stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 2 Releases Wiki Activity

save checkpoint

Browse Source
This commit is contained in:
master
2026-02-14 09:11:48 +02:00
parent 9ca2de05df
commit e9aeadc040
1512 changed files with 30863 additions and 4728 deletions
Download Patch File Download Diff File Expand all files Collapse all files

38
docs/features/checked/scanner/windows-winsxs-manifest-analyzer.md Normal file
View File

@@ -0,0 +1,38 @@
# Windows WinSxS Manifest Analyzer
## Module
Scanner
## Status
VERIFIED
## Description
Parses Windows Side-by-Side (WinSxS) assembly manifests to discover shared system components, extracting assembly identity, version, processor architecture, and public key token.
## Implementation Details
- **WinSxS Package Analyzer**:
- `src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.OS.Windows.WinSxS/WinSxSPackageAnalyzer.cs` - `WinSxSPackageAnalyzer` discovering WinSxS assemblies from the WinSxS directory
- **Manifest Parser**:
- `src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.OS.Windows.WinSxS/WinSxSManifestParser.cs` - `WinSxSManifestParser` parsing WinSxS assembly manifest XML files to extract assembly identity, version, processor architecture, and public key token
- **Metadata Model**:
- `src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.OS.Windows.WinSxS/WinSxSAssemblyMetadata.cs` - `WinSxSAssemblyMetadata` model for discovered assembly metadata
- **Plugin Registration**:
- `src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.OS.Windows.WinSxS/WinSxSAnalyzerPlugin.cs` - `WinSxSAnalyzerPlugin` registering the WinSxS analyzer in the scanner pipeline
## E2E Test Plan
- [ ] Scan a Windows container image and verify WinSxS assemblies are discovered from the WinSxS directory
- [ ] Verify each discovered assembly includes correct name, version, processor architecture (x86, amd64), and public key token
- [ ] Verify the manifest parser correctly handles multi-assembly manifests with dependency declarations
- [ ] Verify the analyzer produces valid SBOM components for WinSxS assemblies
- [ ] Verify the analyzer correctly handles different WinSxS directory layouts across Windows versions
---
## Verification
| Check | Result |
|-------|--------|
| Tier 0 - Source files exist | PASS |
| Tier 1 - Build + code review | PASS |
| Tier 2 - Integration tests | PASS |
| Verified | 2026-02-13T18:10:00Z |