Frontend gaps fill work. Testing fixes work. Auditing in progress.

This commit is contained in:
StellaOps Bot
2025-12-30 01:22:58 +02:00
parent 1dc4bcbf10
commit 7a5210e2aa
928 changed files with 183942 additions and 3941 deletions

View File

@@ -0,0 +1,24 @@
# Expected output for GitHub gate template validation
# This file is used to verify deterministic template generation
name: StellaOps Release Gate
on:
push:
branches: [main, release/*]
pull_request:
branches: [main]
workflow_dispatch:
permissions:
contents: read
id-token: write
security-events: write
jobs:
gate:
name: Release Gate Evaluation
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v4

View File

@@ -0,0 +1,35 @@
{
"version": "1.0.0",
"description": "CI template validation manifest for E2E tests",
"platforms": ["github", "gitlab", "gitea"],
"templateTypes": ["gate", "scan", "verify", "full"],
"modes": ["basic", "strict", "airgap"],
"expectedOutputs": {
"github": {
"gate": ".github/workflows/stellaops-gate.yml",
"scan": ".github/workflows/stellaops-scan.yml",
"verify": ".github/workflows/stellaops-verify.yml"
},
"gitlab": {
"gate": ".gitlab-ci.yml",
"scan": ".gitlab/stellaops-scan.yml",
"verify": ".gitlab/stellaops-verify.yml"
},
"gitea": {
"gate": ".gitea/workflows/stellaops-gate.yml",
"scan": ".gitea/workflows/stellaops-scan.yml",
"verify": ".gitea/workflows/stellaops-verify.yml"
}
},
"requiredKeywords": {
"gate": ["stellaops", "gate", "evaluate", "baseline"],
"scan": ["stellaops", "scan", "sbom"],
"verify": ["stellaops", "verify", "require"]
},
"deterministicFields": [
"name",
"on",
"permissions",
"jobs"
]
}

View File

@@ -0,0 +1,19 @@
{
"id": "acr-event-001",
"timestamp": "2024-12-29T12:00:00.000Z",
"action": "push",
"target": {
"mediaType": "application/vnd.docker.distribution.manifest.v2+json",
"size": 3028,
"digest": "sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4",
"length": 3028,
"repository": "stellaops/api-gateway",
"tag": "1.0.0"
},
"request": {
"id": "req-12345",
"host": "stellaops.azurecr.io",
"method": "PUT",
"useragent": "docker/20.10.21 go/go1.18.10"
}
}

View File

@@ -0,0 +1,25 @@
{
"callback_url": "https://registry.hub.docker.com/u/stellaops/scanner/hook/1234567890",
"push_data": {
"pushed_at": 1703836800,
"pusher": "stellaops-bot",
"tag": "v2.0.0"
},
"repository": {
"comment_count": 0,
"date_created": 1703836700,
"description": "StellaOps container scanner",
"dockerfile": "FROM alpine:3.18\nRUN apk add --no-cache ca-certificates",
"full_description": "# StellaOps Scanner\n\nContainer vulnerability scanner.",
"is_official": false,
"is_private": false,
"is_trusted": true,
"name": "scanner",
"namespace": "stellaops",
"owner": "stellaops",
"repo_name": "stellaops/scanner",
"repo_url": "https://registry.hub.docker.com/v2/repositories/stellaops/scanner",
"star_count": 42,
"status": "Active"
}
}

View File

@@ -0,0 +1,19 @@
{
"version": "0",
"id": "12345678-1234-1234-1234-123456789abc",
"detail-type": "ECR Image Action",
"source": "aws.ecr",
"account": "123456789012",
"time": "2024-12-29T12:00:00Z",
"region": "us-east-1",
"resources": [
"arn:aws:ecr:us-east-1:123456789012:repository/stellaops/scanner"
],
"detail": {
"action-type": "PUSH",
"repository-name": "stellaops/scanner",
"image-digest": "sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4",
"image-tag": "v3.1.0",
"result": "SUCCESS"
}
}

View File

@@ -0,0 +1,8 @@
{
"message": {
"data": "eyJhY3Rpb24iOiJJTlNFUlQiLCJkaWdlc3QiOiJzaGEyNTY6YTNlZDk1Y2FlYjAyZmZlNjhjZGQ5ZmQ4NDQwNjY4MGFlOTNkNjMzY2IxNjQyMmQwMGU4YTdjMjI5NTViNDZkNCIsInRhZyI6InYyLjUuMCJ9",
"messageId": "gcr-msg-12345",
"publishTime": "2024-12-29T12:00:00.000Z"
},
"subscription": "projects/stellaops-project/subscriptions/gcr-push-subscription"
}

