up

out/advisory-ai/feeds/advisory-feeds.manifest.json

@@ -0,0 +1,44 @@
+{
+  "schemaVersion": "1.0.0",
+  "created": "2025-12-14T17:35:00Z",
+  "bundle": {
+    "path": "advisory-feeds.tar.gz",
+    "sha256": "placeholder-generate-with-packaging-script",
+    "size": 0
+  },
+  "sbom": {
+    "format": "spdx-json",
+    "path": "advisory-feeds.sbom.json",
+    "note": "SBOM generated during CI packaging"
+  },
+  "provenance": {
+    "path": "provenance.json",
+    "builder": "stellaops-advisory-ai-release"
+  },
+  "feeds": [
+    {
+      "name": "nvd",
+      "version": "2025-12-14",
+      "format": "ndjson",
+      "compression": "gzip"
+    },
+    {
+      "name": "ghsa",
+      "version": "2025-12-14",
+      "format": "ndjson",
+      "compression": "gzip"
+    },
+    {
+      "name": "osv",
+      "version": "2025-12-14",
+      "format": "ndjson",
+      "compression": "gzip"
+    }
+  ],
+  "signing": {
+    "keyId": "cosign.dev.key",
+    "algorithm": "ecdsa-sha256",
+    "mode": "development",
+    "productionKeyRequired": "COSIGN_PRIVATE_KEY_B64"
+  }
+}

out/advisory-ai/feeds/provenance.json

@@ -0,0 +1,31 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "subject": [
+    {
+      "name": "advisory-feeds.tar.gz",
+      "digest": {
+        "sha256": "placeholder-generate-with-packaging-script"
+      }
+    }
+  ],
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "predicate": {
+    "buildDefinition": {
+      "buildType": "https://stella-ops.org/advisory-ai-release/v1",
+      "externalParameters": {},
+      "internalParameters": {
+        "created": "2025-12-14T17:35:00Z",
+        "signingMode": "development"
+      }
+    },
+    "runDetails": {
+      "builder": {
+        "id": "https://stella-ops.org/advisory-ai-release"
+      },
+      "metadata": {
+        "invocationId": "dev-2025-12-14-sprint-completion",
+        "startedOn": "2025-12-14T17:35:00Z"
+      }
+    }
+  }
+}