master 2170a58734 Add comprehensive security tests for OWASP A02, A05, A07, and A08 categories ...

- Implemented tests for Cryptographic Failures (A02) to ensure proper handling of sensitive data, secure algorithms, and key management.
- Added tests for Security Misconfiguration (A05) to validate production configurations, security headers, CORS settings, and feature management.
- Developed tests for Authentication Failures (A07) to enforce strong password policies, rate limiting, session management, and MFA support.
- Created tests for Software and Data Integrity Failures (A08) to verify artifact signatures, SBOM integrity, attestation chains, and feed updates.

2025-12-16 16:40:44 +02:00

..

acceptance-pack.schema.json

feat: add PolicyPackSelectorComponent with tests and integration

2025-12-05 21:24:34 +02:00

advisory-key.schema.json

feat: Add Go module and workspace test fixtures

2025-12-06 20:04:03 +02:00

api-baseline.schema.json

Add signal contracts for reachability, exploitability, trust, and unknown symbols

2025-12-05 00:27:00 +02:00

artifacts.md

up

2025-11-25 22:09:44 +02:00

attestation-pointer.schema.json

Add unit tests for PackRunAttestation and SealedInstallEnforcer

2025-12-06 22:25:30 +02:00

attestation-vuln-scan.schema.json

up

2025-11-29 01:35:49 +02:00

attestor-transport.schema.json

Add signal contracts for reachability, exploitability, trust, and unknown symbols

2025-12-05 00:27:00 +02:00

audit-bundle-index.schema.json

up

2025-12-15 09:23:28 +02:00

authority-effective-write.schema.json

feat: Add Go module and workspace test fixtures

2025-12-06 20:04:03 +02:00

authority-production-signing.schema.json

feat(api): Implement Console Export Client and Models

2025-12-07 00:27:33 +02:00

console-observability.schema.json

Add unit tests for PackRunAttestation and SealedInstallEnforcer

2025-12-06 22:25:30 +02:00

deployment-service-list.schema.json

Add unit tests for PackRunAttestation and SealedInstallEnforcer

2025-12-06 22:25:30 +02:00

devportal-api.schema.json

Add unit tests for PackRunAttestation and SealedInstallEnforcer

2025-12-06 22:25:30 +02:00

dotnet-il-metadata.schema.json

feat(api): Implement Console Export Client and Models

2025-12-07 00:27:33 +02:00

evidence-locker-dsse.schema.json

Add unit tests for PackRunAttestation and SealedInstallEnforcer

2025-12-06 22:25:30 +02:00

evidence-pointer.schema.json

Refactor code structure for improved readability and maintainability

2025-12-06 21:48:12 +02:00

evidence-predicate.schema.json

Add comprehensive security tests for OWASP A02, A05, A07, and A08 categories

2025-12-16 16:40:44 +02:00

exception-lifecycle.schema.json

Add unit tests for PackRunAttestation and SealedInstallEnforcer

2025-12-06 22:25:30 +02:00

excititor-chunk-api.openapi.yaml

Add unit tests for PackRunAttestation and SealedInstallEnforcer

2025-12-06 22:25:30 +02:00

export-bundle-shapes.schema.json

Implement incident mode management service and models

2025-12-06 22:33:00 +02:00

export-profiles.schema.json

feat(api): Add Policy Registry API specification

2025-12-06 20:52:23 +02:00

findings-ledger-api.openapi.yaml

Add unit tests for PhpFrameworkSurface and PhpPharScanner

2025-12-07 13:44:13 +02:00

graph-demo-outputs.schema.json

Implement incident mode management service and models

2025-12-06 22:33:00 +02:00

graph-platform-api.openapi.yaml

feat(api): Implement Console Export Client and Models

2025-12-07 00:27:33 +02:00

graph-platform.schema.json

Add signal contracts for reachability, exploitability, trust, and unknown symbols

2025-12-05 00:27:00 +02:00

java-entrypoint-resolver.schema.json

feat(api): Implement Console Export Client and Models

2025-12-07 00:27:33 +02:00

ledger-airgap-staleness.schema.json

Add signal contracts for reachability, exploitability, trust, and unknown symbols

2025-12-05 00:27:00 +02:00

ledger-time-travel-api.openapi.yaml

feat(api): Implement Console Export Client and Models

2025-12-07 00:27:33 +02:00

lnm-overlay.schema.json

Add unit tests for PackRunAttestation and SealedInstallEnforcer

2025-12-06 22:25:30 +02:00

mirror-bundle.schema.json

Add signal contracts for reachability, exploitability, trust, and unknown symbols

