Files
git.stella-ops.org/docs/features/checked/cli/reachability-query-api-and-triage-flow.md
2026-02-14 09:11:48 +02:00

1.7 KiB

Reachability Query API and Triage Flow

Module

Cli

Status

VERIFIED

Description

CLI commands and policy engine services consume reachability facts to drive triage decisions (reachable/unreachable/unknown).

Implementation Details

  • Command Group: src/Cli/StellaOps.Cli/Commands/ReachabilityCommandGroup.cs -- reachability query commands
  • ReachGraph Commands: src/Cli/StellaOps.Cli/Commands/ReachGraph/ReachGraphCommandGroup.cs -- graph query operations
  • Commands:
    • stella reachability list --scan <id> -- list reachability results
    • stella reachability explain <cve> -- explain reachability determination
    • stella reachability query <cve> --digest <digest> -- query reachability for specific CVE/artifact pair

E2E Test Plan

  • Run stella reachability list --scan <id> and verify reachability results (reachable/unreachable/unknown)
  • Run stella reachability explain CVE-2024-1234 and verify explanation with call path evidence
  • Run stella reachability query CVE-2024-1234 --digest sha256:abc123 and verify specific query
  • Verify triage decisions based on reachability status
  • Verify --format json output

Verification

  • Verified: 2026-02-13T15:30:00Z
  • Tier 0 (Source): pass -- all referenced source files exist on disk
  • Tier 1 (Build): pass -- module builds cleanly, 412 tests pass in StellaOps.Cli.Commands.Tests
  • Tier 2d (Integration): pass -- targeted integration tests confirm behavioral correctness
  • Test Project: src/Cli/__Tests/StellaOps.Cli.Commands.Tests/StellaOps.Cli.Commands.Tests.csproj
  • Evidence: docs/qa/feature-checks/runs/cli/reachability-query-api-and-triage-flow/run-001/tier2-integration-check.json