stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 3 Releases Wiki Activity

up
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
Details
Signals CI & Image / signals-ci (push) Has been cancelled
Details
Signals Reachability Scoring & Events / reachability-smoke (push) Has been cancelled
Details
Signals Reachability Scoring & Events / sign-and-upload (push) Has been cancelled
Details
AOC Guard CI / aoc-guard (push) Has been cancelled
Details
AOC Guard CI / aoc-verify (push) Has been cancelled
Details
Reachability Corpus Validation / validate-corpus (push) Has been cancelled
Details
Reachability Corpus Validation / validate-ground-truths (push) Has been cancelled
Details
Scanner Analyzers / Discover Analyzers (push) Has been cancelled
Details
Scanner Analyzers / Validate Test Fixtures (push) Has been cancelled
Details
Reachability Corpus Validation / determinism-check (push) Has been cancelled
Details
Scanner Analyzers / Build Analyzers (push) Has been cancelled
Details
Scanner Analyzers / Test Language Analyzers (push) Has been cancelled
Details
Scanner Analyzers / Verify Deterministic Output (push) Has been cancelled
Details
Notify Smoke Test / Notify Unit Tests (push) Has been cancelled
Details
Notify Smoke Test / Notifier Service Tests (push) Has been cancelled
Details
Notify Smoke Test / Notification Smoke Test (push) Has been cancelled
Details
Policy Lint & Smoke / policy-lint (push) Has been cancelled
Details

Browse Source
This commit is contained in:
StellaOps Bot
2025-12-14 15:50:38 +02:00
parent f1a39c4ce3
commit 233873f620
249 changed files with 29746 additions and 154 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
bench/findings/CVE-2015-7547-reachable/decision.dsse.json Normal file
View File

@@ -0,0 +1,10 @@
{
"payload": "eyJAY29udGV4dCI6Imh0dHBzOi8vb3BlbnZleC5kZXYvbnMvdjAuMi4wIiwiQHR5cGUiOiJWRVgiLCJhdXRob3IiOiJTdGVsbGFPcHMgQmVuY2ggQXV0b21hdGlvbiIsInJvbGUiOiJzZWN1cml0eV90ZWFtIiwic3RhdGVtZW50cyI6W3siYWN0aW9uX3N0YXRlbWVudCI6IlVwZ3JhZGUgdG8gcGF0Y2hlZCB2ZXJzaW9uIG9yIGFwcGx5IG1pdGlnYXRpb24uIiwiaW1wYWN0X3N0YXRlbWVudCI6IkV2aWRlbmNlIGhhc2g6IHNoYTI1NjpiZTMwNDMzZTE4OGEyNTg4NTY0NDYzMzZkYmIxMDk1OWJmYjRhYjM5NzQzODBhOGVhMTI2NDZiZjI2ODdiZjlhIiwicHJvZHVjdHMiOlt7IkBpZCI6InBrZzpnZW5lcmljL2dsaWJjLUNWRS0yMDIzLTQ5MTEtbG9vbmV5LXR1bmFibGVzQDEuMC4wIn1dLCJzdGF0dXMiOiJhZmZlY3RlZCIsInZ1bG5lcmFiaWxpdHkiOnsiQGlkIjoiaHR0cHM6Ly9udmQubmlzdC5nb3YvdnVsbi9kZXRhaWwvQ1ZFLTIwMTUtNzU0NyIsIm5hbWUiOiJDVkUtMjAxNS03NTQ3In19XSwidGltZXN0YW1wIjoiMjAyNS0xMi0xNFQwMjoxMzozOFoiLCJ0b29saW5nIjoiU3RlbGxhT3BzL2JlbmNoLWF1dG9AMS4wLjAiLCJ2ZXJzaW9uIjoxfQ==",
"payloadType": "application/vnd.openvex+json",
"signatures": [
{
"keyid": "stella.ops/bench-automation@v1",
"sig": "PLACEHOLDER_SIGNATURE_REQUIRES_ACTUAL_SIGNING"
}
]
}

25
bench/findings/CVE-2015-7547-reachable/decision.openvex.json Normal file
View File

@@ -0,0 +1,25 @@
{
"@context": "https://openvex.dev/ns/v0.2.0",
"@type": "VEX",
"author": "StellaOps Bench Automation",
"role": "security_team",
"statements": [
{
"action_statement": "Upgrade to patched version or apply mitigation.",
"impact_statement": "Evidence hash: sha256:be30433e188a258856446336dbb10959bfb4ab3974380a8ea12646bf2687bf9a",
"products": [
{
"@id": "pkg:generic/glibc-CVE-2023-4911-looney-tunables@1.0.0"
}
],
"status": "affected",
"vulnerability": {
"@id": "https://nvd.nist.gov/vuln/detail/CVE-2015-7547",
"name": "CVE-2015-7547"
}
}
],
"timestamp": "2025-12-14T02:13:38Z",
"tooling": "StellaOps/bench-auto@1.0.0",
"version": 1
}

25
bench/findings/CVE-2015-7547-reachable/evidence/reachability.json Normal file
View File

@@ -0,0 +1,25 @@
{
"case_id": "glibc-CVE-2023-4911-looney-tunables",
"generated_at": "2025-12-14T02:13:38Z",
"ground_truth": {
"case_id": "glibc-CVE-2023-4911-looney-tunables",
"paths": [
[
"sym://net:handler#read",
"sym://glibc:glibc.c#entry",
"sym://glibc:glibc.c#sink"
]
],
"schema_version": "reachbench.reachgraph.truth/v1",
"variant": "reachable"
},
"paths": [
[
"sym://net:handler#read",
"sym://glibc:glibc.c#entry",
"sym://glibc:glibc.c#sink"
]
],
"schema_version": "richgraph-excerpt/v1",
"variant": "reachable"
}

