Sean WhalenandClaude Fable 5 0e3f5f37bc Include policy identity on SMTP TLS failure-detail rows ...

RFC 8460 §4.3 nests each failure detail inside a policy, but
parsed_smtp_tls_reports_to_csv_rows only attached policy_domain and
policy_type to the per-policy summary row. Failure-detail rows therefore
had empty policy_domain/policy_type CSV columns, and flat-JSON consumers
(syslog, GELF) could not attribute a failure detail to its policy — the
Google SecOps parser in this PR could not even detect those rows as SMTP
TLS reports, since they carried none of the shape-identifying fields.

Also rebuild the row template per policy: policy_strings and
mx_host_patterns from an earlier policy leaked into a later policy that
did not define them, because the template dict was created once per
report and mutated inside the policies loop.

Both regression tests fail on the previous serializer with
KeyError: 'policy_domain'.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-11 14:10:05 -04:00

..

__init__.py

Split tests.py into per-module tests/test_<module>.py (#774)

2026-05-20 19:29:09 -04:00

test_cli.py

Make Microsoft Graph connection activity observable (#815)

2026-07-09 20:46:39 -04:00

test_elastic.py

Fix failure-report timestamp skew on non-UTC hosts in ES/OpenSearch/Splunk outputs (#812)

2026-07-09 19:45:34 -04:00

test_gelf.py

Make the whole codebase pass pyright cleanly and enforce it in CI (#798)

2026-06-12 21:33:01 -04:00

test_init.py

Include policy identity on SMTP TLS failure-detail rows

2026-07-11 14:10:05 -04:00

test_kafkaclient.py

Make the whole codebase pass pyright cleanly and enforce it in CI (#798)

2026-06-12 21:33:01 -04:00

test_loganalytics.py

Expand honest test coverage from 59% to 83%; fix two latent bugs (#775)

2026-05-20 20:35:22 -04:00

test_maps.py

Split tests.py into per-module tests/test_<module>.py (#774)

2026-05-20 19:29:09 -04:00

test_opensearch.py

Fix failure-report timestamp skew on non-UTC hosts in ES/OpenSearch/Splunk outputs (#812)

2026-07-09 19:45:34 -04:00

test_postgres.py

Cover both arms of the optional psycopg import in postgres.py (#799)

2026-06-12 21:48:20 -04:00

test_s3.py

Declare backward-compatible method aliases inside class bodies (#797)

2026-06-12 20:50:47 -04:00

test_splunk.py

Fix failure-report timestamp skew on non-UTC hosts in ES/OpenSearch/Splunk outputs (#812)

2026-07-09 19:45:34 -04:00

test_syslog.py

Make the whole codebase pass pyright cleanly and enforce it in CI (#798)

2026-06-12 21:33:01 -04:00

test_utils.py

Stop system GeoIP files from shadowing the bundled IPinfo database (#813)

2026-07-09 20:07:00 -04:00

test_webhook.py

Declare backward-compatible method aliases inside class bodies (#797)

2026-06-12 20:50:47 -04:00

tzutil.py

Fix failure-report timestamp skew on non-UTC hosts in ES/OpenSearch/Splunk outputs (#812)

2026-07-09 19:45:34 -04:00