2e276d6676
- Added `MongoAdvisoryObservationEventPublisher` and `NatsAdvisoryObservationEventPublisher` for event publishing. - Registered `IAdvisoryObservationEventPublisher` to choose between NATS and MongoDB based on configuration. - Introduced `MongoAdvisoryObservationEventOutbox` for outbox pattern implementation. - Updated service collection to include new event publishers and outbox. - Added a new hosted service `AdvisoryObservationTransportWorker` for processing events. feat: Update project dependencies - Added `NATS.Client.Core` package to the project for NATS integration. test: Add unit tests for AdvisoryLinkset normalization - Created `AdvisoryLinksetNormalizationConfidenceTests` to validate confidence score calculations. fix: Adjust confidence assertion in `AdvisoryObservationAggregationTests` - Updated confidence assertion to allow a range instead of a fixed value. test: Implement tests for AdvisoryObservationEventFactory - Added `AdvisoryObservationEventFactoryTests` to ensure correct mapping and hashing of observation events. chore: Configure test project for Findings Ledger - Created `Directory.Build.props` for test project configuration. - Added `StellaOps.Findings.Ledger.Exports.Unit.csproj` for unit tests related to findings ledger exports. feat: Implement export contracts for findings ledger - Defined export request and response contracts in `ExportContracts.cs`. - Created various export item records for findings, VEX, advisories, and SBOMs. feat: Add export functionality to Findings Ledger Web Service - Implemented endpoints for exporting findings, VEX, advisories, and SBOMs. - Integrated `ExportQueryService` for handling export logic and pagination. test: Add tests for Node language analyzer phase 22 - Implemented `NodePhase22SampleLoaderTests` to validate loading of NDJSON fixtures. - Created sample NDJSON file for testing. chore: Set up isolated test environment for Node tests - Added `node-isolated.runsettings` for isolated test execution. - Created `node-tests-isolated.sh` script for running tests in isolation.
37 lines
1.1 KiB
JSON
37 lines
1.1 KiB
JSON
{
|
|
"_id": "sha256:1f4b6e7c9d5f4e8f4973c8c3dfe1d1d3b4f0ad8991e7d937c6c1d77a9e4b8a21",
|
|
"tenantId": "urn:tenant:123e4567-e89b-12d3-a456-426614174000",
|
|
"advisoryId": "CVE-2024-99999",
|
|
"source": "lnm-correlator",
|
|
"observations": [
|
|
"6560606df3c5d6ad3b5a1234",
|
|
"6560606df3c5d6ad3b5a5678"
|
|
],
|
|
"key": {
|
|
"vulnerabilityId": "CVE-2024-99999",
|
|
"productKey": "pkg:npm/lodash",
|
|
"confidence": 0.92
|
|
},
|
|
"normalized": {
|
|
"purls": ["pkg:npm/lodash"],
|
|
"versions": ["4.17.21"],
|
|
"ranges": [
|
|
{"type": "semver", "events": [{"introduced": "0"}, {"fixed": "4.17.22"}]}
|
|
],
|
|
"severities": [
|
|
{"system": "cvssv3", "score": 7.5, "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}
|
|
]
|
|
},
|
|
"conflicts": [],
|
|
"provenance": {
|
|
"observationHashes": [
|
|
"10f4fc0b5c1a1d4c266fafd2b4f45618f6a0a4b86087c3e67e4c1a2c8f38e990",
|
|
"10f4fc0b5c1a1d4c266fafd2b4f45618f6a0a4b86087c3e67e4c1a2c8f38e991"
|
|
],
|
|
"toolVersion": "lnm-21-002",
|
|
"policyHash": "linkset-correlation-21-002"
|
|
},
|
|
"createdAt": "2025-11-20T15:05:00Z",
|
|
"builtByJobId": "corr-tenant123-cve-2024-99999"
|
|
}
|