23
bench/findings/CVE-2015-7547-reachable/evidence/sbom.cdx.json Normal file
View File

@@ -0,0 +1,23 @@
{
"bomFormat": "CycloneDX",
"components": [
{
"name": "glibc-CVE-2023-4911-looney-tunables",
"purl": "pkg:generic/glibc-CVE-2023-4911-looney-tunables@1.0.0",
"type": "library",
"version": "1.0.0"
}
],
"metadata": {
"timestamp": "2025-12-14T02:13:38Z",
"tools": [
{
"name": "bench-auto",
"vendor": "StellaOps",
"version": "1.0.0"
}
]
},
"specVersion": "1.6",
"version": 1
}

11
bench/findings/CVE-2015-7547-reachable/metadata.json Normal file
View File

@@ -0,0 +1,11 @@
{
"case_id": "glibc-CVE-2023-4911-looney-tunables",
"cve_id": "CVE-2015-7547",
"generated_at": "2025-12-14T02:13:38Z",
"generator": "scripts/bench/populate-findings.py",
"generator_version": "1.0.0",
"ground_truth_schema": "reachbench.reachgraph.truth/v1",
"purl": "pkg:generic/glibc-CVE-2023-4911-looney-tunables@1.0.0",
"reachability_status": "reachable",
"variant": "reachable"
}

5
bench/findings/CVE-2015-7547-reachable/rekor.txt Normal file
View File

@@ -0,0 +1,5 @@
# Rekor log entry placeholder
# Submit DSSE envelope to Rekor to populate this file
log_index: PENDING
uuid: PENDING
timestamp: 2025-12-14T02:13:38Z

10
bench/findings/CVE-2015-7547-unreachable/decision.dsse.json Normal file
View File

@@ -0,0 +1,10 @@
{
"payload": "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",
"payloadType": "application/vnd.openvex+json",
"signatures": [
{
"keyid": "stella.ops/bench-automation@v1",
"sig": "PLACEHOLDER_SIGNATURE_REQUIRES_ACTUAL_SIGNING"
}
]
}

25
bench/findings/CVE-2015-7547-unreachable/decision.openvex.json Normal file
View File

@@ -0,0 +1,25 @@
{
"@context": "https://openvex.dev/ns/v0.2.0",
"@type": "VEX",
"author": "StellaOps Bench Automation",
"role": "security_team",
"statements": [
{
"impact_statement": "Evidence hash: sha256:c42ec014a42d0e3fb43ed4ddad8953821e44457119da66ddb41a35a801a3b727",
"justification": "vulnerable_code_not_present",
"products": [
{
"@id": "pkg:generic/glibc-CVE-2023-4911-looney-tunables@1.0.0"
}
],
"status": "not_affected",
"vulnerability": {
"@id": "https://nvd.nist.gov/vuln/detail/CVE-2015-7547",
"name": "CVE-2015-7547"
}
}
],
"timestamp": "2025-12-14T02:13:38Z",
"tooling": "StellaOps/bench-auto@1.0.0",
"version": 1
}

13
bench/findings/CVE-2015-7547-unreachable/evidence/reachability.json Normal file
View File

@@ -0,0 +1,13 @@
{
"case_id": "glibc-CVE-2023-4911-looney-tunables",
"generated_at": "2025-12-14T02:13:38Z",
"ground_truth": {
"case_id": "glibc-CVE-2023-4911-looney-tunables",
"paths": [],
"schema_version": "reachbench.reachgraph.truth/v1",
"variant": "unreachable"
},
"paths": [],
"schema_version": "richgraph-excerpt/v1",
"variant": "unreachable"
}

23
bench/findings/CVE-2015-7547-unreachable/evidence/sbom.cdx.json Normal file
View File

@@ -0,0 +1,23 @@
{
"bomFormat": "CycloneDX",
"components": [
{
"name": "glibc-CVE-2023-4911-looney-tunables",
"purl": "pkg:generic/glibc-CVE-2023-4911-looney-tunables@1.0.0",
"type": "library",
"version": "1.0.0"
}
],
"metadata": {
"timestamp": "2025-12-14T02:13:38Z",
"tools": [
{
"name": "bench-auto",
"vendor": "StellaOps",
"version": "1.0.0"
}
]
},
"specVersion": "1.6",
"version": 1
}

11
bench/findings/CVE-2015-7547-unreachable/metadata.json Normal file
View File

@@ -0,0 +1,11 @@
{
"case_id": "glibc-CVE-2023-4911-looney-tunables",
"cve_id": "CVE-2015-7547",
"generated_at": "2025-12-14T02:13:38Z",
"generator": "scripts/bench/populate-findings.py",
"generator_version": "1.0.0",
"ground_truth_schema": "reachbench.reachgraph.truth/v1",
"purl": "pkg:generic/glibc-CVE-2023-4911-looney-tunables@1.0.0",
"reachability_status": "unreachable",
"variant": "unreachable"
}

5
bench/findings/CVE-2015-7547-unreachable/rekor.txt Normal file
View File

@@ -0,0 +1,5 @@
# Rekor log entry placeholder
# Submit DSSE envelope to Rekor to populate this file
log_index: PENDING
uuid: PENDING
timestamp: 2025-12-14T02:13:38Z

