stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 2 Releases Wiki Activity

Merge branch 'main' of https://git.stella-ops.org/stella-ops.org/git.stella-ops.org
Some checks failed
AOC Guard CI / aoc-guard (push) Has been cancelled
Details
AOC Guard CI / aoc-verify (push) Has been cancelled
Details
Docs CI / lint-and-preview (push) Has been cancelled
Details
Policy Lint & Smoke / policy-lint (push) Has been cancelled
Details
api-governance / spectral-lint (push) Has been cancelled
Details
oas-ci / oas-validate (push) Has been cancelled
Details
Policy Simulation / policy-simulate (push) Has been cancelled
Details
sdk-generator-smoke / sdk-smoke (push) Has been cancelled
Details
SDK Publish & Sign / sdk-publish (push) Has been cancelled
Details

Browse Source
This commit is contained in:
StellaOps Bot
2025-11-27 21:45:32 +02:00
parent 8abbf9574d 4c55b01222
commit ef6e4b2067
510 changed files with 138401 additions and 51276 deletions
Download Patch File Download Diff File Expand all files Collapse all files

172
src/Notifier/StellaOps.Notifier/docs/attestation-rules.sample.json
View File

@@ -1,86 +1,86 @@
{
"rules": [
{
"ruleId": "attest-key-rotation",
"name": "Attestation key rotation/revocation",
"enabled": true,
"tenantId": "<tenant-id>",
"match": {
"eventKinds": [
"authority.keys.rotated",
"authority.keys.revoked"
]
},
"actions": [
{
"actionId": "email-kms",
"enabled": true,
"channel": "email-kms",
"template": "tmpl-attest-key-rotation"
},
{
"actionId": "webhook-kms",
"enabled": true,
"channel": "webhook-kms",
"template": "tmpl-attest-key-rotation"
}
]
},
{
"ruleId": "attest-transparency-anomaly",
"name": "Transparency witness anomaly",
"enabled": true,
"tenantId": "<tenant-id>",
"match": {
"eventKinds": [
"attestor.transparency.anomaly",
"attestor.transparency.witness.failed"
]
},
"actions": [
{
"actionId": "slack-soc",
"enabled": true,
"channel": "slack-soc",
"template": "tmpl-attest-transparency-anomaly"
},
{
"actionId": "webhook-siem",
"enabled": true,
"channel": "webhook-siem",
"template": "tmpl-attest-transparency-anomaly"
}
]
}
],
"channels": [
{
"channelId": "email-kms",
"type": "email",
"name": "KMS security",
"target": "kms-security@example.com",
"secretRef": "ref://notify/channels/email/kms-security"
},
{
"channelId": "webhook-kms",
"type": "webhook",
"name": "KMS webhook",
"endpoint": "https://hooks.internal/kms",
"secretRef": "ref://notify/channels/webhook/kms"
},
{
"channelId": "slack-soc",
"type": "slack",
"name": "SOC high-priority",
"endpoint": "https://hooks.slack.com/services/T000/B000/XYZ",
"secretRef": "ref://notify/channels/slack/soc"
},
{
"channelId": "webhook-siem",
"type": "webhook",
"name": "SIEM ingest",
"endpoint": "https://siem.example.internal/hooks/notifier",
"secretRef": "ref://notify/channels/webhook/siem"
}
]
}
{
"rules": [
{
"ruleId": "attest-key-rotation",
"name": "Attestation key rotation/revocation",
"enabled": true,
"tenantId": "<tenant-id>",
"match": {
"eventKinds": [
"authority.keys.rotated",
"authority.keys.revoked"
]
},
"actions": [
{
"actionId": "email-kms",
"enabled": true,
"channel": "email-kms",
"template": "tmpl-attest-key-rotation"
},
{
"actionId": "webhook-kms",
"enabled": true,
"channel": "webhook-kms",
"template": "tmpl-attest-key-rotation"
}
]
},
{
"ruleId": "attest-transparency-anomaly",
"name": "Transparency witness anomaly",
"enabled": true,
"tenantId": "<tenant-id>",
"match": {
"eventKinds": [
"attestor.transparency.anomaly",
"attestor.transparency.witness.failed"
]
},
"actions": [
{
"actionId": "slack-soc",
"enabled": true,
"channel": "slack-soc",
"template": "tmpl-attest-transparency-anomaly"
},
{
"actionId": "webhook-siem",
"enabled": true,
"channel": "webhook-siem",
"template": "tmpl-attest-transparency-anomaly"
}
]
}
],
"channels": [
{
"channelId": "email-kms",
"type": "email",
"name": "KMS security",
"target": "kms-security@example.com",
"secretRef": "ref://notify/channels/email/kms-security"
},
{
"channelId": "webhook-kms",
"type": "webhook",
"name": "KMS webhook",
"endpoint": "https://hooks.internal/kms",
"secretRef": "ref://notify/channels/webhook/kms"
},
{
"channelId": "slack-soc",
"type": "slack",
"name": "SOC high-priority",
"endpoint": "https://hooks.slack.com/services/T000/B000/XYZ",
"secretRef": "ref://notify/channels/slack/soc"
},
{
"channelId": "webhook-siem",
"type": "webhook",
"name": "SIEM ingest",
"endpoint": "https://siem.example.internal/hooks/notifier",
"secretRef": "ref://notify/channels/webhook/siem"
}
]
}