stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 2 Releases Wiki Activity

sprints completion. new product advisories prepared

Browse Source
This commit is contained in:
master
2026-01-16 16:30:03 +02:00
parent a927d924e3
commit 4ca3ce8fb4
255 changed files with 42434 additions and 1020 deletions
Download Patch File Download Diff File Expand all files Collapse all files

40
docs/flows/10-cicd-gate-flow.md
View File

@@ -555,6 +555,46 @@ Comments include evidence references for auditability:
| Comment too long | Truncate with link to full report |
| PR already merged | Skip comment |
#### Evidence-First Annotation Format
PR/MR comments use ASCII-only output for determinism and maximum compatibility:
```
## StellaOps Security Scan
**Verdict:** [BLOCKING] Policy violation detected
| Status | Finding | Package | Action |
| --- | --- | --- | --- |
| [+] New | CVE-2026-1234 | lodash@4.17.21 | Fix: 4.17.22 |
| [-] Fixed | CVE-2025-9999 | express@4.17.0 | Resolved |
| [^] Upgraded | CVE-2026-5678 | axios@1.0.0 | High -> Medium |
| [v] Downgraded | CVE-2026-4321 | react@18.0.0 | Medium -> Low |
### Evidence
| Field | Value |
| --- | --- |
| Attestation Digest | sha256:abc123... |
| Policy Verdict | FAIL |
| Verify Command | `stellaops verify --digest sha256:abc123...` |
---
*[OK] 12 findings unchanged | Policy: production v2.1.0*
```
**ASCII Indicator Reference:**
| Indicator | Meaning |
|-----------|---------|
| `[OK]` | Pass / Success |
| `[BLOCKING]` | Fail / Hard gate triggered |
| `[WARNING]` | Soft gate / Advisory |
| `[+]` | New finding introduced |
| `[-]` | Finding fixed / removed |
| `[^]` | Severity upgraded |
| `[v]` | Severity downgraded |
#### Offline Mode
In air-gapped environments: