17d45a6d30
- Added `FilesystemPackRunProvenanceWriter` to write provenance manifests to the filesystem. - Introduced `MongoPackRunArtifactReader` to read artifacts from MongoDB. - Created `MongoPackRunProvenanceWriter` to store provenance manifests in MongoDB. - Developed unit tests for filesystem and MongoDB provenance writers. - Established `ITimelineEventStore` and `ITimelineIngestionService` interfaces for timeline event handling. - Implemented `TimelineIngestionService` to validate and persist timeline events with hashing. - Created PostgreSQL schema and migration scripts for timeline indexing. - Added dependency injection support for timeline indexer services. - Developed tests for timeline ingestion and schema validation.
37 lines
904 B
JSON
37 lines
904 B
JSON
{
|
|
"version": "1.0.0",
|
|
"cases": [
|
|
{
|
|
"case_id": "js-express-guarded:004",
|
|
"case_version": "1.0.0",
|
|
"notes": "Admin exec unreachable when ALLOW_EXEC!=true",
|
|
"sinks": [
|
|
{
|
|
"sink_id": "ExpressGuarded::exec",
|
|
"label": "unreachable",
|
|
"confidence": "high",
|
|
"dynamic_evidence": {
|
|
"covered_by_tests": [
|
|
"tests/test_unreachable.js"
|
|
],
|
|
"coverage_files": [
|
|
"outputs/coverage.json"
|
|
]
|
|
},
|
|
"static_evidence": {
|
|
"call_path": [
|
|
"POST /api/admin/exec",
|
|
"createServer.exec",
|
|
"guard: ALLOW_EXEC!=true"
|
|
]
|
|
},
|
|
"config_conditions": [
|
|
"ALLOW_EXEC == 'true'"
|
|
],
|
|
"notes": "Only reachable when ALLOW_EXEC=true"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|