI or API
+    expected: ''
+automation_status: automated
+file: tests/core/security.spec.ts
+custom_fields:
+  original_action: check
+automatable:
+  - Full end-to-end execution via Playwright against the admin portal UI
+  - Navigation, form interaction, and assertions are scriptable
+notYet: []

testcases/core/security/core-security-check-encryption_of_sensitive_data_at_rest_and_in_transit.yaml

@@ -0,0 +1,43 @@
+# Updated via Autotest Editor - 2026-05-25T21:52:11.974Z
+# Source of truth: this YAML file
+
+id: core-security-check-encryption_of_sensitive_data_at_rest_and_in_transit
+module: core
+group: core-security
+title: Verify sensitive data is encrypted at rest (DB) and in transit (HTTPS/TLS)
+description: Verify sensitive data is encrypted at rest (DB) and in transit (HTTPS/TLS)
+priority: Medium
+tags: []
+references: []
+dependencies:
+  - label: Admin Portal
+    value: https://pbx.local:4443 (configure via $BASE_URL)
+  - label: Repository URL
+    value: ${BASE_URL}/downloads or $REPO_URL
+  - label: Protocol
+    value: HTTPS (admin portal) + optional SSH/CLI
+  - label: Credentials
+    value: Admin user with sufficient privileges (portal + SSH where needed)
+  - label: Test Data
+    value: Clean test tenant or lab PBX instance (recommended isolated environment)
+preconditions: []
+postconditions: []
+steps:
+  - action: Open admin portal or repository URL in browser context
+    expected: ''
+  - action: Log in to the admin portal (if required)
+    expected: ''
+  - action: Navigate to the relevant settings section
+    expected: ''
+  - action: Read current configuration values via UI or API
+    expected: ''
+automation_status: partial
+file: tests/core/security.spec.ts
+custom_fields:
+  original_action: check
+  partialNotes: HTTPS/TLS configuration verified via portal; DB-level at-rest encryption requires SSH/CLI access
+automatable:
+  - Portal UI configuration and verification steps (already partially automated)
+  - Data extraction and reporting of current settings
+notYet:
+  - HTTPS/TLS configuration verified via portal; DB-level at-rest encryption requires SSH/CLI access

testcases/core/security/core-security-check-ip_access_control_lists.yaml

@@ -0,0 +1,41 @@
+# Updated via Autotest Editor - 2026-05-25T21:52:11.978Z
+# Source of truth: this YAML file
+
+id: core-security-check-ip_access_control_lists
+module: core
+group: core-security
+title: Verify IP Access Control Lists are properly configured and enforced
+description: Verify IP Access Control Lists are properly configured and enforced
+priority: Medium
+tags: []
+references: []
+dependencies:
+  - label: Admin Portal
+    value: https://pbx.local:4443 (configure via $BASE_URL)
+  - label: Repository URL
+    value: ${BASE_URL}/downloads or $REPO_URL
+  - label: Protocol
+    value: HTTPS (admin portal) + optional SSH/CLI
+  - label: Credentials
+    value: Admin user with sufficient privileges (portal + SSH where needed)
+  - label: Test Data
+    value: Clean test tenant or lab PBX instance (recommended isolated environment)
+preconditions: []
+postconditions: []
+steps:
+  - action: Open admin portal or repository URL in browser context
+    expected: ''
+  - action: Log in to the admin portal (if required)
+    expected: ''
+  - action: Navigate to the relevant settings section
+    expected: ''
+  - action: Read current configuration values via UI or API
+    expected: ''
+automation_status: automated
+file: tests/core/security.spec.ts
+custom_fields:
+  original_action: check
+automatable:
+  - Full end-to-end execution via Playwright against the admin portal UI
+  - Navigation, form interaction, and assertions are scriptable
+notYet: []

testcases/core/security/core-security-check-known_vulnerable_dependencies_in_release_artifacts.yaml

