feat: Add new provenance and crypto registry documentation
- Introduced attestation inventory and subject-rekor mapping files for tracking Docker packages. - Added a comprehensive crypto registry decision document outlining defaults and required follow-ups. - Created an offline feeds manifest for bundling air-gap resources. - Implemented a script to generate and update binary manifests for curated binaries. - Added a verification script to ensure binary artefacts are located in approved directories. - Defined new schemas for AdvisoryEvidenceBundle, OrchestratorEnvelope, ScannerReportReadyPayload, and ScannerScanCompletedPayload. - Established project files for StellaOps.Orchestrator.Schemas and StellaOps.PolicyAuthoritySignals.Contracts. - Updated vendor manifest to track pinned binaries for integrity.
This commit is contained in:
@@ -1,5 +1,5 @@
|
||||
{
|
||||
"generated_utc": "2025-11-18T21:32:46.618821Z",
|
||||
"generated_utc": "2025-11-18T21:41:22.263398Z",
|
||||
"source": "StellaOps binary prereq consolidation",
|
||||
"base_dir": "local-nugets",
|
||||
"count": 91,
|
||||
|
||||
Reference in New Issue
Block a user