Document attack-path findings from a rules run

[om986]

Summary

• Document the attack-path finding that a rules run writes for an internet-reachable workload that can reach a datastore, matching OpenSourceOM/core#68.
• The attack-path, rules, schema, API, console, and getting-started pages describe the stored node ids and when the row is written.
• Findings responses now mention path and next_cursor.

Test plan

• Read /docs/attack-paths/ and /docs/rules/ and confirm the demo path (Internet → sg-web → web-1 → AdminRole → prod-db) matches the core behavior
• Confirm the schema and API pages name finding_type: attack_path and the findings path field

Made with Cursor

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
website	Ready	Preview	Sep 29, 2026 8:26pm UTC

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 32f07254-7924-49cc-bfcf-4374c843ab82

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}