stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 3 Releases Wiki Activity

save work

Browse Source
This commit is contained in:
StellaOps Bot
2025-12-19 07:28:23 +02:00
parent 6410a6d082
commit 2eafe98d44
97 changed files with 5040 additions and 1443 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
tests/fixtures/sca/catalogue/fc10/manifest.dsse.json vendored
View File

@@ -1,10 +1,10 @@
{
"payloadType": "application/vnd.stellaops.fixture+json",
"payload": "eyJpZCI6ImZjMTAtY3ZlLXNwbGl0LW1lcmdlIiwiaGFzaCI6IjAxMjM0NTY3ODlhYmNkZWYwMTIzNDU2Nzg5YWJjZGVmMDEyMzQ1Njc4OWFiY2RlZjAxMjM0NTY3ODlhYmNkZWYiLCJjcmVhdGVkIjoiMjAyNS0xMi0xNlQwMDowMDowMFoifQ==",
"signatures": [
{
"keyid": "stellaops-fixture-signing-key-v1",
"sig": "fixture-signature-placeholder"
}
]
"payloadType": "application/json",
"payload": "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",
"signatures": [
{
"sig": "stub-signature",
"keyid": "stub-key-id"
}
]
}

16
tests/fixtures/sca/catalogue/fc6/manifest.dsse.json vendored
View File

@@ -1,10 +1,10 @@
{
"payloadType": "application/vnd.stellaops.fixture+json",
"payload": "eyJpZCI6ImZjNi1qYXZhLXNoYWRvdy1qYXIiLCJoYXNoIjoiZTNiMGM0NDI5OGZjMWMxNDlhZmJmNGM4OTk2ZmI5MjQyN2FlNDFlNDY0OWI5MzRjYTQ5NTk5MWI3ODUyYjg1NSIsImNyZWF0ZWQiOiIyMDI1LTEyLTE2VDAwOjAwOjAwWiJ9",
"signatures": [
{
"keyid": "stellaops-fixture-signing-key-v1",
"sig": "fixture-signature-placeholder"
}
]
"payloadType": "application/json",
"payload": "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",
"signatures": [
{
"sig": "stub-signature",
"keyid": "stub-key-id"
}
]
}

16
tests/fixtures/sca/catalogue/fc7/manifest.dsse.json vendored
View File

@@ -1,10 +1,10 @@
{
"payloadType": "application/vnd.stellaops.fixture+json",
"payload": "eyJpZCI6ImZjNy1kb3RuZXQtdHJhbnNpdGl2ZS1waW5uaW5nIiwiaGFzaCI6ImRlYWRiZWVmMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAiLCJjcmVhdGVkIjoiMjAyNS0xMi0xNlQwMDowMDowMFoifQ==",
"signatures": [
{
"keyid": "stellaops-fixture-signing-key-v1",
"sig": "fixture-signature-placeholder"
}
]
"payloadType": "application/json",
"payload": "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",
"signatures": [
{
"sig": "stub-signature",
"keyid": "stub-key-id"
}
]
}

18
tests/fixtures/sca/catalogue/fc8/Dockerfile.multistage vendored Normal file
View File

@@ -0,0 +1,18 @@
# FC8: Docker Multi-Stage Leakage fixture
#
# Purpose: Ensure scanners attribute packages to the final stage only.
# Note: This file is a deterministic text fixture; it is not executed in tests.
FROM mcr.microsoft.com/dotnet/sdk:8.0 AS builder
WORKDIR /src
# Build-stage only tools (examples): dotnet-sdk-8.0, build-essential, git
RUN dotnet --info > /dev/null
FROM mcr.microsoft.com/dotnet/aspnet:8.0 AS runtime
WORKDIR /app
# Only artifacts copied from builder should appear in final stage.
COPY --from=builder /src/ /app/
ENTRYPOINT ["dotnet", "SampleApp.dll"]