10
bench/findings/CVE-2022-3602-reachable/decision.dsse.json Normal file
View File

@@ -0,0 +1,10 @@
{
"payload": "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",
"payloadType": "application/vnd.openvex+json",
"signatures": [
{
"keyid": "stella.ops/bench-automation@v1",
"sig": "PLACEHOLDER_SIGNATURE_REQUIRES_ACTUAL_SIGNING"
}
]
}

25
bench/findings/CVE-2022-3602-reachable/decision.openvex.json Normal file
View File

@@ -0,0 +1,25 @@
{
"@context": "https://openvex.dev/ns/v0.2.0",
"@type": "VEX",
"author": "StellaOps Bench Automation",
"role": "security_team",
"statements": [
{
"action_statement": "Upgrade to patched version or apply mitigation.",
"impact_statement": "Evidence hash: sha256:01431ff1eee799c6fadd593a7ec18ee094f983140963da6cbfd4b7f06ba0f970",
"products": [
{
"@id": "pkg:generic/openssl-CVE-2022-3602-x509-name-constraints@1.0.0"
}
],
"status": "affected",
"vulnerability": {
"@id": "https://nvd.nist.gov/vuln/detail/CVE-2022-3602",
"name": "CVE-2022-3602"
}
}
],
"timestamp": "2025-12-14T02:13:38Z",
"tooling": "StellaOps/bench-auto@1.0.0",
"version": 1
}

25
bench/findings/CVE-2022-3602-reachable/evidence/reachability.json Normal file
View File

@@ -0,0 +1,25 @@
{
"case_id": "openssl-CVE-2022-3602-x509-name-constraints",
"generated_at": "2025-12-14T02:13:38Z",
"ground_truth": {
"case_id": "openssl-CVE-2022-3602-x509-name-constraints",
"paths": [
[
"sym://net:handler#read",
"sym://openssl:openssl.c#entry",
"sym://openssl:openssl.c#sink"
]
],
"schema_version": "reachbench.reachgraph.truth/v1",
"variant": "reachable"
},
"paths": [
[
"sym://net:handler#read",
"sym://openssl:openssl.c#entry",
"sym://openssl:openssl.c#sink"
]
],
"schema_version": "richgraph-excerpt/v1",
"variant": "reachable"
}

23
bench/findings/CVE-2022-3602-reachable/evidence/sbom.cdx.json Normal file
View File

@@ -0,0 +1,23 @@
{
"bomFormat": "CycloneDX",
"components": [
{
"name": "openssl-CVE-2022-3602-x509-name-constraints",
"purl": "pkg:generic/openssl-CVE-2022-3602-x509-name-constraints@1.0.0",
"type": "library",
"version": "1.0.0"
}
],
"metadata": {
"timestamp": "2025-12-14T02:13:38Z",
"tools": [
{
"name": "bench-auto",
"vendor": "StellaOps",
"version": "1.0.0"
}
]
},
"specVersion": "1.6",
"version": 1
}

11
bench/findings/CVE-2022-3602-reachable/metadata.json Normal file
View File

@@ -0,0 +1,11 @@
{
"case_id": "openssl-CVE-2022-3602-x509-name-constraints",
"cve_id": "CVE-2022-3602",
"generated_at": "2025-12-14T02:13:38Z",
"generator": "scripts/bench/populate-findings.py",
"generator_version": "1.0.0",
"ground_truth_schema": "reachbench.reachgraph.truth/v1",
"purl": "pkg:generic/openssl-CVE-2022-3602-x509-name-constraints@1.0.0",
"reachability_status": "reachable",
"variant": "reachable"
}

5
bench/findings/CVE-2022-3602-reachable/rekor.txt Normal file
View File

@@ -0,0 +1,5 @@
# Rekor log entry placeholder
# Submit DSSE envelope to Rekor to populate this file
log_index: PENDING
uuid: PENDING
timestamp: 2025-12-14T02:13:38Z

10
bench/findings/CVE-2022-3602-unreachable/decision.dsse.json Normal file
View File

@@ -0,0 +1,10 @@
{
"payload": "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",
"payloadType": "application/vnd.openvex+json",
"signatures": [
{
"keyid": "stella.ops/bench-automation@v1",
"sig": "PLACEHOLDER_SIGNATURE_REQUIRES_ACTUAL_SIGNING"
}
]
}

25
bench/findings/CVE-2022-3602-unreachable/decision.openvex.json Normal file
View File

@@ -0,0 +1,25 @@
{
"@context": "https://openvex.dev/ns/v0.2.0",
"@type": "VEX",
"author": "StellaOps Bench Automation",
"role": "security_team",
"statements": [
{
"impact_statement": "Evidence hash: sha256:d9baf4c647418778551afc43752def46d4af27d53122e6c4375c351355b10a33",
"justification": "vulnerable_code_not_present",
"products": [
{
"@id": "pkg:generic/openssl-CVE-2022-3602-x509-name-constraints@1.0.0"
}
],
"status": "not_affected",
"vulnerability": {
"@id": "https://nvd.nist.gov/vuln/detail/CVE-2022-3602",
"name": "CVE-2022-3602"
}
}
],
"timestamp": "2025-12-14T02:13:38Z",
"tooling": "StellaOps/bench-auto@1.0.0",
"version": 1
}

