885ce86af4
- Introduced a comprehensive CI job structure for VEX Lens, including build, test, linting, and load testing. - Defined load test parameters and SLOs for VEX Lens API and Issuer Directory. - Created Grafana dashboards and alerting mechanisms for monitoring API performance and error rates. - Established offline posture guidelines for CI jobs and load testing. feat: Implement deterministic projection verification script - Added `verify_projection.sh` script for verifying the integrity of projection exports against expected hashes. - Ensured robust error handling for missing files and hash mismatches. feat: Develop Vuln Explorer CI and Ops Plan - Created CI jobs for Vuln Explorer, including build, test, and replay verification. - Implemented backup and disaster recovery strategies for MongoDB and Redis. - Established Merkle anchoring verification and automation for ledger projector. feat: Introduce EventEnvelopeHasher for hashing event envelopes - Implemented `EventEnvelopeHasher` to compute SHA256 hashes for event envelopes. feat: Add Risk Store and Dashboard components - Developed `RiskStore` for managing risk data and state. - Created `RiskDashboardComponent` for displaying risk profiles with filtering capabilities. - Implemented unit tests for `RiskStore` and `RiskDashboardComponent`. feat: Enhance Vulnerability Detail Component - Developed `VulnerabilityDetailComponent` for displaying detailed information about vulnerabilities. - Implemented error handling for missing vulnerability IDs and loading failures.
48 lines
2.0 KiB
Plaintext
48 lines
2.0 KiB
Plaintext
# Substitutions for docker-compose.dev.yaml
|
|
MONGO_INITDB_ROOT_USERNAME=stellaops
|
|
MONGO_INITDB_ROOT_PASSWORD=dev-password
|
|
MINIO_ROOT_USER=stellaops
|
|
MINIO_ROOT_PASSWORD=dev-minio-secret
|
|
MINIO_CONSOLE_PORT=9001
|
|
RUSTFS_HTTP_PORT=8080
|
|
AUTHORITY_ISSUER=https://authority.localtest.me
|
|
AUTHORITY_PORT=8440
|
|
SIGNER_POE_INTROSPECT_URL=https://licensing.svc.local/introspect
|
|
SIGNER_PORT=8441
|
|
ATTESTOR_PORT=8442
|
|
# Secrets for Issuer Directory are provided via issuer-directory.mongo.env (see etc/secrets/issuer-directory.mongo.secret.example).
|
|
ISSUER_DIRECTORY_PORT=8447
|
|
ISSUER_DIRECTORY_MONGO_CONNECTION_STRING=mongodb://${MONGO_INITDB_ROOT_USERNAME}:${MONGO_INITDB_ROOT_PASSWORD}@mongo:27017
|
|
ISSUER_DIRECTORY_SEED_CSAF=true
|
|
CONCELIER_PORT=8445
|
|
SCANNER_WEB_PORT=8444
|
|
UI_PORT=8443
|
|
NATS_CLIENT_PORT=4222
|
|
SCANNER_QUEUE_BROKER=nats://nats:4222
|
|
SCANNER_EVENTS_ENABLED=false
|
|
SCANNER_EVENTS_DRIVER=redis
|
|
# Leave SCANNER_EVENTS_DSN empty to inherit the Redis queue DSN when SCANNER_QUEUE_BROKER uses redis://.
|
|
SCANNER_EVENTS_DSN=
|
|
SCANNER_EVENTS_STREAM=stella.events
|
|
SCANNER_EVENTS_PUBLISH_TIMEOUT_SECONDS=5
|
|
SCANNER_EVENTS_MAX_STREAM_LENGTH=10000
|
|
# Surface.Env defaults keep worker/web service aligned with local RustFS and inline secrets.
|
|
SCANNER_SURFACE_FS_ENDPOINT=http://rustfs:8080/api/v1
|
|
SCANNER_SURFACE_CACHE_ROOT=/var/lib/stellaops/surface
|
|
SCANNER_SURFACE_SECRETS_PROVIDER=inline
|
|
SCANNER_SURFACE_SECRETS_ROOT=
|
|
# Zastava inherits Scanner defaults; override if Observer/Webhook diverge
|
|
ZASTAVA_SURFACE_FS_ENDPOINT=${SCANNER_SURFACE_FS_ENDPOINT}
|
|
ZASTAVA_SURFACE_CACHE_ROOT=${SCANNER_SURFACE_CACHE_ROOT}
|
|
ZASTAVA_SURFACE_SECRETS_PROVIDER=${SCANNER_SURFACE_SECRETS_PROVIDER}
|
|
ZASTAVA_SURFACE_SECRETS_ROOT=${SCANNER_SURFACE_SECRETS_ROOT}
|
|
SCHEDULER_QUEUE_KIND=Nats
|
|
SCHEDULER_QUEUE_NATS_URL=nats://nats:4222
|
|
SCHEDULER_STORAGE_DATABASE=stellaops_scheduler
|
|
SCHEDULER_SCANNER_BASEADDRESS=http://scanner-web:8444
|
|
ADVISORY_AI_WEB_PORT=8448
|
|
ADVISORY_AI_SBOM_BASEADDRESS=http://scanner-web:8444
|
|
ADVISORY_AI_INFERENCE_MODE=Local
|
|
ADVISORY_AI_REMOTE_BASEADDRESS=
|
|
ADVISORY_AI_REMOTE_APIKEY=
|