gebalamariusz/cloud-audit

Added

• Parallel check execution via ThreadPoolExecutor for faster scans on large accounts
• Wildcard pattern support in suppressions (aws-iam-*, arn:aws:*:*:*:role/deploy-*)
• Debug logging in attack chain correlation engine for diagnosing collection failures
• Makefile with make all (lint + format + typecheck + test), make test-cov, make security
• provider.client() method with boto3 adaptive retry (max 5 attempts) and per-service client caching
• _region_overlap() helper for shared region-matching logic in attack chain rules
• 7 new tests for attack chains AC-25, AC-26, AC-27 and wildcard suppressions (345 total)

Changed

• Thread-safe module-level caches in S3 and CloudTrail checks (threading.Lock)
• Cache reset abstracted into BaseProvider.reset_caches() (was hardcoded S3-only import)
• Scanner enforces canonical check_id from make_check metadata (single source of truth)
• compute_summary() optimized to single pass over findings (was 5+ iterations)
• IAM checks migrated to provider.client() for adaptive retry and client caching
• Demo command updated to show 80 checks (was 47)

Fixed

• SARIF artifactLocation.uri now uses valid relative URI format (checks/{check_id})
• Progress bar no longer advances past 100% in interactive mode
• Documentation URL in pyproject.toml points to docs site instead of GitHub README