stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 16 Releases Wiki Activity
Files
main
git.stella-ops.org/docs/vuln/explorer-cli.md
StellaOps Bot 18d87c64c5 feat: add PolicyPackSelectorComponent with tests and integration 
- Implemented PolicyPackSelectorComponent for selecting policy packs.
- Added unit tests for component behavior, including API success and error handling.
- Introduced monaco-workers type declarations for editor workers.
- Created acceptance tests for guardrails with stubs for AT1–AT10.
- Established SCA Failure Catalogue Fixtures for regression testing.
- Developed plugin determinism harness with stubs for PL1–PL10.
- Added scripts for evidence upload and verification processes.
2025-12-05 21:24:34 +02:00

2.0 KiB
Raw Permalink Blame History

Vuln Explorer CLI (Md.XI draft)

Status: DRAFT — depends on explorer API/console assets and GRAP0101 schema. Do not publish until samples are hashed and prerequisites land.

Scope

  • Command reference for Explorer-related CLI verbs (list/view/actions/reports/exports/VEX decisions).
  • Examples must be deterministic and offline-friendly (fixed fixtures, no live endpoints).

Prerequisites

  • GRAP0101 contract for finalized field names and filters.
  • CLI sample payloads (requested with console assets; due 2025-12-09).
  • API schema from docs/vuln/explorer-api.md once finalized.

Commands (outline)

  • stella findings list — filters, pagination, sorting, --fields, --reachability, --vex-status.
  • stella findings view <id> — includes history, actions, explain bundle refs.
  • stella findings action <id> --assign/--comment/--status/--remediate/--ticket — DSSE signing optional.
  • stella findings report create — outputs manifest path and DSSE envelope.
  • stella findings export offline — deterministic bundle with hashes (aligns with Offline Kit).
  • stella vex decisions — create/update/list VEX decisions.

Determinism & Offline

  • Record all sample command outputs (stdout/stderr) with hashes in docs/assets/vuln-explorer/SHA256SUMS.
  • Use fixed fixture IDs, ordered output, and --format json where applicable.

Fixtures to Capture (once CLI samples arrive)

  • assets/vuln-explorer/cli-findings-list.json (list with filters)
  • assets/vuln-explorer/cli-findings-view.json (detail view)
  • assets/vuln-explorer/cli-action.json (assign/comment/status change)
  • assets/vuln-explorer/cli-report-create.json (report creation output)
  • assets/vuln-explorer/cli-export-offline.json (bundle manifest snippet)
  • assets/vuln-explorer/cli-vex-decision.json (decision create/list)

Open Items

  • Insert real examples and exit codes once assets arrive.
  • Confirm DSSE flag names and default signing key selection.
  • Add CI snippets for GitLab/GitHub once policy overlays provided.

Last updated: 2025-12-05 (UTC)