View File

@@ -0,0 +1,63 @@
{
"action": "published",
"package": {
"id": 12345678,
"name": "stellaops-cli",
"namespace": "stellaops",
"description": "StellaOps command-line interface",
"ecosystem": "container",
"package_type": "container",
"html_url": "https://github.com/orgs/stellaops/packages/container/package/stellaops-cli",
"created_at": "2024-12-29T11:00:00Z",
"updated_at": "2024-12-29T12:00:00Z",
"owner": {
"login": "stellaops",
"id": 87654321,
"type": "Organization"
},
"package_version": {
"id": 98765432,
"version": "v4.0.0",
"summary": "Container release v4.0.0",
"body": "## Release Notes\n- New scan engine\n- Improved performance",
"body_html": "<h2>Release Notes</h2><ul><li>New scan engine</li><li>Improved performance</li></ul>",
"release": {
"url": "https://api.github.com/repos/stellaops/stellaops-cli/releases/12345678",
"html_url": "https://github.com/stellaops/stellaops-cli/releases/tag/v4.0.0",
"id": 12345678,
"tag_name": "v4.0.0",
"target_commitish": "main",
"name": "v4.0.0",
"draft": false,
"prerelease": false
},
"manifest": "sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4",
"html_url": "https://github.com/orgs/stellaops/packages/container/stellaops-cli/98765432",
"tag_name": "v4.0.0",
"container_metadata": {
"tag": {
"digest": "sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4",
"name": "v4.0.0"
}
}
},
"registry": {
"about_url": "https://docs.github.com/packages",
"name": "GitHub Container Registry",
"type": "ghcr",
"url": "https://ghcr.io",
"vendor": "GitHub Inc."
}
},
"repository": {
"id": 11111111,
"name": "stellaops-cli",
"full_name": "stellaops/stellaops-cli",
"private": false
},
"sender": {
"login": "release-bot",
"id": 99999999,
"type": "Bot"
}
}

View File

@@ -0,0 +1,21 @@
{
"type": "PUSH_ARTIFACT",
"occur_at": 1703836800,
"operator": "admin",
"event_data": {
"resources": [
{
"digest": "sha256:a3ed95caeb02ffe68cdd9fd84406680ae93d633cb16422d00e8a7c22955b46d4",
"tag": "v1.2.3",
"resource_url": "harbor.example.com/library/nginx:v1.2.3"
}
],
"repository": {
"date_created": 1703836700,
"name": "nginx",
"namespace": "library",
"repo_full_name": "library/nginx",
"repo_type": "public"
}
}
}

