master
49cdebe2f1
compose and authority fixes. finish sprints.
2026-02-18 12:00:10 +02:00
master
45c0f1bb59
Stabilzie modules
2026-02-16 07:32:38 +02:00
master
ab794e167c
frontend styling fixes
2026-02-15 12:00:34 +02:00
master
5bca406787
save checkpoint: save features
2026-02-12 10:27:23 +02:00
master
4bdc298ec1
partly or unimplemented features - now implemented
2026-02-09 08:53:51 +02:00
master
5548cf83bf
part #2
2026-02-04 19:59:20 +02:00
master
557feefdc3
stabilizaiton work - projects rework for maintenanceability and ui livening
2026-02-03 23:40:04 +02:00
master
5d5e80b2e4
stabilize tests
2026-02-01 21:37:40 +02:00
master
55744f6a39
tests fixes and some product advisories tunes ups
2026-01-30 07:57:43 +02:00
master
6e687b523a
fix tests. new product advisories enhancements
2026-01-25 19:11:36 +02:00
master
c70e83719e
finish off sprint advisories and sprints
2026-01-24 00:12:43 +02:00
master
726d70dc7f
tests fixes and sprints work
2026-01-22 19:08:46 +02:00
master
c32fff8f86
license switch agpl -> busl1, sprints work, new product advisories
2026-01-20 15:32:20 +02:00
master
4903395618
sprints work.
2026-01-20 00:45:38 +02:00
master
4ca3ce8fb4
sprints completion. new product advisories prepared
2026-01-16 16:30:03 +02:00
master
88a85cdd92
old sprints work, new sprints for exposing functionality via cli, improve code_of_conduct and other agents instructions
2026-01-15 18:38:18 +02:00
master
9330c64349
sln build fix (again), tests fixes, audit work and doctors work
2026-01-12 22:15:51 +02:00
master
9873f80830
release orchestrator v1 draft and build fixes
2026-01-12 12:24:17 +02:00
StellaOps Bot
110591d6bf
Merge all changes
2026-01-08 08:54:27 +02:00
master
608a7f85c0
audit work, fixed StellaOps.sln warnings/errors, fixed tests, sprints work, new advisories
2026-01-07 18:50:11 +02:00
master
04ec098046
Merge branch 'main' of https://git.stella-ops.org/stella-ops.org/git.stella-ops.org
2026-01-07 10:25:34 +02:00
master
044cf0923c
docs consolidation
2026-01-07 10:23:21 +02:00
StellaOps Bot
ab364c6032
sprints and audit work
2026-01-07 09:43:12 +02:00
StellaOps Bot
05833e0af2
Merge branch 'main' of https://git.stella-ops.org/stella-ops.org/git.stella-ops.org
2026-01-06 21:03:06 +02:00
master
4789027317
docs consolidation and others
2026-01-06 19:07:48 +02:00
StellaOps Bot
37e11918e0
save progress
2026-01-06 09:42:20 +02:00
StellaOps Bot
ca578801fd
save progress
2026-01-03 00:49:19 +02:00
StellaOps Bot
3f197814c5
save progress
2026-01-02 21:06:27 +02:00
StellaOps Bot
82e55c206a
Tests fixes, audit progress, UI completions
2025-12-30 09:03:22 +02:00
StellaOps Bot
7a5210e2aa
Frontend gaps fill work. Testing fixes work. Auditing in progress.
2025-12-30 01:22:58 +02:00
StellaOps Bot
c2b9cd8d1f
Fix build and code structure improvements. New but essential UI functionality. CI improvements. Documentation improvements. AI module improvements.
2025-12-29 07:45:03 +02:00
StellaOps Bot
335ff7da16
Refactor NuGet package handling across multiple CI runners and documentation. Update paths to use .nuget/packages instead of local-nugets. Enhance README files for clarity on usage and environment setup. Add script to automate the addition of test projects to the solution.
2025-12-26 21:44:32 +02:00
StellaOps Bot
32f9581aa7
Merge branch 'main' of https://git.stella-ops.org/stella-ops.org/git.stella-ops.org
2025-12-26 21:43:56 +02:00
StellaOps Bot
b4fc66feb6
Refactor code structure and optimize performance across multiple modules
2025-12-26 21:38:12 +02:00
StellaOps Bot
f10d83c444
Refactor code structure and optimize performance across multiple modules
2025-12-26 20:03:41 +02:00
StellaOps Bot
fb17937958
consolidate the tests locations
2025-12-26 10:48:49 +02:00
StellaOps Bot
39359da171
consolidate the tests locations
2025-12-26 01:48:24 +02:00
StellaOps Bot
2a06f780cf
sprints work
2025-12-25 12:19:12 +02:00
StellaOps Bot
02772c7a27
5100* tests strengthtenen work
2025-12-24 12:38:34 +02:00
master
491e883653
Add tests for SBOM generation determinism across multiple formats
...
