up
This commit is contained in:
		| @@ -13,6 +13,9 @@ fixture sets, where they live, and how to regenerate them safely. | ||||
| - **Regeneration:** Either run the test harness with online regeneration (`UPDATE_PARITY_FIXTURES=1 dotnet test src/StellaOps.Feedser.Source.Osv.Tests/StellaOps.Feedser.Source.Osv.Tests.csproj`) | ||||
|   or execute the fixture updater (`dotnet run --project tools/FixtureUpdater/FixtureUpdater.csproj`). Both paths | ||||
|   normalise timestamps and canonical ordering. | ||||
| - **SemVer provenance:** The regenerated fixtures should show `normalizedVersions[].notes` in the | ||||
|   `osv:{ecosystem}:{advisoryId}:{identifier}` shape emitted by `SemVerRangeRuleBuilder`. Confirm the | ||||
|   constraints and notes line up with GHSA/NVD composites before committing. | ||||
| - **Verification:** Inspect the diff, then re-run `dotnet test src/StellaOps.Feedser.Source.Osv.Tests/StellaOps.Feedser.Source.Osv.Tests.csproj` to confirm parity. | ||||
|  | ||||
| ## GHSA credit parity fixtures | ||||
|   | ||||
		Reference in New Issue
	
	Block a user