View File

@@ -0,0 +1,94 @@
{
"secret": "",
"ref": "refs/heads/main",
"before": "0000000000000000000000000000000000000000",
"after": "abc123def456789012345678901234567890abcd",
"compare_url": "https://gitea.example.com/stellaops-org/stellaops/compare/000000000000...abc123def456",
"commits": [
{
"id": "abc123def456789012345678901234567890abcd",
"message": "feat: add new scanner analyzer\n\nAdds support for Python wheel analysis.",
"url": "https://gitea.example.com/stellaops-org/stellaops/commit/abc123def456789012345678901234567890abcd",
"author": {
"name": "Developer",
"email": "developer@stellaops.io",
"username": "developer"
},
"committer": {
"name": "Developer",
"email": "developer@stellaops.io",
"username": "developer"
},
"verification": null,
"timestamp": "2024-12-29T12:00:00Z",
"added": ["src/Scanner/Analyzers/PythonWheel.cs"],
"removed": [],
"modified": ["src/Scanner/Scanner.csproj"]
}
],
"head_commit": {
"id": "abc123def456789012345678901234567890abcd",
"message": "feat: add new scanner analyzer",
"url": "https://gitea.example.com/stellaops-org/stellaops/commit/abc123def456789012345678901234567890abcd",
"author": {
"name": "Developer",
"email": "developer@stellaops.io",
"username": "developer"
},
"timestamp": "2024-12-29T12:00:00Z"
},
"repository": {
"id": 12345,
"owner": {
"id": 1,
"login": "stellaops-org",
"full_name": "StellaOps Organization",
"email": "org@stellaops.io",
"avatar_url": "https://gitea.example.com/avatars/1",
"username": "stellaops-org"
},
"name": "stellaops",
"full_name": "stellaops-org/stellaops",
"description": "Sovereign container security platform",
"empty": false,
"private": false,
"fork": false,
"template": false,
"parent": null,
"mirror": false,
"size": 102400,
"language": "C#",
"languages_url": "https://gitea.example.com/api/v1/repos/stellaops-org/stellaops/languages",
"html_url": "https://gitea.example.com/stellaops-org/stellaops",
"ssh_url": "git@gitea.example.com:stellaops-org/stellaops.git",
"clone_url": "https://gitea.example.com/stellaops-org/stellaops.git",
"original_url": "",
"website": "https://stellaops.io",
"stars_count": 42,
"forks_count": 7,
"watchers_count": 15,
"open_issues_count": 3,
"open_pr_counter": 2,
"release_counter": 10,
"default_branch": "main",
"archived": false,
"created_at": "2024-01-01T00:00:00Z",
"updated_at": "2024-12-29T12:00:00Z"
},
"pusher": {
"id": 54321,
"login": "developer",
"full_name": "Developer",
"email": "developer@stellaops.io",
"avatar_url": "https://gitea.example.com/avatars/54321",
"username": "developer"
},
"sender": {
"id": 54321,
"login": "developer",
"full_name": "Developer",
"email": "developer@stellaops.io",
"avatar_url": "https://gitea.example.com/avatars/54321",
"username": "developer"
}
}

View File

@@ -0,0 +1,102 @@
{
"action": "opened",
"number": 42,
"pull_request": {
"url": "https://api.github.com/repos/stellaops-org/stellaops/pulls/42",
"id": 1234567890,
"node_id": "PR_kwDOBuA8HM5KX8eS",
"html_url": "https://github.com/stellaops-org/stellaops/pull/42",
"diff_url": "https://github.com/stellaops-org/stellaops/pull/42.diff",
"patch_url": "https://github.com/stellaops-org/stellaops/pull/42.patch",
"issue_url": "https://api.github.com/repos/stellaops-org/stellaops/issues/42",
"number": 42,
"state": "open",
"locked": false,
"title": "feat: add Python wheel analyzer",
"user": {
"login": "developer",
"id": 11111111,
"type": "User"
},
"body": "This PR adds support for Python wheel package analysis.\n\n## Changes\n- New PythonWheel analyzer\n- Updated Scanner.csproj\n\n## Testing\n- Added unit tests for wheel parsing",
"created_at": "2024-12-29T11:30:00Z",
"updated_at": "2024-12-29T11:30:00Z",
"closed_at": null,
"merged_at": null,
"merge_commit_sha": null,
"assignee": null,
"assignees": [],
"requested_reviewers": [],
"requested_teams": [],
"labels": [
{
"id": 1,
"name": "enhancement",
"color": "a2eeef"
}
],
"milestone": null,
"draft": false,
"head": {
"label": "stellaops-org:feature/python-wheel",
"ref": "feature/python-wheel",
"sha": "abc123def456789012345678901234567890abcd",
"user": {
"login": "stellaops-org",
"id": 87654321
},
"repo": {
"id": 12345678,
"name": "stellaops",
"full_name": "stellaops-org/stellaops"
}
},
"base": {
"label": "stellaops-org:main",
"ref": "main",
"sha": "0000000000000000000000000000000000000000",
"user": {
"login": "stellaops-org",
"id": 87654321
},
"repo": {
"id": 12345678,
"name": "stellaops",
"full_name": "stellaops-org/stellaops"
}
},
"author_association": "MEMBER",
"auto_merge": null,
"active_lock_reason": null,
"merged": false,
"mergeable": null,
"rebaseable": null,
"mergeable_state": "unknown",
"merged_by": null,
"comments": 0,
"review_comments": 0,
"maintainer_can_modify": false,
"commits": 1,
"additions": 150,
"deletions": 5,
"changed_files": 2
},
"repository": {
"id": 12345678,
"name": "stellaops",
"full_name": "stellaops-org/stellaops",
"private": false,
"owner": {
"login": "stellaops-org",
"id": 87654321,
"type": "Organization"
},
"html_url": "https://github.com/stellaops-org/stellaops",
"default_branch": "main"
},
"sender": {
"login": "developer",
"id": 11111111,
"type": "User"
}
}