- Created `StellaOps.TestKit.Tests` project for unit tests related to determinism.
- Implemented `DeterminismManifestTests` to validate deterministic output for canonical bytes and strings, file read/write operations, and error handling for invalid schema versions.
- Added `SbomDeterminismTests` to ensure identical inputs produce consistent SBOMs across SPDX 3.0.1 and CycloneDX 1.6/1.7 formats, including parallel execution tests.
- Updated project references in `StellaOps.Integration.Determinism` to include the new determinism testing library.
2025-12-24 00:36:14 +02:00
master
b444284be5
docs: Archive Sprint 3500 (PoE), Sprint 7100 (Proof Moats), and additional sprints
...
Archive completed sprint documentation and deliverables:
## SPRINT_3500 - Proof of Exposure (PoE) Implementation (COMPLETE ✅ )
- Windows filesystem hash sanitization (colon → underscore)
- Namespace conflict resolution (Subgraph → PoESubgraph)
- Mock test improvements with It.IsAny<>()
- Direct orchestrator unit tests
- 8/8 PoE tests passing (100% success)
- Archived to: docs/implplan/archived/2025-12-23-sprint-3500-poe/
## SPRINT_7100.0001 - Proof-Driven Moats Core (COMPLETE ✅ )
- Four-tier backport detection system
- 9 production modules (4,044 LOC)
- Binary fingerprinting (TLSH + instruction hashing)
- VEX integration with proof-carrying verdicts
- 42+ unit tests passing (100% success)
- Archived to: docs/implplan/archived/2025-12-23-sprint-7100-proof-moats/
## SPRINT_7100.0002 - Proof Moats Storage Layer (COMPLETE ✅ )
- PostgreSQL repository implementations
- Database migrations (4 evidence tables + audit)
- Test data seed scripts (12 evidence records, 3 CVEs)
- Integration tests with Testcontainers
- <100ms proof generation performance
- Archived to: docs/implplan/archived/2025-12-23-sprint-7100-proof-moats/
## SPRINT_3000_0200 - Authority Admin & Branding (COMPLETE ✅ )
- Console admin RBAC UI components
- Branding editor with tenant isolation
- Authority backend endpoints
- Archived to: docs/implplan/archived/
## Additional Documentation
- CLI command reference and compliance guides
- Module architecture docs (26 modules documented)
- Data schemas and contracts
- Operations runbooks
- Security risk models
- Product roadmap
All archived sprints achieved 100% completion of planned deliverables.
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com >
2025-12-23 15:02:38 +02:00
master
fcb5ffe25d
feat(scanner): Complete PoE implementation with Windows compatibility fix
...
- Fix namespace conflicts (Subgraph → PoESubgraph)
- Add hash sanitization for Windows filesystem (colon → underscore)
- Update all test mocks to use It.IsAny<>()
- Add direct orchestrator unit tests
- All 8 PoE tests now passing (100% success rate)
- Complete SPRINT_3500_0001_0001 documentation
Fixes compilation errors and Windows filesystem compatibility issues.
Tests: 8/8 passing
Files: 8 modified, 1 new test, 1 completion report
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com >
2025-12-23 14:52:08 +02:00
StellaOps Bot
5146204f1b
feat: add security sink detection patterns for JavaScript/TypeScript
...
- Introduced `sink-detect.js` with various security sink detection patterns categorized by type (e.g., command injection, SQL injection, file operations).
- Implemented functions to build a lookup map for fast sink detection and to match sink calls against known patterns.
- Added `package-lock.json` for dependency management.
2025-12-22 23:21:21 +02:00
master
3a2100aa78
Add unit and integration tests for VexCandidateEmitter and SmartDiff repositories
...
- Implemented comprehensive unit tests for VexCandidateEmitter to validate candidate emission logic based on various scenarios including absent and present APIs, confidence thresholds, and rate limiting.
- Added integration tests for SmartDiff PostgreSQL repositories, covering snapshot storage and retrieval, candidate storage, and material risk change handling.
- Ensured tests validate correct behavior for storing, retrieving, and querying snapshots and candidates, including edge cases and expected outcomes.
2025-12-16 19:00:43 +02:00
master
b55d9fa68d
Add comprehensive security tests for OWASP A03 (Injection) and A10 (SSRF)
...
Docs CI / lint-and-preview (push) Has been cancelled
AOC Guard CI / aoc-guard (push) Has been cancelled
AOC Guard CI / aoc-verify (push) Has been cancelled
- Implemented InjectionTests.cs to cover various injection vulnerabilities including SQL, NoSQL, Command, LDAP, and XPath injections.