16
tests/fixtures/sca/catalogue/fc8/manifest.dsse.json vendored
View File

@@ -1,10 +1,10 @@
{
"payloadType": "application/vnd.stellaops.fixture+json",
"payload": "eyJpZCI6ImZjOC1kb2NrZXItbXVsdGlzdGFnZS1sZWFrYWdlIiwiaGFzaCI6ImNhZmViYWJlMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAiLCJjcmVhdGVkIjoiMjAyNS0xMi0xNlQwMDowMDowMFoifQ==",
"signatures": [
{
"keyid": "stellaops-fixture-signing-key-v1",
"sig": "fixture-signature-placeholder"
}
]
"payloadType": "application/json",
"payload": "ewogICJpZCI6ICJmYzgtZG9ja2VyLW11bHRpc3RhZ2UtbGVha2FnZSIsCiAgIm5hbWUiOiAiRG9ja2VyIE11bHRpLVN0YWdlIExlYWthZ2UgRmFpbHVyZSBDYXNlIiwKICAiZGVzY3JpcHRpb24iOiAiQnVpbGQtdGltZSBkZXBlbmRlbmNpZXMgbGVha2luZyBpbnRvIHJ1bnRpbWUgaW1hZ2UgYW5hbHlzaXMuIE11bHRpLXN0YWdlIERvY2tlciBidWlsZHMgc2hvdWxkIG9ubHkgcmVwb3J0IHZ1bG5lcmFiaWxpdGllcyBmb3IgcGFja2FnZXMgaW4gdGhlIGZpbmFsIHN0YWdlLCBidXQgc29tZSBzY2FubmVycyBpbmNvcnJlY3RseSBpbmNsdWRlIGJ1aWxkLXN0YWdlIGRlcGVuZGVuY2llcy4iLAogICJzY2FubmVyIjogInRyaXZ5IiwKICAiZmVlZCI6ICJvZmZsaW5lLWNhY2hlLTIwMjUtMTItMTYiLAogICJmYWlsdXJlX21vZGUiOiB7CiAgICAiY2F0ZWdvcnkiOiAic2NvcGVfY29uZnVzaW9uIiwKICAgICJyb290X2NhdXNlIjogIlNjYW5uZXIgYW5hbHl6ZXMgYWxsIGxheWVycyBpbnN0ZWFkIG9mIGZpbmFsIGltYWdlIHN0YXRlIiwKICAgICJhZmZlY3RlZF9zY2FubmVycyI6IFsidHJpdnkiLCAiZ3J5cGUiLCAic3lmdCJdLAogICAgInNldmVyaXR5IjogIm1lZGl1bSIKICB9LAogICJpbnB1dCI6IHsKICAgICJ0eXBlIjogImRvY2tlcmZpbGUiLAogICAgImZpbGUiOiAiRG9ja2VyZmlsZS5tdWx0aXN0YWdlIiwKICAgICJzdGFnZXMiOiBbCiAgICAgIHsKICAgICAgICAibmFtZSI6ICJidWlsZGVyIiwKICAgICAgICAiYmFzZSI6ICJtY3IubWljcm9zb2Z0LmNvbS9kb3RuZXQvc2RrOjguMCIsCiAgICAgICAgInBhY2thZ2VzIjogWwogICAgICAgICAgeyJuYW1lIjogImRvdG5ldC1zZGstOC4wIiwgInR5cGUiOiAib3MiLCAic2NvcGUiOiAiYnVpbGQifSwKICAgICAgICAgIHsibmFtZSI6ICJidWlsZC1lc3NlbnRpYWwiLCAidHlwZSI6ICJvcyIsICJzY29wZSI6ICJidWlsZCJ9CiAgICAgICAgXQogICAgICB9LAogICAgICB7CiAgICAgICAgIm5hbWUiOiAicnVudGltZSIsCiAgICAgICAgImJhc2UiOiAibWNyLm1pY3Jvc29mdC5jb20vZG90bmV0L2FzcG5ldDo4LjAiLAogICAgICAgICJwYWNrYWdlcyI6IFsKICAgICAgICAgIHsibmFtZSI6ICJhc3BuZXRjb3JlLXJ1bnRpbWUtOC4wIiwgInR5cGUiOiAib3MiLCAic2NvcGUiOiAicnVudGltZSJ9LAogICAgICAgICAgeyJuYW1lIjogImxpYnNzbDMiLCAidHlwZSI6ICJvcyIsICJzY29wZSI6ICJydW50aW1lIn0KICAgICAgICBdLAogICAgICAgICJpc19maW5hbCI6IHRydWUKICAgICAgfQogICAgXQogIH0sCiAgImV4cGVjdGVkX2ZpbmRpbmdzIjogWwogICAgeyJwdXJsIjogInBrZzpkZWIvZGViaWFuL2xpYnNzbDNAMy4wLjExIiwgImN2ZSI6ICJDVkUtMjAyNC1SVU5USU1FIiwgInN0YXR1cyI6ICJwcmVzZW50IiwgIm5vdGUiOiAiUnVudGltZSBpbWFnZSB2dWxuZXJhYmlsaXR5IC0gc2hvdWxkIGJlIHJlcG9ydGVkIn0sCiAgICB7InB1cmwiOiAicGtnOmRlYi9kZWJpYW4vYnVpbGQtZXNzZW50aWFsQDEyLjkiLCAiY3ZlIjogIkNWRS0yMDI0LUJVSUxEIiwgInN0YXR1cyI6ICJhYnNlbnQiLCAibm90ZSI6ICJCdWlsZCBzdGFnZSBvbmx5IC0gc2hvdWxkIE5PVCBiZSByZXBvcnRlZCJ9CiAgXSwKICAiZGV0ZWN0aW9uX3JlcXVpcmVtZW50cyI6IHsKICAgICJhbmFseXplX2ZpbmFsX3N0YWdlX29ubHkiOiB0cnVlLAogICAgInRyYWNrX2xheWVyX3Byb3ZlbmFuY2UiOiB0cnVlLAogICAgImV4Y2x1ZGVfYnVpbGRfZGVwZW5kZW5jaWVzIjogdHJ1ZSwKICAgICJyZXNwZWN0X2NvcHlfZnJvbV9kaXJlY3RpdmVzIjogdHJ1ZQogIH0sCiAgInRlc3RfYXNzZXJ0aW9ucyI6IFsKICAgICJPbmx5IHZ1bG5lcmFiaWxpdGllcyBpbiBmaW5hbCBzdGFnZSBwYWNrYWdlcyBzaG91bGQgYmUgcmVwb3J0ZWQiLAogICAgIkJ1aWxkLXN0YWdlLW9ubHkgcGFja2FnZXMgbXVzdCBub3QgYXBwZWFyIGluIGZpbmRpbmdzIiwKICAgICJDT1BZIC0tZnJvbSBkaXJlY3RpdmVzIG11c3QgYmUgdHJhY2VkIGNvcnJlY3RseSIsCiAgICAiTGF5ZXIgc3F1YXNoaW5nIG11c3Qgbm90IGxlYWsgaW50ZXJtZWRpYXRlIGNvbnRlbnQiCiAgXQp9Cg==",
"signatures": [
{
"sig": "stub-signature",
"keyid": "stub-key-id"
}
]
}

16
tests/fixtures/sca/catalogue/fc9/manifest.dsse.json vendored
View File

@@ -1,10 +1,10 @@
{
"payloadType": "application/vnd.stellaops.fixture+json",
"payload": "eyJpZCI6ImZjOS1wdXJsLW5hbWVzcGFjZS1jb2xsaXNpb24iLCJoYXNoIjoiYmFkYzBmZmVlMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAiLCJjcmVhdGVkIjoiMjAyNS0xMi0xNlQwMDowMDowMFoifQ==",
"signatures": [
{
"keyid": "stellaops-fixture-signing-key-v1",
"sig": "fixture-signature-placeholder"
}
]
"payloadType": "application/json",
"payload": "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",
"signatures": [
{
"sig": "stub-signature",
"keyid": "stub-key-id"
}
]
}