- Added Program.cs to set up the web application with Serilog for logging, health check endpoints, and a placeholder admission endpoint. - Configured Kestrel server to use TLS 1.3 and handle client certificates appropriately. - Created StellaOps.Zastava.Webhook.csproj with necessary dependencies including Serilog and Polly. - Documented tasks in TASKS.md for the Zastava Webhook project, outlining current work and exit criteria for each task.
2.0 KiB
2.0 KiB
TASKS
| Task | Owner(s) | Depends on | Notes |
|---|---|---|---|
| Hydra fetch with after= cursor | BE-Conn-RH | Source.Common | DONE – windowed paging with overlap, ETag/Last-Modified persisted. |
| DTOs for Security Data + OVAL | BE-Conn-RH | Tests | DONE – CSAF payloads serialized into redhat.csaf.v2 DTOs. |
| NEVRA parser/comparer (complete) | BE-Conn-RH | Models | DONE – parser/comparer shipped with coverage; add edge cases as needed. |
| Mapper to canonical rpm/cpe affected | BE-Conn-RH | Models | DONE – maps fixed/known ranges, CPE provenance, status ranges. |
| Job scheduler registration aligns with Options pipeline | BE-Conn-RH | Core | DONE – registered fetch/parse/map via JobSchedulerBuilder, preserving option overrides and tightening cron/timeouts. |
| Watermark persistence + resume | BE-Conn-RH | Storage.Mongo | DONE – cursor updates via SourceStateRepository. |
| Precedence tests vs NVD | QA | Merge | DONE – Added AffectedPackagePrecedenceResolver + tests ensuring Red Hat CPEs override NVD ranges. |
| Golden mapping fixtures | QA | Fixtures | DONE – fixture validation test now snapshots RHSA-2025:0001/0002/0003 with env-driven regeneration. |
| Job scheduling defaults for source:redhat tasks | BE-Core | JobScheduler | DONE – Cron windows + per-job timeouts defined for fetch/parse/map. |
| Express unaffected/investigation statuses without overloading range fields | BE-Conn-RH | Models | DONE – Introduced AffectedPackageStatus collection and updated mapper/tests. |
| Reference dedupe & ordering in mapper | BE-Conn-RH | Models | DONE – mapper consolidates by URL, merges metadata, deterministic ordering validated in tests. |
| Hydra summary fetch through SourceFetchService | BE-Conn-RH | Source.Common | DONE – summary pages now fetched via SourceFetchService with cache + conditional headers. |
| Fixture validation sweep | QA | None | DOING (2025-10-19) – Prereqs confirmed none; continuing RHSA fixture regeneration and diff review alongside mapper provenance updates. |