feat/chaitin devices

.flocks/flockshub/index.json

@@ -14544,6 +14544,73 @@
       "trust": "community",
       "riskLevel": "medium",
       "manifestPath": "plugins/skills/Anthropic-Cybersecurity-Skills/validating-backup-integrity-for-recovery/manifest.json"
+    },
+    {
+      "id": "chaitin_muyun_api_v3",
+      "type": "device",
+      "name": "Chaitin Muyun",
+      "description": "Chaitin Muyun host security platform JSON-RPC API 3.0 integration.",
+      "version": "3.0",
+      "category": "integration",
+      "tags": [
+        "edr",
+        "hids",
+        "vulnerability",
+        "integration"
+      ],
+      "useCases": [
+        "integration",
+        "incident-response",
+        "vulnerability-management"
+      ],
+      "trust": "official",
+      "riskLevel": "low",
+      "manifestPath": "plugins/tools/device/chaitin_muyun_api_v3/manifest.json",
+      "descriptionCn": "长亭牧云主机安全平台 API 3.0 接入。"
+    },
+    {
+      "id": "chaitin_safeline_waf_v1_0_0",
+      "type": "device",
+      "name": "Chaitin SafeLine WAF",
+      "description": "Chaitin SafeLine WAF OpenAPI integration.",
+      "version": "1.0.0",
+      "category": "integration",
+      "tags": [
+        "waf",
+        "web-security",
+        "integration"
+      ],
+      "useCases": [
+        "integration",
+        "threat-detection",
+        "log-analysis"
+      ],
+      "trust": "official",
+      "riskLevel": "low",
+      "manifestPath": "plugins/tools/device/chaitin_safeline_waf_v1_0_0/manifest.json",
+      "descriptionCn": "长亭雷池 WAF OpenAPI 接入。"
+    },
+    {
+      "id": "chaitin_dongjian_v2_8",
+      "type": "device",
+      "name": "Chaitin Dongjian",
+      "description": "Chaitin Dongjian (X-Ray) security assessment system OpenAPI V2.8 integration.",
+      "version": "2.8",
+      "category": "integration",
+      "tags": [
+        "vulnerability",
+        "web-security",
+        "integration"
+      ],
+      "useCases": [
+        "integration",
+        "vulnerability-management",
+        "security-reporting"
+      ],
+      "trust": "official",
+      "riskLevel": "low",
+      "manifestPath": "plugins/tools/device/chaitin_dongjian_v2_8/manifest.json",
+      "descriptionCn": "长亭洞鉴（X-Ray）安全评估系统 OpenAPI V2.8 接入。"
     }
   ]
 }

.flocks/flockshub/plugins/tools/device/chaitin_dongjian_v2_8/_provider.yaml

@@ -0,0 +1,40 @@
+name: chaitin_dongjian
+vendor: chaitin
+service_id: chaitin_dongjian_api
+version: "2.8"
+integration_type: device
+description: >
+  Chaitin Dongjian (X-Ray) security assessment system OpenAPI V2.8
+  integration. Configure the device URL and API Token. The handler normalizes
+  the base URL to /api/v2.
+description_cn: >
+  长亭洞鉴（X-Ray）安全评估系统 OpenAPI V2.8 接入。配置设备地址和 API Token；
+  handler 会将地址归一化到 /api/v2。
+auth:
+  type: custom
+  secret: chaitin_dongjian_token
+credential_fields:
+  - key: base_url
+    label: 设备地址
+    storage: config
+    config_key: base_url
+    input_type: url
+    required: true
+    placeholder: "https://dongjian.example.com"
+  - key: token
+    label: API Token
+    storage: secret
+    config_key: token
+    secret_id: chaitin_dongjian_token
+    input_type: password
+    required: true
+defaults:
+  timeout: 30
+  category: custom
+  product_version: "OpenAPI V2.8"
+  verify_ssl: false
+notes: |
+  认证规则来自《洞鉴（X-Ray）安全评估系统OpenAPI接口文档（标准版）V2.8》：
+    - 所有 API 请求需要在请求头 token 中携带认证信息。
+    - 接口路径基于 /api/v2，例如 GET /api/v2/project/?limit=1&offset=0。
+    - GET 用于获取指定数据；POST /filter/ 用于批量筛选查询。

.flocks/flockshub/plugins/tools/device/chaitin_dongjian_v2_8/_test.yaml

@@ -0,0 +1,59 @@
+schema_version: 1
+provider: chaitin_dongjian_api
+
+connectivity:
+  tool: chaitin_dongjian_projects
+  params:
+    action: project_list
+    limit: 1
+    offset: 0
+
+fixtures:
+  chaitin_dongjian_projects:
+    - label: List projects
+      label_cn: 查询组织单位列表
+      tags: [smoke]
+      params:
+        action: project_list
+        limit: 10
+        offset: 0
+      assert:
+        success: true
+
+  chaitin_dongjian_tasks:
+    - label: Filter scan task instances
+      label_cn: 筛选任务实例
+      tags: [task]
+      params:
+        action: xprocess_filter
+        body:
+          limit: 10
+          offset: 0
+
+  chaitin_dongjian_results:
+    - label: Filter vulnerabilities
+      label_cn: 筛选漏洞资产
+      tags: [vulnerability]
+      params:
+        action: vuln_filter
+        body:
+          limit: 10
+          offset: 0
+
+  chaitin_dongjian_api_readonly:
+    - label: Show API catalog
+      label_cn: 查看 API 目录
+      tags: [api]
+      params:
+        action: api_catalog
+      assert:
+        success: true
+
+  chaitin_dongjian_api_mutation:
+    - label: Show API catalog before confirmed mutation
+      label_cn: 变更调用前查看 API 目录
+      tags: [api, mutation]
+      params:
+        action: api_catalog
+      assert:
+        success: true