2025-12-05 00:27:00 +02:00

notify-rules.schema.json

feat(api): Add Policy Registry API specification

2025-12-06 20:52:23 +02:00

object-storage.schema.json

Add unit tests and logging infrastructure for InMemory and RabbitMQ transports

2025-12-05 09:38:45 +02:00

ops-incident-runbook.schema.json

Implement incident mode management service and models

2025-12-06 22:33:00 +02:00

orchestrator-envelope.schema.json

Add unit tests for PackRunAttestation and SealedInstallEnforcer

2025-12-06 22:25:30 +02:00

php-analyzer-bootstrap.schema.json

Add signal contracts for reachability, exploitability, trust, and unknown symbols

2025-12-05 00:27:00 +02:00

policy-diff-summary.schema.json

Restructure solution layout by module

2025-10-28 15:10:40 +02:00

policy-engine-rest.openapi.yaml

feat: Add native binary analyzer test utilities and implement SM2 signing tests

2025-12-07 13:12:41 +02:00

policy-explain-trace.schema.json

Restructure solution layout by module

2025-10-28 15:10:40 +02:00

policy-preview-sample@1.json

feat: Add RustFS artifact object store and migration tool

2025-10-23 18:53:18 +03:00

policy-registry-api.openapi.yaml

feat(api): Add Policy Registry API specification

2025-12-06 20:52:23 +02:00

policy-report-sample@1.json

feat: Add RustFS artifact object store and migration tool

2025-10-23 18:53:18 +03:00

policy-run-request.schema.json

Restructure solution layout by module

2025-10-28 15:10:40 +02:00

policy-run-status.schema.json

Restructure solution layout by module

2025-10-28 15:10:40 +02:00

policy-studio.schema.json

feat: Add Go module and workspace test fixtures

2025-12-06 20:04:03 +02:00

production-release-manifest.schema.json

feat(api): Implement Console Export Client and Models

2025-12-07 00:27:33 +02:00

proofspine-predicate.schema.json

Add comprehensive security tests for OWASP A02, A05, A07, and A08 categories

2025-12-16 16:40:44 +02:00

provenance-feed.schema.json

Add signal contracts for reachability, exploitability, trust, and unknown symbols

2025-12-05 00:27:00 +02:00

reachability-evidence-chain.schema.json

Add signal contracts for reachability, exploitability, trust, and unknown symbols

2025-12-05 00:27:00 +02:00

reachability-input.schema.json

feat(api): Add Policy Registry API specification

2025-12-06 20:52:23 +02:00

reasoning-predicate.schema.json

Add comprehensive security tests for OWASP A02, A05, A07, and A08 categories

2025-12-16 16:40:44 +02:00

replay-retention.schema.json

up the blokcing tasks

2025-12-11 02:32:18 +02:00

risk-api.schema.json

Implement incident mode management service and models

2025-12-06 22:33:00 +02:00

risk-scoring.schema.json

feat: Add Go module and workspace test fixtures

2025-12-06 20:04:03 +02:00

sbom-linkage-predicate.schema.json

Add comprehensive security tests for OWASP A02, A05, A07, and A08 categories

2025-12-16 16:40:44 +02:00

scanner-entrytrace-baseline.schema.json

feat(api): Implement Console Export Client and Models

2025-12-07 00:27:33 +02:00

scanner-surface.schema.json

Add signal contracts for reachability, exploitability, trust, and unknown symbols

2025-12-05 00:27:00 +02:00

sdk-generator-samples.schema.json

Implement incident mode management service and models

2025-12-06 22:33:00 +02:00

sealed-mode.schema.json

feat: Add Go module and workspace test fixtures

2025-12-06 20:04:03 +02:00

security-scopes-matrix.schema.json

Implement incident mode management service and models

2025-12-06 22:33:00 +02:00

signals-integration.schema.json

Refactor code structure for improved readability and maintainability

2025-12-06 21:48:12 +02:00

taskpack-control-flow.schema.json

feat: Add Go module and workspace test fixtures

2025-12-06 20:04:03 +02:00

time-anchor.schema.json

feat: Add Go module and workspace test fixtures

2025-12-06 20:04:03 +02:00

timeline-event.schema.json

Add signal contracts for reachability, exploitability, trust, and unknown symbols

2025-12-05 00:27:00 +02:00

tte-event.schema.json

up

2025-12-13 02:22:15 +02:00

ttfs-event.schema.json

up

2025-12-14 23:20:14 +02:00

verdict-receipt-predicate.schema.json

Add comprehensive security tests for OWASP A02, A05, A07, and A08 categories

2025-12-16 16:40:44 +02:00

verification-policy.schema.json

feat: Add Go module and workspace test fixtures

2025-12-06 20:04:03 +02:00

vex-decision.schema.json

up

2025-12-15 09:23:28 +02:00

vex-normalization.schema.json

Add signal contracts for reachability, exploitability, trust, and unknown symbols

2025-12-05 00:27:00 +02:00

vex-verdict-predicate.schema.json

Add comprehensive security tests for OWASP A02, A05, A07, and A08 categories

2025-12-16 16:40:44 +02:00

vuln-explorer.schema.json

feat: Add Go module and workspace test fixtures

2025-12-06 20:04:03 +02:00