@@ -0,0 +1,44 @@
+# Updated via Autotest Editor - 2026-05-25T21:52:11.980Z
+# Source of truth: this YAML file
+
+id: core-security-check-known_vulnerable_dependencies_in_release_artifacts
+module: core
+group: core-security
+title: Verify release artifacts do not contain known vulnerable dependencies (CVE scan)
+description: Verify release artifacts do not contain known vulnerable dependencies (CVE scan)
+priority: Medium
+tags: []
+references: []
+dependencies:
+  - label: Admin Portal
+    value: https://pbx.local:4443 (configure via $BASE_URL)
+  - label: Repository URL
+    value: ${BASE_URL}/downloads or $REPO_URL
+  - label: Protocol
+    value: HTTPS (admin portal) + optional SSH/CLI
+  - label: Credentials
+    value: Admin user with sufficient privileges (portal + SSH where needed)
+  - label: Test Data
+    value: Clean test tenant or lab PBX instance (recommended isolated environment)
+preconditions: []
+postconditions: []
+steps:
+  - action: Open admin portal or repository URL in browser context
+    expected: ''
+  - action: Log in to the admin portal (if required)
+    expected: ''
+  - action: Navigate to the relevant settings section
+    expected: ''
+  - action: Read current configuration values via UI or API
+    expected: ''
+automation_status: partial
+file: tests/core/security.spec.ts
+custom_fields:
+  original_action: check
+  partialNotes: Vulnerability report page in portal automated; actual CVE scanning requires Trivy/OWASP-DC in CI
+automatable:
+  - Portal UI configuration and verification steps (already partially automated)
+  - Data extraction and reporting of current settings
+notYet:
+  - Vulnerability report page in portal automated; actual CVE scanning requires Trivy/OWASP-DC in CI
+  - Full CVE / dependency scanning (Trivy, Grype, OWASP Dependency-Check) in CI pipeline

testcases/core/security/core-security-check-obtain_formal_security_team_sign_off_for_the_new_version.yaml

@@ -0,0 +1,42 @@
+# Updated via Autotest Editor - 2026-05-25T21:52:11.982Z
+# Source of truth: this YAML file
+
+id: core-security-check-obtain_formal_security_team_sign_off_for_the_new_version
+module: core
+group: core-security
+title: Obtain formal written sign-off from the Security team approving the release
+description: Obtain formal written sign-off from the Security team approving the release
+priority: Medium
+tags: []
+references: []
+dependencies:
+  - label: Admin Portal
+    value: https://pbx.local:4443 (configure via $BASE_URL)
+  - label: Repository URL
+    value: ${BASE_URL}/downloads or $REPO_URL
+  - label: Protocol
+    value: HTTPS (admin portal) + optional SSH/CLI
+  - label: Credentials
+    value: Admin user with sufficient privileges (portal + SSH where needed)
+  - label: Test Data
+    value: Clean test tenant or lab PBX instance (recommended isolated environment)
+preconditions: []
+postconditions: []
+steps:
+  - action: Open admin portal or repository URL in browser context
+    expected: ''
+  - action: Log in to the admin portal (if required)
+    expected: ''
+  - action: Navigate to the relevant settings section
+    expected: ''
+  - action: Read current configuration values via UI or API
+    expected: ''
+automation_status: manual
+file: tests/core/security.spec.ts
+custom_fields:
+  original_action: check
+  manualReason: Governance gate requiring human decision and formal sign-off document; cannot be automated
+automatable:
+  - Most UI-driven configuration and verification steps via Playwright
+notYet:
+  - Governance gate requiring human decision and formal sign-off document; cannot be automated

testcases/core/security/core-security-check-previous_security_findings_have_been_remediated_before_release.yaml

