Files
git.stella-ops.org/docs/advisories/explorer-integration.md
StellaOps Bot 18d87c64c5 feat: add PolicyPackSelectorComponent with tests and integration
- Implemented PolicyPackSelectorComponent for selecting policy packs.
- Added unit tests for component behavior, including API success and error handling.
- Introduced monaco-workers type declarations for editor workers.
- Created acceptance tests for guardrails with stubs for AT1–AT10.
- Established SCA Failure Catalogue Fixtures for regression testing.
- Developed plugin determinism harness with stubs for PL1–PL10.
- Added scripts for evidence upload and verification processes.
2025-12-05 21:24:34 +02:00

675 B

Advisories Integration with Vuln Explorer (Md.XI draft)

Status: DRAFT — waiting on export bundle spec + provenance notes; keep TODO.

Scope

  • Describe advisory normalization, withdrawn handling, provenance, and export bundle linkage for Vuln Explorer.
  • Deterministic examples with hashes in docs/assets/vuln-explorer/SHA256SUMS.

Dependencies

  • Export bundle spec/provenance notes (in progress).
  • GRAP0101 identifiers.

Outline

  • Advisory ingestion flow and key normalization.
  • Withdrawn/updated advisory handling.
  • Provenance: DSSE/Rekor optional; bundle manifests.
  • Cross-links to findings ledger and VEX decisions.

Last updated: 2025-12-05 (UTC)