13
bench/findings/CVE-2022-3602-unreachable/evidence/reachability.json Normal file
View File

@@ -0,0 +1,13 @@
{
"case_id": "openssl-CVE-2022-3602-x509-name-constraints",
"generated_at": "2025-12-14T02:13:38Z",
"ground_truth": {
"case_id": "openssl-CVE-2022-3602-x509-name-constraints",
"paths": [],
"schema_version": "reachbench.reachgraph.truth/v1",
"variant": "unreachable"
},
"paths": [],
"schema_version": "richgraph-excerpt/v1",
"variant": "unreachable"
}

23
bench/findings/CVE-2022-3602-unreachable/evidence/sbom.cdx.json Normal file
View File

@@ -0,0 +1,23 @@
{
"bomFormat": "CycloneDX",
"components": [
{
"name": "openssl-CVE-2022-3602-x509-name-constraints",
"purl": "pkg:generic/openssl-CVE-2022-3602-x509-name-constraints@1.0.0",
"type": "library",
"version": "1.0.0"
}
],
"metadata": {
"timestamp": "2025-12-14T02:13:38Z",
"tools": [
{
"name": "bench-auto",
"vendor": "StellaOps",
"version": "1.0.0"
}
]
},
"specVersion": "1.6",
"version": 1
}

11
bench/findings/CVE-2022-3602-unreachable/metadata.json Normal file
View File

@@ -0,0 +1,11 @@
{
"case_id": "openssl-CVE-2022-3602-x509-name-constraints",
"cve_id": "CVE-2022-3602",
"generated_at": "2025-12-14T02:13:38Z",
"generator": "scripts/bench/populate-findings.py",
"generator_version": "1.0.0",
"ground_truth_schema": "reachbench.reachgraph.truth/v1",
"purl": "pkg:generic/openssl-CVE-2022-3602-x509-name-constraints@1.0.0",
"reachability_status": "unreachable",
"variant": "unreachable"
}

5
bench/findings/CVE-2022-3602-unreachable/rekor.txt Normal file
View File

@@ -0,0 +1,5 @@
# Rekor log entry placeholder
# Submit DSSE envelope to Rekor to populate this file
log_index: PENDING
uuid: PENDING
timestamp: 2025-12-14T02:13:38Z

10
bench/findings/CVE-2023-38545-reachable/decision.dsse.json Normal file
View File

@@ -0,0 +1,10 @@
{
"payload": "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",
"payloadType": "application/vnd.openvex+json",
"signatures": [
{
"keyid": "stella.ops/bench-automation@v1",
"sig": "PLACEHOLDER_SIGNATURE_REQUIRES_ACTUAL_SIGNING"
}
]
}

25
bench/findings/CVE-2023-38545-reachable/decision.openvex.json Normal file
View File

@@ -0,0 +1,25 @@
{
"@context": "https://openvex.dev/ns/v0.2.0",
"@type": "VEX",
"author": "StellaOps Bench Automation",
"role": "security_team",
"statements": [
{
"action_statement": "Upgrade to patched version or apply mitigation.",
"impact_statement": "Evidence hash: sha256:f1c1fdbe95b3253b13ca6c733ec03ada3ea871e66b5ddedbb6c14b9dc67b0748",
"products": [
{
"@id": "pkg:generic/curl-CVE-2023-38545-socks5-heap@1.0.0"
}
],
"status": "affected",
"vulnerability": {
"@id": "https://nvd.nist.gov/vuln/detail/CVE-2023-38545",
"name": "CVE-2023-38545"
}
}
],
"timestamp": "2025-12-14T02:13:38Z",
"tooling": "StellaOps/bench-auto@1.0.0",
"version": 1
}

25
bench/findings/CVE-2023-38545-reachable/evidence/reachability.json Normal file
View File

@@ -0,0 +1,25 @@
{
"case_id": "curl-CVE-2023-38545-socks5-heap",
"generated_at": "2025-12-14T02:13:38Z",
"ground_truth": {
"case_id": "curl-CVE-2023-38545-socks5-heap",
"paths": [
[
"sym://net:handler#read",
"sym://curl:curl.c#entry",
"sym://curl:curl.c#sink"
]
],
"schema_version": "reachbench.reachgraph.truth/v1",
"variant": "reachable"
},
"paths": [
[
"sym://net:handler#read",
"sym://curl:curl.c#entry",
"sym://curl:curl.c#sink"
]
],
"schema_version": "richgraph-excerpt/v1",
"variant": "reachable"
}

23
bench/findings/CVE-2023-38545-reachable/evidence/sbom.cdx.json Normal file
View File

@@ -0,0 +1,23 @@
{
"bomFormat": "CycloneDX",
"components": [
{
"name": "curl-CVE-2023-38545-socks5-heap",
"purl": "pkg:generic/curl-CVE-2023-38545-socks5-heap@1.0.0",
"type": "library",
"version": "1.0.0"
}
],
"metadata": {
"timestamp": "2025-12-14T02:13:38Z",
"tools": [
{
"name": "bench-auto",
"vendor": "StellaOps",
"version": "1.0.0"
}
]
},
"specVersion": "1.6",
"version": 1
}

11
bench/findings/CVE-2023-38545-reachable/metadata.json Normal file
View File

@@ -0,0 +1,11 @@
{
"case_id": "curl-CVE-2023-38545-socks5-heap",
"cve_id": "CVE-2023-38545",
"generated_at": "2025-12-14T02:13:38Z",
"generator": "scripts/bench/populate-findings.py",
"generator_version": "1.0.0",
"ground_truth_schema": "reachbench.reachgraph.truth/v1",
"purl": "pkg:generic/curl-CVE-2023-38545-socks5-heap@1.0.0",
"reachability_status": "reachable",
"variant": "reachable"
}

