fdf95e0f46
- API_CLI_REFERENCE.md, INSTALL_GUIDE.md, quickstart.md, architecture/integrations.md, dev/DEV_ENVIRONMENT_SETUP.md, integrations/LOCAL_SERVICES.md: reflect real-service wiring. - docs/modules/**: module dossier updates across the modules touched by SPRINT_20260415_001..007 + SPRINT_20260416_003..017 + SPRINT_20260417_018..024 + SPRINT_20260418_025 + SPRINT_20260419_026. - docs/features/checked/web/**: update feature notes where UI changed. - docs/qa/feature-checks/runs/web/evidence-presentation-ux/: QA evidence artifacts. - docs/setup/**, docs/technical/**: align with setup wizard contracts. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
SbomService
Status: Implemented
Source: src/SbomService/
Owner: Scanner Guild
Purpose
SbomService provides SBOM storage, versioning, and lineage tracking. Maintains the canonical SBOM repository with support for SPDX 3.0.1 and CycloneDX 1.6 formats, including temporal queries and dependency graph analysis.
Components
Services:
StellaOps.SbomService- Main SBOM service with API and business logic
Libraries:
StellaOps.SbomService.Storage.Postgres- PostgreSQL storage adapter for SBOM persistenceStellaOps.SbomService.Storage.Postgres.Tests- Storage layer integration tests
Configuration
Configuration is embedded in the service module settings.
Key settings:
- PostgreSQL connection (schema:
sbom_service) - Authority integration
- SBOM format support (SPDX, CycloneDX)
- Versioning and lineage policies
- Retention settings
Dependencies
- PostgreSQL (schema:
sbom_service) - Authority (authentication)
- Scanner (SBOM generation source)
- Attestor (SBOM attestation integration)
- ExportCenter (SBOM export and distribution)
Related Documentation
- Architecture:
./architecture.md - Scanner:
../scanner/ - Attestor:
../attestor/ - Data Schemas:
../../11_DATA_SCHEMAS.md
Current Status
Implemented with PostgreSQL storage backend. Supports SBOM ingestion, versioning, and lineage tracking. Provides API for SBOM queries and temporal analysis.