- Created SsrfTests.cs to test for Server-Side Request Forgery (SSRF) vulnerabilities, including internal URL access, cloud metadata access, and URL allowlist bypass attempts.
- Introduced MaliciousPayloads.cs to store a collection of malicious payloads for testing various security vulnerabilities.
- Added SecurityAssertions.cs for common security-specific assertion helpers.
- Established SecurityTestBase.cs as a base class for security tests, providing common infrastructure and mocking utilities.
- Configured the test project StellaOps.Security.Tests.csproj with necessary dependencies for testing.
2025-12-16 13:11:57 +02:00
master
5a480a3c2a
Add call graph fixtures for various languages and scenarios
...
AOC Guard CI / aoc-guard (push) Has been cancelled
AOC Guard CI / aoc-verify (push) Has been cancelled
Docs CI / lint-and-preview (push) Has been cancelled
Export Center CI / export-ci (push) Has been cancelled
Findings Ledger CI / build-test (push) Has been cancelled
Findings Ledger CI / migration-validation (push) Has been cancelled
Findings Ledger CI / generate-manifest (push) Has been cancelled
Lighthouse CI / Lighthouse Audit (push) Has been cancelled
Lighthouse CI / Axe Accessibility Audit (push) Has been cancelled
Policy Lint & Smoke / policy-lint (push) Has been cancelled
Reachability Corpus Validation / validate-corpus (push) Has been cancelled
Reachability Corpus Validation / validate-ground-truths (push) Has been cancelled
Scanner Analyzers / Discover Analyzers (push) Has been cancelled
Scanner Analyzers / Validate Test Fixtures (push) Has been cancelled
Signals CI & Image / signals-ci (push) Has been cancelled
Signals Reachability Scoring & Events / reachability-smoke (push) Has been cancelled
Reachability Corpus Validation / determinism-check (push) Has been cancelled
Scanner Analyzers / Build Analyzers (push) Has been cancelled
Scanner Analyzers / Test Language Analyzers (push) Has been cancelled
Scanner Analyzers / Verify Deterministic Output (push) Has been cancelled
Signals Reachability Scoring & Events / sign-and-upload (push) Has been cancelled
- Introduced `all-edge-reasons.json` to test edge resolution reasons in .NET.
- Added `all-visibility-levels.json` to validate method visibility levels in .NET.
- Created `dotnet-aspnetcore-minimal.json` for a minimal ASP.NET Core application.
- Included `go-gin-api.json` for a Go Gin API application structure.
- Added `java-spring-boot.json` for the Spring PetClinic application in Java.
- Introduced `legacy-no-schema.json` for legacy application structure without schema.
- Created `node-express-api.json` for an Express.js API application structure.
2025-12-16 10:44:24 +02:00
StellaOps Bot
b1f40945b7
up
Docs CI / lint-and-preview (push) Has been cancelled
oas-ci / oas-validate (push) Has been cancelled
Signals CI & Image / signals-ci (push) Has been cancelled
sm-remote-ci / build-and-test (push) Has been cancelled
AOC Guard CI / aoc-verify (push) Has been cancelled
Signals Reachability Scoring & Events / sign-and-upload (push) Has been cancelled
api-governance / spectral-lint (push) Has been cancelled
Signals Reachability Scoring & Events / reachability-smoke (push) Has been cancelled
AOC Guard CI / aoc-guard (push) Has been cancelled
devportal-offline / build-offline (push) Has been cancelled
Mirror Thin Bundle Sign & Verify / mirror-sign (push) Has been cancelled
2025-12-15 09:51:11 +02:00
StellaOps Bot
b058dbe031
up
2025-12-14 23:20:14 +02:00
StellaOps Bot
6e45066e37
up
Concelier Attestation Tests / attestation-tests (push) Has been cancelled
Policy Simulation / policy-simulate (push) Has been cancelled
AOC Guard CI / aoc-guard (push) Has been cancelled
AOC Guard CI / aoc-verify (push) Has been cancelled
Signals CI & Image / signals-ci (push) Has been cancelled
Signals Reachability Scoring & Events / reachability-smoke (push) Has been cancelled
Signals Reachability Scoring & Events / sign-and-upload (push) Has been cancelled
Docs CI / lint-and-preview (push) Has been cancelled
Policy Lint & Smoke / policy-lint (push) Has been cancelled
Scanner Analyzers / Discover Analyzers (push) Has been cancelled
Scanner Analyzers / Build Analyzers (push) Has been cancelled
Scanner Analyzers / Test Language Analyzers (push) Has been cancelled
Scanner Analyzers / Validate Test Fixtures (push) Has been cancelled
Scanner Analyzers / Verify Deterministic Output (push) Has been cancelled
2025-12-13 09:37:15 +02:00
StellaOps Bot
999e26a48e
up
2025-12-13 02:22:15 +02:00
