stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 2 Releases Wiki Activity

Add determinism tests for verdict artifact generation and update SHA256 sums script

Browse Source 
- Implemented comprehensive tests for verdict artifact generation to ensure deterministic outputs across various scenarios, including identical inputs, parallel execution, and change ordering.
- Created helper methods for generating sample verdict inputs and computing canonical hashes.
- Added tests to validate the stability of canonical hashes, proof spine ordering, and summary statistics.
- Introduced a new PowerShell script to update SHA256 sums for files, ensuring accurate hash generation and file integrity checks.
This commit is contained in:
StellaOps Bot
2025-12-24 02:17:34 +02:00
parent e59921374e
commit 7503c19b8f
390 changed files with 37389 additions and 5380 deletions
Download Patch File Download Diff File Expand all files Collapse all files

50
docs/assets/vuln-explorer/console/CAPTURES.md
View File

@@ -1,13 +1,8 @@
# Console Asset Captures for Vuln Explorer Documentation
> **Status:** Ready for capture
> **Last Updated:** 2025-12-06
> **Owner:** Console Guild
> **Hash Manifest:** See SHA256SUMS after capture
## Capture Instructions
Run the console app locally and capture each screen:
Run the Console locally and capture each screen listed below.
```bash
# Start the dev environment
@@ -22,7 +17,7 @@ docker compose -f deploy/compose/docker-compose.dev.yaml up -d
### 1. Dashboard Overview
**File:** `dashboard-overview.png`
**File:** `dashboard-overview.png`
**Description:** Main dashboard showing vulnerability counts, risk scores, and recent activity.
```markdown
@@ -39,7 +34,7 @@ The dashboard provides:
### 2. Vulnerability Explorer List
**File:** `vuln-explorer-list.png`
**File:** `vuln-explorer-list.png`
**Description:** Vulnerability list view with filters and sorting.
```markdown
@@ -56,7 +51,7 @@ The vulnerability list shows:
### 3. Vulnerability Detail View
**File:** `vuln-detail.png`
**File:** `vuln-detail.png`
**Description:** Single vulnerability detail page with full context.
```markdown
@@ -75,7 +70,7 @@ The detail view includes:
### 4. Findings Ledger Timeline
**File:** `findings-timeline.png`
**File:** `findings-timeline.png`
**Description:** Timeline view of vulnerability findings and state changes.
```markdown
@@ -92,7 +87,7 @@ The timeline shows:
### 5. Risk Score Panel
**File:** `risk-score-panel.png`
**File:** `risk-score-panel.png`
**Description:** Risk score breakdown with contributing factors.
```markdown
@@ -109,7 +104,7 @@ The risk panel displays:
### 6. VEX Consensus View
**File:** `vex-consensus.png`
**File:** `vex-consensus.png`
**Description:** VEX consensus display showing multiple issuer statements.
```markdown
@@ -126,14 +121,14 @@ The VEX consensus view shows:
### 7. Policy Studio Editor
**File:** `policy-studio-editor.png`
**Description:** Policy Studio with Monaco editor and rule builder.
**File:** `policy-studio-editor.png`
**Description:** Policy Studio with editor and rule builder.
```markdown
![Policy Studio Editor](./policy-studio-editor.png)
The Policy Studio includes:
- Monaco editor with StellaOps DSL highlighting
- Policy editor with DSL highlighting
- Rule builder sidebar
- Simulation panel
- Lint/compile feedback
@@ -143,7 +138,7 @@ The Policy Studio includes:
### 8. Air-Gap Status Panel
**File:** `airgap-status.png`
**File:** `airgap-status.png`
**Description:** Air-gap mode status and bundle information.
```markdown
@@ -160,23 +155,8 @@ The air-gap panel shows:
## After Capture
1. Place captured images in this directory
2. Generate hashes:
```bash
sha256sum *.png > SHA256SUMS
```
3. Update `docs/assets/vuln-explorer/SHA256SUMS` with new entries
4. Mark DOCS-CONSOLE-OBS-52-001 as DONE in sprint file
1. Place captured images in this directory.
2. Compute hashes:
- `sha256sum *.png`
3. Record the sha256 next to each captured filename in this document (or in a sibling README where the asset is referenced).
## Sample SHA256SUMS Entry
```
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 dashboard-overview.png
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 vuln-explorer-list.png
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 vuln-detail.png
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 findings-timeline.png
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 risk-score-panel.png
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 vex-consensus.png
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 policy-studio-editor.png
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 airgap-status.png
```