2.1 KiB
2.1 KiB
TASKS
| Task | Owner(s) | Depends on | Notes |
|---|---|---|---|
| Merge identity graph & alias store | BE-Merge | Models, Storage.Mongo | DONE – alias store/resolver, component builder, reconcile job, persistence + diagnostics endpoint landed. |
| OSV alias consolidation & per-ecosystem snapshots | BE-Conn-OSV, QA | Merge, Testing | DONE – alias graph handles GHSA/CVE records and deterministic snapshots exist across ecosystems. |
| Oracle PSIRT pipeline completion | BE-Conn-Oracle | Source.Common, Core | DONE – Oracle mapper now emits CVE aliases, vendor affected packages, patch references, and resume/backfill flow is covered by integration tests. |
| VMware connector observability & resume coverage | BE-Conn-VMware, QA | Source.Common, Storage.Mongo | DONE – VMware diagnostics emit fetch/parse/map metrics, fetch dedupe uses hash cache, and integration test covers snapshot plus resume path. |
| Model provenance & range backlog | BE-Merge | Models | DOING – VMware/Oracle/Chromium, NVD, Debian, SUSE, Ubuntu, and Adobe emit RangePrimitives (Debian EVR + SUSE NEVRA + Ubuntu EVR telemetry online; Adobe now reports adobe.track/platform/priority/availability telemetry with fixed-status provenance). Remaining connectors (Apple, etc.) still need structured primitives/EVR coverage. |
| Trivy DB exporter delta strategy | BE-Export | Exporters | TODO – finish ExportStateManager delta reset and design incremental layer reuse for unchanged trees. |
| Red Hat fixture validation sweep | QA | Source.Distro.RedHat | DOING – finalize RHSA fixture regeneration once connector regression fixes land. |
| JVN VULDEF schema update | BE-Conn-JVN, QA | Source.Jvn | DONE – schema patched (vendor/product attrs, impact entries, err codes), parser tightened, fixtures/tests refreshed. |
| Build/test sweeps | QA | All modules | DOING – targeted suites green (Models, VMware, Oracle, Chromium, JVN, Cert-In). Full solution run still fails due to StellaOps.Feedser.Storage.Mongo.Tests/AdvisoryStorePerformanceTests exceeding perf budget; rerun once budget or test adjusted. |
| OSV vs GHSA parity checks | QA, BE-Merge | Merge | TODO – design diff detection between OSV and GHSA feeds to surface inconsistencies. |