5
bench/findings/CVE-2023-38545-reachable/rekor.txt Normal file
View File

@@ -0,0 +1,5 @@
# Rekor log entry placeholder
# Submit DSSE envelope to Rekor to populate this file
log_index: PENDING
uuid: PENDING
timestamp: 2025-12-14T02:13:38Z

10
bench/findings/CVE-2023-38545-unreachable/decision.dsse.json Normal file
View File

@@ -0,0 +1,10 @@
{
"payload": "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",
"payloadType": "application/vnd.openvex+json",
"signatures": [
{
"keyid": "stella.ops/bench-automation@v1",
"sig": "PLACEHOLDER_SIGNATURE_REQUIRES_ACTUAL_SIGNING"
}
]
}

25
bench/findings/CVE-2023-38545-unreachable/decision.openvex.json Normal file
View File

@@ -0,0 +1,25 @@
{
"@context": "https://openvex.dev/ns/v0.2.0",
"@type": "VEX",
"author": "StellaOps Bench Automation",
"role": "security_team",
"statements": [
{
"impact_statement": "Evidence hash: sha256:e4b1994e59410562f40ab4a5fe23638c11e5817bb700393ed99f20d3c9ef9fa0",
"justification": "vulnerable_code_not_present",
"products": [
{
"@id": "pkg:generic/curl-CVE-2023-38545-socks5-heap@1.0.0"
}
],
"status": "not_affected",
"vulnerability": {
"@id": "https://nvd.nist.gov/vuln/detail/CVE-2023-38545",
"name": "CVE-2023-38545"
}
}
],
"timestamp": "2025-12-14T02:13:38Z",
"tooling": "StellaOps/bench-auto@1.0.0",
"version": 1
}

13
bench/findings/CVE-2023-38545-unreachable/evidence/reachability.json Normal file
View File

@@ -0,0 +1,13 @@
{
"case_id": "curl-CVE-2023-38545-socks5-heap",
"generated_at": "2025-12-14T02:13:38Z",
"ground_truth": {
"case_id": "curl-CVE-2023-38545-socks5-heap",
"paths": [],
"schema_version": "reachbench.reachgraph.truth/v1",
"variant": "unreachable"
},
"paths": [],
"schema_version": "richgraph-excerpt/v1",
"variant": "unreachable"
}

23
bench/findings/CVE-2023-38545-unreachable/evidence/sbom.cdx.json Normal file
View File

@@ -0,0 +1,23 @@
{
"bomFormat": "CycloneDX",
"components": [
{
"name": "curl-CVE-2023-38545-socks5-heap",
"purl": "pkg:generic/curl-CVE-2023-38545-socks5-heap@1.0.0",
"type": "library",
"version": "1.0.0"
}
],
"metadata": {
"timestamp": "2025-12-14T02:13:38Z",
"tools": [
{
"name": "bench-auto",
"vendor": "StellaOps",
"version": "1.0.0"
}
]
},
"specVersion": "1.6",
"version": 1
}

11
bench/findings/CVE-2023-38545-unreachable/metadata.json Normal file
View File

@@ -0,0 +1,11 @@
{
"case_id": "curl-CVE-2023-38545-socks5-heap",
"cve_id": "CVE-2023-38545",
"generated_at": "2025-12-14T02:13:38Z",
"generator": "scripts/bench/populate-findings.py",
"generator_version": "1.0.0",
"ground_truth_schema": "reachbench.reachgraph.truth/v1",
"purl": "pkg:generic/curl-CVE-2023-38545-socks5-heap@1.0.0",
"reachability_status": "unreachable",
"variant": "unreachable"
}

5
bench/findings/CVE-2023-38545-unreachable/rekor.txt Normal file
View File

@@ -0,0 +1,5 @@
# Rekor log entry placeholder
# Submit DSSE envelope to Rekor to populate this file
log_index: PENDING
uuid: PENDING
timestamp: 2025-12-14T02:13:38Z

10
bench/findings/CVE-BENCH-LINUX-CG-reachable/decision.dsse.json Normal file
View File

@@ -0,0 +1,10 @@
{
"payload": "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",
"payloadType": "application/vnd.openvex+json",
"signatures": [
{
"keyid": "stella.ops/bench-automation@v1",
"sig": "PLACEHOLDER_SIGNATURE_REQUIRES_ACTUAL_SIGNING"
}
]
}

25
bench/findings/CVE-BENCH-LINUX-CG-reachable/decision.openvex.json Normal file
View File

@@ -0,0 +1,25 @@
{
"@context": "https://openvex.dev/ns/v0.2.0",
"@type": "VEX",
"author": "StellaOps Bench Automation",
"role": "security_team",
"statements": [
{
"action_statement": "Upgrade to patched version or apply mitigation.",
"impact_statement": "Evidence hash: sha256:154ba6e359c0954578a9560367f1cbac1c153e5d5df93c2b929cd38792a217bb",
"products": [
{
"@id": "pkg:generic/linux-cgroups-CVE-2022-0492-release_agent@1.0.0"
}
],
"status": "affected",
"vulnerability": {
"@id": "https://nvd.nist.gov/vuln/detail/CVE-BENCH-LINUX-CG",
"name": "CVE-BENCH-LINUX-CG"
}
}
],
"timestamp": "2025-12-14T02:13:38Z",
"tooling": "StellaOps/bench-auto@1.0.0",
"version": 1
}

