18d87c64c5
- Implemented PolicyPackSelectorComponent for selecting policy packs. - Added unit tests for component behavior, including API success and error handling. - Introduced monaco-workers type declarations for editor workers. - Created acceptance tests for guardrails with stubs for AT1–AT10. - Established SCA Failure Catalogue Fixtures for regression testing. - Developed plugin determinism harness with stubs for PL1–PL10. - Added scripts for evidence upload and verification processes.
20 lines
675 B
Markdown
20 lines
675 B
Markdown
# Advisories Integration with Vuln Explorer (Md.XI draft)
|
|
|
|
> Status: DRAFT — waiting on export bundle spec + provenance notes; keep TODO.
|
|
|
|
## Scope
|
|
- Describe advisory normalization, withdrawn handling, provenance, and export bundle linkage for Vuln Explorer.
|
|
- Deterministic examples with hashes in `docs/assets/vuln-explorer/SHA256SUMS`.
|
|
|
|
## Dependencies
|
|
- Export bundle spec/provenance notes (in progress).
|
|
- GRAP0101 identifiers.
|
|
|
|
## Outline
|
|
- Advisory ingestion flow and key normalization.
|
|
- Withdrawn/updated advisory handling.
|
|
- Provenance: DSSE/Rekor optional; bundle manifests.
|
|
- Cross-links to findings ledger and VEX decisions.
|
|
|
|
_Last updated: 2025-12-05 (UTC)_
|