View File

@@ -0,0 +1,72 @@
{
"ref": "refs/heads/main",
"before": "0000000000000000000000000000000000000000",
"after": "abc123def456789012345678901234567890abcd",
"repository": {
"id": 12345678,
"node_id": "R_kgDOBuA8HA",
"name": "stellaops",
"full_name": "stellaops-org/stellaops",
"private": false,
"owner": {
"name": "stellaops-org",
"login": "stellaops-org",
"id": 87654321,
"type": "Organization"
},
"html_url": "https://github.com/stellaops-org/stellaops",
"description": "Sovereign container security platform",
"fork": false,
"url": "https://api.github.com/repos/stellaops-org/stellaops",
"clone_url": "https://github.com/stellaops-org/stellaops.git",
"default_branch": "main"
},
"pusher": {
"name": "developer",
"email": "developer@stellaops.io"
},
"sender": {
"login": "developer",
"id": 11111111,
"type": "User"
},
"created": false,
"deleted": false,
"forced": false,
"base_ref": null,
"compare": "https://github.com/stellaops-org/stellaops/compare/000000000000...abc123def456",
"commits": [
{
"id": "abc123def456789012345678901234567890abcd",
"tree_id": "fedcba0987654321fedcba0987654321fedcba09",
"distinct": true,
"message": "feat: add new scanner analyzer\n\nAdds support for Python wheel analysis.",
"timestamp": "2024-12-29T12:00:00Z",
"url": "https://github.com/stellaops-org/stellaops/commit/abc123def456789012345678901234567890abcd",
"author": {
"name": "Developer",
"email": "developer@stellaops.io",
"username": "developer"
},
"committer": {
"name": "Developer",
"email": "developer@stellaops.io",
"username": "developer"
},
"added": ["src/Scanner/Analyzers/PythonWheel.cs"],
"removed": [],
"modified": ["src/Scanner/Scanner.csproj"]
}
],
"head_commit": {
"id": "abc123def456789012345678901234567890abcd",
"tree_id": "fedcba0987654321fedcba0987654321fedcba09",
"distinct": true,
"message": "feat: add new scanner analyzer",
"timestamp": "2024-12-29T12:00:00Z",
"author": {
"name": "Developer",
"email": "developer@stellaops.io"
}
}
}

View File

@@ -0,0 +1,98 @@
{
"action": "completed",
"workflow_run": {
"id": 9876543210,
"name": "StellaOps CI",
"node_id": "WFR_kwLOBuA8HM8AAAAClKe9Og",
"head_branch": "main",
"head_sha": "abc123def456789012345678901234567890abcd",
"path": ".github/workflows/ci.yml",
"display_title": "StellaOps CI",
"run_number": 123,
"event": "push",
"status": "completed",
"conclusion": "success",
"workflow_id": 12345,
"check_suite_id": 11111111,
"check_suite_node_id": "CS_kwDOBuA8HM8AAAAClKe9Og",
"url": "https://api.github.com/repos/stellaops-org/stellaops/actions/runs/9876543210",
"html_url": "https://github.com/stellaops-org/stellaops/actions/runs/9876543210",
"pull_requests": [],
"created_at": "2024-12-29T12:00:00Z",
"updated_at": "2024-12-29T12:05:00Z",
"actor": {
"login": "developer",
"id": 11111111,
"type": "User"
},
"run_attempt": 1,
"referenced_workflows": [],
"run_started_at": "2024-12-29T12:00:00Z",
"triggering_actor": {
"login": "developer",
"id": 11111111,
"type": "User"
},
"jobs_url": "https://api.github.com/repos/stellaops-org/stellaops/actions/runs/9876543210/jobs",
"logs_url": "https://api.github.com/repos/stellaops-org/stellaops/actions/runs/9876543210/logs",
"check_suite_url": "https://api.github.com/repos/stellaops-org/stellaops/check-suites/11111111",
"artifacts_url": "https://api.github.com/repos/stellaops-org/stellaops/actions/runs/9876543210/artifacts",
"cancel_url": "https://api.github.com/repos/stellaops-org/stellaops/actions/runs/9876543210/cancel",
"rerun_url": "https://api.github.com/repos/stellaops-org/stellaops/actions/runs/9876543210/rerun",
"workflow_url": "https://api.github.com/repos/stellaops-org/stellaops/actions/workflows/12345",
"head_commit": {
"id": "abc123def456789012345678901234567890abcd",
"tree_id": "fedcba0987654321fedcba0987654321fedcba09",
"message": "feat: add new scanner analyzer",
"timestamp": "2024-12-29T12:00:00Z",
"author": {
"name": "Developer",
"email": "developer@stellaops.io"
},
"committer": {
"name": "Developer",
"email": "developer@stellaops.io"
}
},
"repository": {
"id": 12345678,
"name": "stellaops",
"full_name": "stellaops-org/stellaops"
},
"head_repository": {
"id": 12345678,
"name": "stellaops",
"full_name": "stellaops-org/stellaops"
}
},
"workflow": {
"id": 12345,
"node_id": "W_kwDOBuA8HM8AAAACKPb9",
"name": "StellaOps CI",
"path": ".github/workflows/ci.yml",
"state": "active",
"created_at": "2024-01-01T00:00:00.000Z",
"updated_at": "2024-12-29T12:00:00.000Z",
"url": "https://api.github.com/repos/stellaops-org/stellaops/actions/workflows/12345",
"html_url": "https://github.com/stellaops-org/stellaops/blob/main/.github/workflows/ci.yml",
"badge_url": "https://github.com/stellaops-org/stellaops/workflows/StellaOps%20CI/badge.svg"
},
"repository": {
"id": 12345678,
"name": "stellaops",
"full_name": "stellaops-org/stellaops",
"private": false,
"owner": {
"login": "stellaops-org",
"id": 87654321,
"type": "Organization"
},
"html_url": "https://github.com/stellaops-org/stellaops",
"default_branch": "main"
},
"sender": {
"login": "github-actions[bot]",
"id": 41898282,
"type": "Bot"
}
}