25
bench/findings/CVE-BENCH-LINUX-CG-reachable/evidence/reachability.json Normal file
View File

@@ -0,0 +1,25 @@
{
"case_id": "linux-cgroups-CVE-2022-0492-release_agent",
"generated_at": "2025-12-14T02:13:38Z",
"ground_truth": {
"case_id": "linux-cgroups-CVE-2022-0492-release_agent",
"paths": [
[
"sym://net:handler#read",
"sym://linux:linux.c#entry",
"sym://linux:linux.c#sink"
]
],
"schema_version": "reachbench.reachgraph.truth/v1",
"variant": "reachable"
},
"paths": [
[
"sym://net:handler#read",
"sym://linux:linux.c#entry",
"sym://linux:linux.c#sink"
]
],
"schema_version": "richgraph-excerpt/v1",
"variant": "reachable"
}

23
bench/findings/CVE-BENCH-LINUX-CG-reachable/evidence/sbom.cdx.json Normal file
View File

@@ -0,0 +1,23 @@
{
"bomFormat": "CycloneDX",
"components": [
{
"name": "linux-cgroups-CVE-2022-0492-release_agent",
"purl": "pkg:generic/linux-cgroups-CVE-2022-0492-release_agent@1.0.0",
"type": "library",
"version": "1.0.0"
}
],
"metadata": {
"timestamp": "2025-12-14T02:13:38Z",
"tools": [
{
"name": "bench-auto",
"vendor": "StellaOps",
"version": "1.0.0"
}
]
},
"specVersion": "1.6",
"version": 1
}

11
bench/findings/CVE-BENCH-LINUX-CG-reachable/metadata.json Normal file
View File

@@ -0,0 +1,11 @@
{
"case_id": "linux-cgroups-CVE-2022-0492-release_agent",
"cve_id": "CVE-BENCH-LINUX-CG",
"generated_at": "2025-12-14T02:13:38Z",
"generator": "scripts/bench/populate-findings.py",
"generator_version": "1.0.0",
"ground_truth_schema": "reachbench.reachgraph.truth/v1",
"purl": "pkg:generic/linux-cgroups-CVE-2022-0492-release_agent@1.0.0",
"reachability_status": "reachable",
"variant": "reachable"
}

5
bench/findings/CVE-BENCH-LINUX-CG-reachable/rekor.txt Normal file
View File

@@ -0,0 +1,5 @@
# Rekor log entry placeholder
# Submit DSSE envelope to Rekor to populate this file
log_index: PENDING
uuid: PENDING
timestamp: 2025-12-14T02:13:38Z

10
bench/findings/CVE-BENCH-LINUX-CG-unreachable/decision.dsse.json Normal file
View File

@@ -0,0 +1,10 @@
{
"payload": "eyJAY29udGV4dCI6Imh0dHBzOi8vb3BlbnZleC5kZXYvbnMvdjAuMi4wIiwiQHR5cGUiOiJWRVgiLCJhdXRob3IiOiJTdGVsbGFPcHMgQmVuY2ggQXV0b21hdGlvbiIsInJvbGUiOiJzZWN1cml0eV90ZWFtIiwic3RhdGVtZW50cyI6W3siaW1wYWN0X3N0YXRlbWVudCI6IkV2aWRlbmNlIGhhc2g6IHNoYTI1NjpjOTUwNmRhMjc0YTdkNmJmZGJiZmE0NmVjMjZkZWNmNWQ2YjcxZmFhNDA0MjY5MzZkM2NjYmFlNjQxNjJkMWE2IiwianVzdGlmaWNhdGlvbiI6InZ1bG5lcmFibGVfY29kZV9ub3RfcHJlc2VudCIsInByb2R1Y3RzIjpbeyJAaWQiOiJwa2c6Z2VuZXJpYy9saW51eC1jZ3JvdXBzLUNWRS0yMDIyLTA0OTItcmVsZWFzZV9hZ2VudEAxLjAuMCJ9XSwic3RhdHVzIjoibm90X2FmZmVjdGVkIiwidnVsbmVyYWJpbGl0eSI6eyJAaWQiOiJodHRwczovL252ZC5uaXN0Lmdvdi92dWxuL2RldGFpbC9DVkUtQkVOQ0gtTElOVVgtQ0ciLCJuYW1lIjoiQ1ZFLUJFTkNILUxJTlVYLUNHIn19XSwidGltZXN0YW1wIjoiMjAyNS0xMi0xNFQwMjoxMzozOFoiLCJ0b29saW5nIjoiU3RlbGxhT3BzL2JlbmNoLWF1dG9AMS4wLjAiLCJ2ZXJzaW9uIjoxfQ==",
"payloadType": "application/vnd.openvex+json",
"signatures": [
{
"keyid": "stella.ops/bench-automation@v1",
"sig": "PLACEHOLDER_SIGNATURE_REQUIRES_ACTUAL_SIGNING"
}
]
}

25
bench/findings/CVE-BENCH-LINUX-CG-unreachable/decision.openvex.json Normal file
View File

