65106afe4c
- FindingsLedger: change schema from public to findings (V3-01) - Add 9 migration module plugins: RiskEngine, Replay, ExportCenter, Integrations, Signer, IssuerDirectory, Workflow, PacksRegistry, OpsMemory (V4-01 to V4-09) - Remove 16 redundant inline CREATE SCHEMA patterns (V4-10) - Rename export→export-web, excititor→excititor-web for consistency - Compose stella-ops.yml: thin wrapper using include: directive - Fix dead /api/v1/jobengine/* gateway routes → release-orchestrator/packsregistry - Scheduler plugin architecture: ISchedulerJobPlugin + ScanJobPlugin + DoctorJobPlugin - Create unified audit sink sprint plan - VulnExplorer integration tests + gap analysis Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
BinaryIndex
Container(s): stellaops-binaryindex-web, stellaops-symbols Slot: 36 (binaryindex), 38 (symbols) | Port: 8080 | Consumer Group: binaryindex, symbols Resource Tier: light
Purpose
The BinaryIndex service provides binary vulnerability detection through build-ID and binary signature resolution, golden set management, delta signature tracking, and VEX bridge integration. It includes a caching layer (Valkey) for resolution results. The Symbols server provides symbol recovery and debug information lookup for binary analysis.
API Surface
binaryindex(via Router) — binary resolution (build-ID/signature lookup), golden set queries, delta signature management, VEX bridge queries, telemetrysymbols(via Router) — symbol file upload/download, debug info queries
Storage
PostgreSQL (via ConnectionStrings:Default); Valkey for resolution cache; in-memory golden set and vulnerability stores
Background Workers
None