View File

@@ -0,0 +1,60 @@
{
"object_kind": "push",
"event_name": "push",
"before": "0000000000000000000000000000000000000000",
"after": "abc123def456789012345678901234567890abcd",
"ref": "refs/heads/main",
"checkout_sha": "abc123def456789012345678901234567890abcd",
"message": null,
"user_id": 12345,
"user_name": "Developer",
"user_username": "developer",
"user_email": "developer@stellaops.io",
"user_avatar": "https://gitlab.example.com/uploads/-/system/user/avatar/12345/avatar.png",
"project_id": 67890,
"project": {
"id": 67890,
"name": "stellaops",
"description": "Sovereign container security platform",
"web_url": "https://gitlab.example.com/stellaops-org/stellaops",
"avatar_url": null,
"git_ssh_url": "git@gitlab.example.com:stellaops-org/stellaops.git",
"git_http_url": "https://gitlab.example.com/stellaops-org/stellaops.git",
"namespace": "stellaops-org",
"visibility_level": 20,
"path_with_namespace": "stellaops-org/stellaops",
"default_branch": "main",
"ci_config_path": ".gitlab-ci.yml",
"homepage": "https://gitlab.example.com/stellaops-org/stellaops",
"url": "git@gitlab.example.com:stellaops-org/stellaops.git",
"ssh_url": "git@gitlab.example.com:stellaops-org/stellaops.git",
"http_url": "https://gitlab.example.com/stellaops-org/stellaops.git"
},
"commits": [
{
"id": "abc123def456789012345678901234567890abcd",
"message": "feat: add new scanner analyzer\n\nAdds support for Python wheel analysis.",
"title": "feat: add new scanner analyzer",
"timestamp": "2024-12-29T12:00:00+00:00",
"url": "https://gitlab.example.com/stellaops-org/stellaops/-/commit/abc123def456789012345678901234567890abcd",
"author": {
"name": "Developer",
"email": "developer@stellaops.io"
},
"added": ["src/Scanner/Analyzers/PythonWheel.cs"],
"modified": ["src/Scanner/Scanner.csproj"],
"removed": []
}
],
"total_commits_count": 1,
"push_options": {},
"repository": {
"name": "stellaops",
"url": "git@gitlab.example.com:stellaops-org/stellaops.git",
"description": "Sovereign container security platform",
"homepage": "https://gitlab.example.com/stellaops-org/stellaops",
"git_http_url": "https://gitlab.example.com/stellaops-org/stellaops.git",
"git_ssh_url": "git@gitlab.example.com:stellaops-org/stellaops.git",
"visibility_level": 20
}
}