- Implemented PolicyPackSelectorComponent for selecting policy packs. - Added unit tests for component behavior, including API success and error handling. - Introduced monaco-workers type declarations for editor workers. - Created acceptance tests for guardrails with stubs for AT1–AT10. - Established SCA Failure Catalogue Fixtures for regression testing. - Developed plugin determinism harness with stubs for PL1–PL10. - Added scripts for evidence upload and verification processes.
675 B
675 B
Advisories Integration with Vuln Explorer (Md.XI draft)
Status: DRAFT — waiting on export bundle spec + provenance notes; keep TODO.
Scope
- Describe advisory normalization, withdrawn handling, provenance, and export bundle linkage for Vuln Explorer.
- Deterministic examples with hashes in
docs/assets/vuln-explorer/SHA256SUMS.
Dependencies
- Export bundle spec/provenance notes (in progress).
- GRAP0101 identifiers.
Outline
- Advisory ingestion flow and key normalization.
- Withdrawn/updated advisory handling.
- Provenance: DSSE/Rekor optional; bundle manifests.
- Cross-links to findings ledger and VEX decisions.
Last updated: 2025-12-05 (UTC)