b1e78fe412
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
- Added VulnTokenSigner for signing JWT tokens with specified algorithms and keys. - Introduced VulnTokenUtilities for resolving tenant and subject claims, and sanitizing context dictionaries. - Created VulnTokenVerificationUtilities for parsing tokens, verifying signatures, and deserializing payloads. - Developed VulnWorkflowAntiForgeryTokenIssuer for issuing anti-forgery tokens with configurable options. - Implemented VulnWorkflowAntiForgeryTokenVerifier for verifying anti-forgery tokens and validating payloads. - Added AuthorityVulnerabilityExplorerOptions to manage configuration for vulnerability explorer features. - Included tests for FilesystemPackRunDispatcher to ensure proper job handling under egress policy restrictions.
27 lines
1.6 KiB
Markdown
27 lines
1.6 KiB
Markdown
# Scanner Benchmarks & Coverage Dossiers
|
|
|
|
This directory aggregates competitive analyses, deep dives, and demand signals that inform the Scanner roadmap.
|
|
|
|
## Structure
|
|
- `../../scanner-feature-comparison-*.md` — high-level feature comparisons versus Trivy, Grype, Snyk.
|
|
- `deep-dives/` — ecosystem-specific implementation deep dives (languages, OS packages, secrets, macOS, Windows, etc.).
|
|
- `scanning-gaps-stella-misses-from-competitors.md` — gap analysis with scorecards, implementation plans, and backlog references.
|
|
- `windows-macos-demand.md` — demand tracker and next actions for Windows/macOS coverage.
|
|
- `windows-macos-interview-template.md` — structured questionnaire for customer discovery.
|
|
|
|
## Quick links
|
|
- macOS: `deep-dives/macos.md`, `../../modules/scanner/design/macos-analyzer.md`.
|
|
- Windows: `deep-dives/windows.md`, `../../modules/scanner/design/windows-analyzer.md`.
|
|
- Policy readiness: `../../modules/policy/secret-leak-detection-readiness.md`, `../../modules/policy/windows-package-readiness.md`.
|
|
- API dashboards: `../../api/scanner/windows-coverage.md`, `../../api/scanner/windows-macos-summary.md`.
|
|
|
|
## Maintenance tips
|
|
- When new interview signals are logged, update `windows-macos-demand.md`, the API dashboards, and cross-link relevant design docs.
|
|
- Ensure gap scorecards reflect the latest findings and backlog IDs.
|
|
- Keep feature comparison docs aligned with deep dive updates.
|
|
|
|
## Backlog references
|
|
- Engineering: see `../../modules/scanner/TASKS.md` (SCANNER-ENG-0020..0027).
|
|
- Docs: `../../docs/TASKS.md` (DOCS-SCANNER-BENCH-62-016).
|
|
- Policy: `../../modules/policy/TASKS.md` (POLICY-READINESS-0001/0002).
|