new advisories work and features gaps work

This commit is contained in:
master
2026-01-14 18:39:19 +02:00
parent 95d5898650
commit 15aeac8e8b
148 changed files with 16731 additions and 554 deletions

View File

@@ -205,6 +205,29 @@ stella proof verify --bundle proof-bundle.zip \
--skip-rekor # No network access
```
### 3.2a CI/CD Gate Verification Quick Reference
> Sprint: SPRINT_20260112_004_DOC_cicd_gate_verification
Concise commands for CI/CD pipeline verification gates:
**Online (Rekor-backed):**
```bash
stellaops proof verify --image $IMAGE --check-rekor --fail-on-missing
```
**Offline (local ledger):**
```bash
stellaops proof verify --image $IMAGE --offline --ledger-path /var/lib/stellaops/ledger
```
**Evidence pack verification:**
```bash
stellaops evidence-pack verify --bundle $PACK_PATH --check-signatures --check-merkle
```
See also: [CI/CD Gate Flow - DSSE Witness Verification](../flows/10-cicd-gate-flow.md#5a-dsse-witness-verification-required) | [Proof Verification Runbook](proof-verification-runbook.md)
### 3.3 Verification Checks
| Check | Description | Can Skip? |