@@ -0,0 +1,42 @@
+# Updated via Autotest Editor - 2026-05-25T21:52:11.984Z
+# Source of truth: this YAML file
+
+id: core-security-check-previous_security_findings_have_been_remediated_before_release
+module: core
+group: core-security
+title: Verify all previously identified security findings are remediated before release
+description: Verify all previously identified security findings are remediated before release
+priority: Medium
+tags: []
+references: []
+dependencies:
+  - label: Admin Portal
+    value: https://pbx.local:4443 (configure via $BASE_URL)
+  - label: Repository URL
+    value: ${BASE_URL}/downloads or $REPO_URL
+  - label: Protocol
+    value: HTTPS (admin portal) + optional SSH/CLI
+  - label: Credentials
+    value: Admin user with sufficient privileges (portal + SSH where needed)
+  - label: Test Data
+    value: Clean test tenant or lab PBX instance (recommended isolated environment)
+preconditions: []
+postconditions: []
+steps:
+  - action: Open admin portal or repository URL in browser context
+    expected: ''
+  - action: Log in to the admin portal (if required)
+    expected: ''
+  - action: Navigate to the relevant settings section
+    expected: ''
+  - action: Read current configuration values via UI or API
+    expected: ''
+automation_status: manual
+file: tests/core/security.spec.ts
+custom_fields:
+  original_action: check
+  manualReason: Requires access to security issue tracker and cross-referencing CVEs with the release changelog
+automatable:
+  - Most UI-driven configuration and verification steps via Playwright
+notYet:
+  - Requires access to security issue tracker and cross-referencing CVEs with the release changelog

testcases/core/security/core-security-check-security_event_logging_and_audit_trail_is_active.yaml

@@ -0,0 +1,41 @@
+# Updated via Autotest Editor - 2026-05-25T21:52:11.985Z
+# Source of truth: this YAML file
+
+id: core-security-check-security_event_logging_and_audit_trail_is_active
+module: core
+group: core-security
+title: Verify security event logging and audit trail are active and recording events
+description: Verify security event logging and audit trail are active and recording events
+priority: Medium
+tags: []
+references: []
+dependencies:
+  - label: Admin Portal
+    value: https://pbx.local:4443 (configure via $BASE_URL)
+  - label: Repository URL
+    value: ${BASE_URL}/downloads or $REPO_URL
+  - label: Protocol
+    value: HTTPS (admin portal) + optional SSH/CLI
+  - label: Credentials
+    value: Admin user with sufficient privileges (portal + SSH where needed)
+  - label: Test Data
+    value: Clean test tenant or lab PBX instance (recommended isolated environment)
+preconditions: []
+postconditions: []
+steps:
+  - action: Open admin portal or repository URL in browser context
+    expected: ''
+  - action: Log in to the admin portal (if required)
+    expected: ''
+  - action: Navigate to the relevant settings section
+    expected: ''
+  - action: Read current configuration values via UI or API
+    expected: ''
+automation_status: automated
+file: tests/core/security.spec.ts
+custom_fields:
+  original_action: check
+automatable:
+  - Full end-to-end execution via Playwright against the admin portal UI
+  - Navigation, form interaction, and assertions are scriptable
+notYet: []

testcases/core/security/core-security-check-unnecessary_services_and_ports_are_disabled.yaml

@@ -0,0 +1,43 @@
+# Updated via Autotest Editor - 2026-05-25T21:52:11.992Z
+# Source of truth: this YAML file
+
+id: core-security-check-unnecessary_services_and_ports_are_disabled
+module: core
+group: core-security
+title: Verify unnecessary services and network ports are disabled
+description: Verify unnecessary services and network ports are disabled
+priority: Medium
+tags: []
+references: []
+dependencies:
+  - label: Admin Portal
+    value: https://pbx.local:4443 (configure via $BASE_URL)
+  - label: Repository URL
+    value: ${BASE_URL}/downloads or $REPO_URL
+  - label: Protocol
+    value: HTTPS (admin portal) + optional SSH/CLI
+  - label: Credentials
+    value: Admin user with sufficient privileges (portal + SSH where needed)
+  - label: Test Data
+    value: Clean test tenant or lab PBX instance (recommended isolated environment)
+preconditions: []
+postconditions: []
+steps:
+  - action: Open admin portal or repository URL in browser context
+    expected: ''
+  - action: Log in to the admin portal (if required)
+    expected: ''
+  - action: Navigate to the relevant settings section
+    expected: ''
+  - action: Read current configuration values via UI or API
+    expected: ''
+automation_status: partial
+file: tests/core/security.spec.ts
+custom_fields:
+  original_action: check
+  partialNotes: Service status via admin portal automated; port scanning requires nmap from external host
+automatable:
+  - Portal UI configuration and verification steps (already partially automated)
+  - Data extraction and reporting of current settings
+notYet:
+  - Service status via admin portal automated; port scanning requires nmap from external host

