license switch agpl -> busl1, sprints work, new product advisories

devops/docker/Dockerfile.ci

@@ -16,7 +16,8 @@ ENV DEBIAN_FRONTEND=noninteractive
 ENV DOTNET_VERSION=10.0.100
 ENV NODE_VERSION=20
 ENV HELM_VERSION=3.16.0
-ENV COSIGN_VERSION=2.2.4
+ENV COSIGN_VERSION=3.0.4
+ENV REKOR_VERSION=1.4.3
 ENV TZ=UTC
 
 # Disable .NET telemetry
@@ -118,13 +119,22 @@ RUN curl -fsSL https://get.helm.sh/helm-v${HELM_VERSION}-linux-amd64.tar.gz | \
 
 # ===========================================================================
 # COSIGN
-# ===========================================================================
+# ===========================================================================   
 
 RUN curl -fsSL https://github.com/sigstore/cosign/releases/download/v${COSIGN_VERSION}/cosign-linux-amd64 \
     -o /usr/local/bin/cosign \
     && chmod +x /usr/local/bin/cosign \
     && cosign version
 
+# ===========================================================================   
+# REKOR CLI
+# ===========================================================================   
+
+RUN curl -fsSL https://github.com/sigstore/rekor/releases/download/v${REKOR_VERSION}/rekor-cli-linux-amd64 \
+    -o /usr/local/bin/rekor-cli \
+    && chmod +x /usr/local/bin/rekor-cli \
+    && rekor-cli version
+
 # ===========================================================================
 # SYFT (SBOM generation)
 # ===========================================================================
@@ -153,6 +163,7 @@ RUN printf '%s\n' \
     'echo "npm: $(npm --version)"' \
     'echo "Helm: $(helm version --short)"' \
     'echo "Cosign: $(cosign version 2>&1 | head -1)"' \
+    'echo "Rekor CLI: $(rekor-cli version 2>&1 | head -1)"' \
     'echo "Docker: $(docker --version 2>/dev/null || echo Not available)"' \
     'echo "PostgreSQL client: $(psql --version)"' \
     'echo "=== All checks passed ==="' \

devops/docker/corpus/docker-compose.corpus.yml

@@ -1,5 +1,5 @@
 # Copyright (c) StellaOps. All rights reserved.
-# Licensed under AGPL-3.0-or-later.
+# Licensed under BUSL-1.1.
 
 # Function Behavior Corpus PostgreSQL Database
 #
@@ -11,7 +11,7 @@
 
 services:
   corpus-postgres:
-    image: postgres:16-alpine
+    image: postgres:18.1-alpine
     container_name: stellaops-corpus-db
     environment:
       POSTGRES_DB: stellaops_corpus
@@ -40,3 +40,4 @@ volumes:
 networks:
   stellaops-corpus:
     driver: bridge
+

devops/docker/corpus/scripts/init-test-data.sql

@@ -1,7 +1,7 @@
 -- =============================================================================
 -- CORPUS TEST DATA - Minimal corpus for integration testing
 -- Copyright (c) StellaOps. All rights reserved.
--- Licensed under AGPL-3.0-or-later.
+-- Licensed under BUSL-1.1.
 -- =============================================================================
 
 -- Set tenant for test data

devops/docker/ghidra/Dockerfile.headless

@@ -1,5 +1,5 @@
 # Copyright (c) StellaOps. All rights reserved.
-# Licensed under AGPL-3.0-or-later.
+# Licensed under BUSL-1.1.
 
 # Ghidra Headless Analysis Server for BinaryIndex
 #
@@ -24,7 +24,7 @@ ARG GHIDRA_SHA256
 LABEL org.opencontainers.image.title="StellaOps Ghidra Headless"
 LABEL org.opencontainers.image.description="Ghidra headless analysis server with ghidriff for BinaryIndex"
 LABEL org.opencontainers.image.version="${GHIDRA_VERSION}"
-LABEL org.opencontainers.image.licenses="AGPL-3.0-or-later"
+LABEL org.opencontainers.image.licenses="BUSL-1.1"
 LABEL org.opencontainers.image.source="https://github.com/stellaops/stellaops"
 LABEL org.opencontainers.image.vendor="StellaOps"
 

devops/docker/ghidra/docker-compose.bsim.yml

@@ -1,5 +1,5 @@
 # Copyright (c) StellaOps. All rights reserved.
-# Licensed under AGPL-3.0-or-later.
+# Licensed under BUSL-1.1.
 
 # BSim PostgreSQL Database and Ghidra Headless Services
 #
@@ -13,7 +13,7 @@ version: '3.8'
 
 services:
   bsim-postgres:
-    image: postgres:16-alpine
+    image: postgres:18.1-alpine
     container_name: stellaops-bsim-db
     environment:
       POSTGRES_DB: bsim_corpus
@@ -75,3 +75,4 @@ volumes:
 networks:
   stellaops-bsim:
     driver: bridge
+

devops/docker/ghidra/scripts/init-bsim.sql

@@ -1,6 +1,6 @@
 -- BSim PostgreSQL Schema Initialization
 -- Copyright (c) StellaOps. All rights reserved.
--- Licensed under AGPL-3.0-or-later.
+-- Licensed under BUSL-1.1.
 --
 -- This script creates the core BSim schema structure.
 -- Note: Full Ghidra BSim schema is auto-created by Ghidra tools.