stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 16 Releases Wiki Activity

Add tests and implement timeline ingestion options with NATS and Redis subscribers

Browse Source 
- Introduced `BinaryReachabilityLifterTests` to validate binary lifting functionality.
- Created `PackRunWorkerOptions` for configuring worker paths and execution persistence.
- Added `TimelineIngestionOptions` for configuring NATS and Redis ingestion transports.
- Implemented `NatsTimelineEventSubscriber` for subscribing to NATS events.
- Developed `RedisTimelineEventSubscriber` for reading from Redis Streams.
- Added `TimelineEnvelopeParser` to normalize incoming event envelopes.
- Created unit tests for `TimelineEnvelopeParser` to ensure correct field mapping.
- Implemented `TimelineAuthorizationAuditSink` for logging authorization outcomes.
This commit is contained in:
StellaOps Bot
2025-12-03 09:46:48 +02:00
parent e923880694
commit 35c8f9216f
520 changed files with 4416 additions and 31492 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
docs/modules/policy/fixtures/spine-adapters/hashes.txt
View File

@@ -1 +1 @@
v2-to-v1.csv: BLAKE3=<TBD> SHA256=<TBD>
v2-to-v1.csv: BLAKE3=f259a807fae1cac90c4d52223924d808eb52a4ab2cb0d314ab2d651bfdad4273 SHA256=f5f067bd7814bd65213610a5ae4a35ce98e70a990ca1eb86d275a8abd3659a1a

8
docs/modules/policy/fixtures/spine-adapters/v2-to-v1.csv
View File

@@ -0,0 +1,8 @@
field,v2,v1,rule
schemaVersion,schemaVersion,schemaVersion,copy
componentRef,component.ref,component.ref,copy
packageIdentity,edges.package_identity,edges.package_identity,copy
reachabilityEvidence,edges.reachability.evidence.hash,edges.reachability.evidence_hash,copy
unknownsState,unknowns.state,unknowns_state,enum_map:unknown=pending;under_review=review;resolved=resolved;expired=stale
paginationCursor,meta.page.cursor,meta.page_cursor,stable_base64(sort_keys)
createdAt,meta.createdAt,meta.created_at,iso8601_utc
1 field v2 v1 rule
1 field v2 v1 rule
2 schemaVersion schemaVersion schemaVersion copy
3 componentRef component.ref component.ref copy
4 packageIdentity edges.package_identity edges.package_identity copy
5 reachabilityEvidence edges.reachability.evidence.hash edges.reachability.evidence_hash copy
6 unknownsState unknowns.state unknowns_state enum_map:unknown=pending;under_review=review;resolved=resolved;expired=stale
7 paginationCursor meta.page.cursor meta.page_cursor stable_base64(sort_keys)
8 createdAt meta.createdAt meta.created_at iso8601_utc

4
docs/modules/policy/fixtures/spine-crosswalk/crosswalk.csv
View File

@@ -0,0 +1,4 @@
sbom_component,spine_node,graph_node,policy_input,evidence_ref
pkg:demo/lib-a@1.2.3,spine://component/lib-a,graph://node/lib-a,policy://input/component/lib-a,hash:blake3:27c6de0c
pkg:demo/lib-b@2.0.0,spine://component/lib-b,graph://node/lib-b,policy://input/component/lib-b,hash:blake3:da5b631a
vuln:CVE-0000-0001,spine://vuln/CVE-0000-0001,graph://advisory/CVE-0000-0001,policy://input/vuln/CVE-0000-0001,hash:sha256:22d8f6f8
1 sbom_component spine_node graph_node policy_input evidence_ref
1 sbom_component spine_node graph_node policy_input evidence_ref
2 pkg:demo/lib-a@1.2.3 spine://component/lib-a graph://node/lib-a policy://input/component/lib-a hash:blake3:27c6de0c
3 pkg:demo/lib-b@2.0.0 spine://component/lib-b graph://node/lib-b policy://input/component/lib-b hash:blake3:da5b631a
4 vuln:CVE-0000-0001 spine://vuln/CVE-0000-0001 graph://advisory/CVE-0000-0001 policy://input/vuln/CVE-0000-0001 hash:sha256:22d8f6f8

2
docs/modules/policy/fixtures/spine-crosswalk/hashes.txt
View File

@@ -1 +1 @@
crosswalk.csv: BLAKE3=<TBD> SHA256=<TBD>
crosswalk.csv: BLAKE3=41926241c6d60bb856ceb4498e70381cdf54217435740f5fdf31ff8964044d78 SHA256=1e6644cdc00097b7e959e75f522335326b8f48fe1d05060d1c06ba660aac22a3