How bogdanticu88/axiom works
Axiom is an evidence-backed vulnerability-management platform. Its principal workflow takes scanner findings through import and asset/deployment binding, investigation and policy-based prioritisation, approved remediation, verification against the affected deployment, and recorded closure/reporting. The graph also shows the analyst UI, evidence handling, integrations, and durable job infrastructure. Relationships are supported by the README and the cited excerpts or SOURCE INDEX references; unsampled subsystem wiring is not inferred.
Main entry points: cases/service.py Case workflow · evidence/service.py Evidence store · pipeline.py Finding ingestion · app.py API
Components 16
Finding workflow
- Analyst UI
frontend/src/App.tsx - Finding ingestion
backend/axiom/ingestion/pipeline.py - Source adapters
backend/axiom/adapters/catalogue.py - Case workflow
backend/axiom/domains/cases/service.py - Verification worker
backend/axiom/verification/worker.py - Reports
backend/axiom/domains/reports/service.py
Decisions and action
- Investigation
backend/axiom/investigation/service.py - Policies and priority
backend/axiom/domains/policies/service.py - Approved actions
backend/axiom/domains/actions/service.py - Ticket integrations
backend/axiom/integrations
Platform services
- API
backend/axiom/api/app.py - Evidence store
backend/axiom/domains/evidence/service.py - Audit history
backend/axiom/audit.py
Runtime infrastructure
- PostgreSQL
backend/axiom/db.py - Durable jobs
backend/axiom/jobs/worker.py
Other components
- Analyst
Connections 23
- Analyst → Analyst UI: uses
README.md - Analyst UI → API: requests
frontend/src/App.tsx - API → Finding ingestion: routes imports
backend/axiom/api/app.py - Finding ingestion → Source adapters: parses with
backend/axiom/ingestion/pipeline.py - Finding ingestion → Evidence store: reads evidence
backend/axiom/ingestion/pipeline.py - Finding ingestion → Case workflow: creates findings
backend/axiom/ingestion/pipeline.py - Analyst → Investigation: requests investigation
README.md - Investigation → Evidence store: uses snapshots
backend/axiom/investigation/service.py - Case workflow → Policies and priority: loads policy
backend/axiom/domains/cases/service.py - Analyst → Approved actions: approves action
README.md - Approved actions → Ticket integrations: executes approved action
- Verification worker → Case workflow: records result
backend/axiom/verification/worker.py - Verification worker → Evidence store: records evidence
backend/axiom/verification/worker.py - Analyst → Case workflow: closes case
README.md - Analyst → Reports: exports report
README.md - API → Evidence store: uses service
backend/axiom/api/app.py - API → Case workflow: serves cases
backend/axiom/api/app.py - Case workflow → PostgreSQL: reads and writes
backend/axiom/domains/cases/service.py - Evidence store → PostgreSQL: records metadata
backend/axiom/domains/evidence/service.py - Evidence store → PostgreSQL: stores objects
backend/axiom/domains/evidence/service.py - Case workflow → Audit history: records decisions
backend/axiom/domains/cases/service.py - Durable jobs → PostgreSQL: claims jobs
backend/axiom/jobs/worker.py - Approved actions → Durable jobs: schedules work
backend/axiom/domains/actions/service.py