feat: Add initial implementation of Vulnerability Resolver Jobs
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled

- Created project for StellaOps.Scanner.Analyzers.Native.Tests with necessary dependencies.
- Documented roles and guidelines in AGENTS.md for Scheduler module.
- Implemented IResolverJobService interface and InMemoryResolverJobService for handling resolver jobs.
- Added ResolverBacklogNotifier and ResolverBacklogService for monitoring job metrics.
- Developed API endpoints for managing resolver jobs and retrieving metrics.
- Defined models for resolver job requests and responses.
- Integrated dependency injection for resolver job services.
- Implemented ImpactIndexSnapshot for persisting impact index data.
- Introduced SignalsScoringOptions for configurable scoring weights in reachability scoring.
- Added unit tests for ReachabilityScoringService and RuntimeFactsIngestionService.
- Created dotnet-filter.sh script to handle command-line arguments for dotnet.
- Established nuget-prime project for managing package downloads.
This commit is contained in:
master
2025-11-18 07:52:15 +02:00
parent e69b57d467
commit 8355e2ff75
299 changed files with 13293 additions and 2444 deletions

View File

@@ -1,24 +1 @@
{
buildDefinition: {
buildType: https://slsa.dev/provenance/v1,
externalParameters: {
workflow: orchestrator/job,
policyHash: sha256:deadbeef
},
resolvedDependencies: {
sbomDigest: sha256:aaaabbbb,
vexDigest: sha256:ccccdddd
}
},
buildMetadata: {
buildInvocationId: job-12345,
buildStartedOn: 2025-11-16T12:00:00Z,
buildFinishedOn: 2025-11-16T12:00:10Z,
reproducible: true,
completeness: {
parameters: true,
environment: true,
materials: true
}
}
}
{"BuildDefinition":{"BuildType":"https://slsa.dev/provenance/v1","ExternalParameters":{"policyHash":"sha256:deadbeef","workflow":"orchestrator/job"},"ResolvedDependencies":{"sbomDigest":"sha256:aaaabbbb","vexDigest":"sha256:ccccdddd"}},"BuildMetadata":{"BuildFinishedOn":"2025-11-16T12:00:10Z","BuildInvocationId":"job-12345","BuildStartedOn":"2025-11-16T12:00:00Z","Completeness":{"environment":true,"materials":true,"parameters":true},"Reproducible":true}}

View File

@@ -0,0 +1 @@
{"BuildDefinition":{"BuildType":"https://slsa.dev/provenance/v1","ExternalParameters":{"exportId":"exp-42","format":"ndjson"},"ResolvedDependencies":{"input":"s3://exports/cache/v1/graph.ndjson","policy":"policy-bundle-v3"}},"BuildMetadata":{"BuildFinishedOn":"2025-11-14T18:00:45Z","BuildInvocationId":"export-job-42","BuildStartedOn":"2025-11-14T17:58:10Z","Completeness":{"environment":true,"materials":true,"parameters":true},"Environment":{"region":"us-west-2","runner":"export-center","schemaVersion":"1.0.0"},"Reproducible":true}}

View File

@@ -0,0 +1 @@
{"BuildDefinition":{"BuildType":"https://slsa.dev/provenance/v1","ExternalParameters":{"dataset":"sbom-v1","job":"graph-index"},"ResolvedDependencies":{"sbomDigest":"sha256:111122223333444455556666777788889999aaaabbbbccccddddeeeeffff0000"}},"BuildMetadata":{"BuildFinishedOn":"2025-11-12T09:21:30Z","BuildInvocationId":"graph-index-job-789","BuildStartedOn":"2025-11-12T09:20:00Z","Completeness":{"environment":true,"materials":true,"parameters":true},"Environment":{"region":"eu-central-1","runner":"scheduler-worker","schemaVersion":"1.0.0"},"Reproducible":true}}

View File

@@ -0,0 +1 @@
{"BuildDefinition":{"BuildType":"https://slsa.dev/provenance/v1","ExternalParameters":{"entrypoint":"orchestrator","workflow":"release"},"ResolvedDependencies":{"source":"git+https://git.stella-ops.internal/stella.git@abcdef123456"}},"BuildMetadata":{"BuildFinishedOn":"2025-11-10T12:05:00Z","BuildInvocationId":"orchestrator-run-123","BuildStartedOn":"2025-11-10T12:00:00Z","Completeness":{"environment":true,"materials":true,"parameters":true},"Environment":{"region":"us-east-1","runner":"task-runner","schemaVersion":"1.0.0"},"Reproducible":true}}