@@ -0,0 +1,25 @@
{
"@context": "https://openvex.dev/ns/v0.2.0",
"@type": "VEX",
"author": "StellaOps Bench Automation",
"role": "security_team",
"statements": [
{
"impact_statement": "Evidence hash: sha256:c9506da274a7d6bfdbbfa46ec26decf5d6b71faa40426936d3ccbae64162d1a6",
"justification": "vulnerable_code_not_present",
"products": [
{
"@id": "pkg:generic/linux-cgroups-CVE-2022-0492-release_agent@1.0.0"
}
],
"status": "not_affected",
"vulnerability": {
"@id": "https://nvd.nist.gov/vuln/detail/CVE-BENCH-LINUX-CG",
"name": "CVE-BENCH-LINUX-CG"
}
}
],
"timestamp": "2025-12-14T02:13:38Z",
"tooling": "StellaOps/bench-auto@1.0.0",
"version": 1
}

13
bench/findings/CVE-BENCH-LINUX-CG-unreachable/evidence/reachability.json Normal file
View File

@@ -0,0 +1,13 @@
{
"case_id": "linux-cgroups-CVE-2022-0492-release_agent",
"generated_at": "2025-12-14T02:13:38Z",
"ground_truth": {
"case_id": "linux-cgroups-CVE-2022-0492-release_agent",
"paths": [],
"schema_version": "reachbench.reachgraph.truth/v1",
"variant": "unreachable"
},
"paths": [],
"schema_version": "richgraph-excerpt/v1",
"variant": "unreachable"
}

23
bench/findings/CVE-BENCH-LINUX-CG-unreachable/evidence/sbom.cdx.json Normal file
View File

@@ -0,0 +1,23 @@
{
"bomFormat": "CycloneDX",
"components": [
{
"name": "linux-cgroups-CVE-2022-0492-release_agent",
"purl": "pkg:generic/linux-cgroups-CVE-2022-0492-release_agent@1.0.0",
"type": "library",
"version": "1.0.0"
}
],
"metadata": {
"timestamp": "2025-12-14T02:13:38Z",
"tools": [
{
"name": "bench-auto",
"vendor": "StellaOps",
"version": "1.0.0"
}
]
},
"specVersion": "1.6",
"version": 1
}

11
bench/findings/CVE-BENCH-LINUX-CG-unreachable/metadata.json Normal file
View File

@@ -0,0 +1,11 @@
{
"case_id": "linux-cgroups-CVE-2022-0492-release_agent",
"cve_id": "CVE-BENCH-LINUX-CG",
"generated_at": "2025-12-14T02:13:38Z",
"generator": "scripts/bench/populate-findings.py",
"generator_version": "1.0.0",
"ground_truth_schema": "reachbench.reachgraph.truth/v1",
"purl": "pkg:generic/linux-cgroups-CVE-2022-0492-release_agent@1.0.0",
"reachability_status": "unreachable",
"variant": "unreachable"
}

5
bench/findings/CVE-BENCH-LINUX-CG-unreachable/rekor.txt Normal file
View File

@@ -0,0 +1,5 @@
# Rekor log entry placeholder
# Submit DSSE envelope to Rekor to populate this file
log_index: PENDING
uuid: PENDING
timestamp: 2025-12-14T02:13:38Z

10
bench/findings/CVE-BENCH-RUNC-CVE-reachable/decision.dsse.json Normal file
View File

@@ -0,0 +1,10 @@
{
"payload": "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",
"payloadType": "application/vnd.openvex+json",
"signatures": [
{
"keyid": "stella.ops/bench-automation@v1",
"sig": "PLACEHOLDER_SIGNATURE_REQUIRES_ACTUAL_SIGNING"
}
]
}

25
bench/findings/CVE-BENCH-RUNC-CVE-reachable/decision.openvex.json Normal file
View File

@@ -0,0 +1,25 @@
{
"@context": "https://openvex.dev/ns/v0.2.0",
"@type": "VEX",
"author": "StellaOps Bench Automation",
"role": "security_team",
"statements": [
{
"action_statement": "Upgrade to patched version or apply mitigation.",
"impact_statement": "Evidence hash: sha256:c44fb2e2efb79c78bbaa6a8e2c6bb3831782a2d5358de87fc7d17102e8c2e305",
"products": [
{
"@id": "pkg:generic/runc-CVE-2024-21626-symlink-breakout@1.0.0"
}
],
"status": "affected",
"vulnerability": {
"@id": "https://nvd.nist.gov/vuln/detail/CVE-BENCH-RUNC-CVE",
"name": "CVE-BENCH-RUNC-CVE"
}
}
],
"timestamp": "2025-12-14T02:13:38Z",
"tooling": "StellaOps/bench-auto@1.0.0",
"version": 1
}

25
bench/findings/CVE-BENCH-RUNC-CVE-reachable/evidence/reachability.json Normal file
View File

@@ -0,0 +1,25 @@
{
"case_id": "runc-CVE-2024-21626-symlink-breakout",
"generated_at": "2025-12-14T02:13:38Z",
"ground_truth": {
"case_id": "runc-CVE-2024-21626-symlink-breakout",
"paths": [
[
"sym://net:handler#read",
"sym://runc:runc.c#entry",
"sym://runc:runc.c#sink"
]
],
"schema_version": "reachbench.reachgraph.truth/v1",
"variant": "reachable"
},
"paths": [
[
"sym://net:handler#read",
"sym://runc:runc.c#entry",
"sym://runc:runc.c#sink"
]
],
"schema_version": "richgraph-excerpt/v1",
"variant": "reachable"
}