testcases/core/security/core-security-check-verify_role_based_access_control_and_least_privilege_principle.yaml

@@ -0,0 +1,41 @@
+# Updated via Autotest Editor - 2026-05-25T21:52:11.993Z
+# Source of truth: this YAML file
+
+id: core-security-check-verify_role_based_access_control_and_least_privilege_principle
+module: core
+group: core-security
+title: Verify RBAC roles are correctly defined and least-privilege principle is enforced
+description: Verify RBAC roles are correctly defined and least-privilege principle is enforced
+priority: Medium
+tags: []
+references: []
+dependencies:
+  - label: Admin Portal
+    value: https://pbx.local:4443 (configure via $BASE_URL)
+  - label: Repository URL
+    value: ${BASE_URL}/downloads or $REPO_URL
+  - label: Protocol
+    value: HTTPS (admin portal) + optional SSH/CLI
+  - label: Credentials
+    value: Admin user with sufficient privileges (portal + SSH where needed)
+  - label: Test Data
+    value: Clean test tenant or lab PBX instance (recommended isolated environment)
+preconditions: []
+postconditions: []
+steps:
+  - action: Open admin portal or repository URL in browser context
+    expected: ''
+  - action: Log in to the admin portal (if required)
+    expected: ''
+  - action: Navigate to the relevant settings section
+    expected: ''
+  - action: Read current configuration values via UI or API
+    expected: ''
+automation_status: automated
+file: tests/core/security.spec.ts
+custom_fields:
+  original_action: check
+automatable:
+  - Full end-to-end execution via Playwright against the admin portal UI
+  - Navigation, form interaction, and assertions are scriptable
+notYet: []

testcases/core/security/core-security-write-strong_password_policy.yaml

@@ -0,0 +1,41 @@
+# Updated via Autotest Editor - 2026-05-25T21:52:11.995Z
+# Source of truth: this YAML file
+
+id: core-security-write-strong_password_policy
+module: core
+group: core-security
+title: Navigate to security settings and record the current password policy configuration
+description: Navigate to security settings and record the current password policy configuration
+priority: Medium
+tags: []
+references: []
+dependencies:
+  - label: Admin Portal
+    value: https://pbx.local:4443 (configure via $BASE_URL)
+  - label: Repository URL
+    value: ${BASE_URL}/downloads or $REPO_URL
+  - label: Protocol
+    value: HTTPS (admin portal) + optional SSH/CLI
+  - label: Credentials
+    value: Admin user with sufficient privileges (portal + SSH where needed)
+  - label: Test Data
+    value: Clean test tenant or lab PBX instance (recommended isolated environment)
+preconditions: []
+postconditions: []
+steps:
+  - action: Open admin portal or repository URL in browser context
+    expected: ''
+  - action: Log in to the admin portal (if required)
+    expected: ''
+  - action: Navigate to the relevant settings section
+    expected: ''
+  - action: Read current configuration values via UI or API
+    expected: ''
+automation_status: automated
+file: tests/core/security.spec.ts
+custom_fields:
+  original_action: write
+automatable:
+  - Full end-to-end execution via Playwright against the admin portal UI
+  - Navigation, form interaction, and assertions are scriptable
+notYet: []