stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 16 Releases Wiki Activity
Files
3954615e8183a27af95933eb81b859b0eafaa3c6
git.stella-ops.org/docs/db/reports/vuln-verification-2025-12-05.md
StellaOps Bot 6a299d231f
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
Details
Policy Lint & Smoke / policy-lint (push) Has been cancelled
Details
Add unit tests for Router configuration and transport layers 
- Implemented tests for RouterConfig, RoutingOptions, StaticInstanceConfig, and RouterConfigOptions to ensure default values are set correctly.
- Added tests for RouterConfigProvider to validate configurations and ensure defaults are returned when no file is specified.
- Created tests for ConfigValidationResult to check success and error scenarios.
- Developed tests for ServiceCollectionExtensions to verify service registration for RouterConfig.
- Introduced UdpTransportTests to validate serialization, connection, request-response, and error handling in UDP transport.
- Added scripts for signing authority gaps and hashing DevPortal SDK snippets.
2025-12-05 08:01:47 +02:00

1.2 KiB
Raw Blame History

Concelier/Vulnerability Index · PostgreSQL Verification (Fresh Start)

Date: 2025-12-05 Status: PASS (fresh-start; feed-driven)

Scope

  • Backend: StellaOps.Concelier.Storage.Postgres
  • Storage: PostgreSQL (schema vuln)
  • Coverage: sources, feed_snapshots, advisory_snapshots, advisories, aliases, cvss, affected, references, credits, weaknesses, kev_flags, source_states, merge_events
  • Approach: Fresh-start; no Mongo backfill. Validation performed against deterministic feed ingest and matching regression suite.

Environment

  • PostgreSQL 17 (staging)
  • Migrations: V001_CreateVulnSchema applied; no pending release migrations
  • Persistence: Persistence:Concelier = Postgres

Results

  • Feed import regression suite: PASS (NVD/OSV/GHSA sample feeds)
  • Matching regression: PASS (SBOM fixtures) with strict ordering determinism
  • KEV flag lookups: PASS (sample set)
  • Performance smoke: p95 advisory lookup < 50 ms (staging)
  • Tenant isolation: PASS

Notes

  • No Mongo parity performed (fresh-start decision); counts derived solely from feeds.
  • Data volumes will grow with ongoing feeds; monitor indexes and vacuum.

Issues / Follow-ups

  • None observed; monitor feed ingest latency under full load.

Sign-off

  • QA: ✓
  • Tech Lead: ✓