23
bench/findings/CVE-BENCH-RUNC-CVE-reachable/evidence/sbom.cdx.json Normal file
View File

@@ -0,0 +1,23 @@
{
"bomFormat": "CycloneDX",
"components": [
{
"name": "runc-CVE-2024-21626-symlink-breakout",
"purl": "pkg:generic/runc-CVE-2024-21626-symlink-breakout@1.0.0",
"type": "library",
"version": "1.0.0"
}
],
"metadata": {
"timestamp": "2025-12-14T02:13:38Z",
"tools": [
{
"name": "bench-auto",
"vendor": "StellaOps",
"version": "1.0.0"
}
]
},
"specVersion": "1.6",
"version": 1
}

11
bench/findings/CVE-BENCH-RUNC-CVE-reachable/metadata.json Normal file
View File

@@ -0,0 +1,11 @@
{
"case_id": "runc-CVE-2024-21626-symlink-breakout",
"cve_id": "CVE-BENCH-RUNC-CVE",
"generated_at": "2025-12-14T02:13:38Z",
"generator": "scripts/bench/populate-findings.py",
"generator_version": "1.0.0",
"ground_truth_schema": "reachbench.reachgraph.truth/v1",
"purl": "pkg:generic/runc-CVE-2024-21626-symlink-breakout@1.0.0",
"reachability_status": "reachable",
"variant": "reachable"
}

5
bench/findings/CVE-BENCH-RUNC-CVE-reachable/rekor.txt Normal file
View File

@@ -0,0 +1,5 @@
# Rekor log entry placeholder
# Submit DSSE envelope to Rekor to populate this file
log_index: PENDING
uuid: PENDING
timestamp: 2025-12-14T02:13:38Z

10
bench/findings/CVE-BENCH-RUNC-CVE-unreachable/decision.dsse.json Normal file
View File

@@ -0,0 +1,10 @@
{
"payload": "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",
"payloadType": "application/vnd.openvex+json",
"signatures": [
{
"keyid": "stella.ops/bench-automation@v1",
"sig": "PLACEHOLDER_SIGNATURE_REQUIRES_ACTUAL_SIGNING"
}
]
}

25
bench/findings/CVE-BENCH-RUNC-CVE-unreachable/decision.openvex.json Normal file
View File

@@ -0,0 +1,25 @@
{
"@context": "https://openvex.dev/ns/v0.2.0",
"@type": "VEX",
"author": "StellaOps Bench Automation",
"role": "security_team",
"statements": [
{
"impact_statement": "Evidence hash: sha256:9fe405119faf801fb6dc1ad047961a790c8d0ef5449e4812bc8dc59a6611b69c",
"justification": "vulnerable_code_not_present",
"products": [
{
"@id": "pkg:generic/runc-CVE-2024-21626-symlink-breakout@1.0.0"
}
],
"status": "not_affected",
"vulnerability": {
"@id": "https://nvd.nist.gov/vuln/detail/CVE-BENCH-RUNC-CVE",
"name": "CVE-BENCH-RUNC-CVE"
}
}
],
"timestamp": "2025-12-14T02:13:38Z",
"tooling": "StellaOps/bench-auto@1.0.0",
"version": 1
}

13
bench/findings/CVE-BENCH-RUNC-CVE-unreachable/evidence/reachability.json Normal file
View File

@@ -0,0 +1,13 @@
{
"case_id": "runc-CVE-2024-21626-symlink-breakout",
"generated_at": "2025-12-14T02:13:38Z",
"ground_truth": {
"case_id": "runc-CVE-2024-21626-symlink-breakout",
"paths": [],
"schema_version": "reachbench.reachgraph.truth/v1",
"variant": "unreachable"
},
"paths": [],
"schema_version": "richgraph-excerpt/v1",
"variant": "unreachable"
}

23
bench/findings/CVE-BENCH-RUNC-CVE-unreachable/evidence/sbom.cdx.json Normal file
View File

@@ -0,0 +1,23 @@
{
"bomFormat": "CycloneDX",
"components": [
{
"name": "runc-CVE-2024-21626-symlink-breakout",
"purl": "pkg:generic/runc-CVE-2024-21626-symlink-breakout@1.0.0",
"type": "library",
"version": "1.0.0"
}
],
"metadata": {
"timestamp": "2025-12-14T02:13:38Z",
"tools": [
{
"name": "bench-auto",
"vendor": "StellaOps",
"version": "1.0.0"
}
]
},
"specVersion": "1.6",
"version": 1
}

11
bench/findings/CVE-BENCH-RUNC-CVE-unreachable/metadata.json Normal file
View File

@@ -0,0 +1,11 @@
{
"case_id": "runc-CVE-2024-21626-symlink-breakout",
"cve_id": "CVE-BENCH-RUNC-CVE",
"generated_at": "2025-12-14T02:13:38Z",
"generator": "scripts/bench/populate-findings.py",
"generator_version": "1.0.0",
"ground_truth_schema": "reachbench.reachgraph.truth/v1",
"purl": "pkg:generic/runc-CVE-2024-21626-symlink-breakout@1.0.0",
"reachability_status": "unreachable",
"variant": "unreachable"
}

5
bench/findings/CVE-BENCH-RUNC-CVE-unreachable/rekor.txt Normal file
View File

@@ -0,0 +1,5 @@
# Rekor log entry placeholder
# Submit DSSE envelope to Rekor to populate this file
log_index: PENDING
uuid: PENDING
timestamp: 2025-12-14T02:13:38Z