stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 2 Releases Wiki Activity

audit work, fixed StellaOps.sln warnings/errors, fixed tests, sprints work, new advisories

Browse Source
This commit is contained in:
master
2026-01-07 18:49:59 +02:00
parent 04ec098046
commit 608a7f85c0
866 changed files with 56323 additions and 6231 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
docs/modules/attestor/samples/sbom-vex/README.md Normal file
View File

@@ -0,0 +1,15 @@
# SBOM→VEX Offline Kit (Stub)
This kit supports sprint task 6 (SBOM-VEX-GAPS-300-013).
Contents (stub):
- `verify.sh` – chain hash stub for SBOM + DSSE + Rekor + VEX
- `chain-hash-recipe.md` – canonicalisation steps
- `inputs.lock` – pinned tool versions and snapshot
- `proof-manifest.json` – chain hash placeholder
- ~~`sbom-vex-blueprint.svg`~~ – archived (empty placeholder)
Next steps:
- Add real SBOM/VEX samples and Rekor bundle snapshot.
- Produce DSSE signatures for proof manifest and scripts.
- Include time-anchor and backpressure/error policy notes per BP1–BP10.