b1e78fe412
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
- Added VulnTokenSigner for signing JWT tokens with specified algorithms and keys. - Introduced VulnTokenUtilities for resolving tenant and subject claims, and sanitizing context dictionaries. - Created VulnTokenVerificationUtilities for parsing tokens, verifying signatures, and deserializing payloads. - Developed VulnWorkflowAntiForgeryTokenIssuer for issuing anti-forgery tokens with configurable options. - Implemented VulnWorkflowAntiForgeryTokenVerifier for verifying anti-forgery tokens and validating payloads. - Added AuthorityVulnerabilityExplorerOptions to manage configuration for vulnerability explorer features. - Included tests for FilesystemPackRunDispatcher to ensure proper job handling under egress policy restrictions.
Development Guides & Tooling
Resources for contributors building features, plug-ins, connectors, and tests.
Engineering Standards & Quality
- ../18_CODING_STANDARDS.md – language guidelines, project layout, review expectations.
- ../19_TEST_SUITE_OVERVIEW.md – unit, integration, golden, and determinism test strategy.
- ../12_PERFORMANCE_WORKBOOK.md – benchmark targets and reference rigs.
- ../cli-vs-ui-parity.md – CLI vs Console feature parity tracking.
- ../scanner-core-contracts.md – DTO fixtures consumed by tests.
Plug-ins, Connectors & Extensions
- ../10_PLUGIN_SDK_GUIDE.md – plug-in lifecycle, manifests, packaging.
- ../10_CONCELIER_CLI_QUICKSTART.md – local Concelier + CLI workflow for advisory ingestion.
- Developer guides under ../dev/:
- Connector playbooks (
30_EXCITITOR_CONNECTOR_GUIDE.md,30_EXCITOR_CONNECTOR_GUIDE.md,concelier-connector-research-20251011.md,kisa_connector_notes.md). - Authority and DPoP guidance (
31_AUTHORITY_PLUGIN_DEVELOPER_GUIDE.md,authority-dpop-mtls-plan.md,authority-plugin-di-coordination.md,authority-rate-limit-tuning-outline.md,32_AUTH_CLIENT_GUIDE.md). - Analyzer and cache configuration (
SCANNER_CACHE_CONFIGURATION.md,java-analyzer-observation-plan.md,EXCITITOR_STATEMENT_BACKFILL.md). - Normalisation & merge references (
aoc-normalization-removal-notes.md,merge_semver_playbook.md,normalized-rule-recipes.md,normalized_versions_rollout.md). - Operational templates and fixtures (
templates/,fixtures.md). - Mongo/Cartographer details (
mongo_indices.md,cartographer-graph-handshake.md).
- Connector playbooks (
CLI, SDKs & Automation
- ../09_API_CLI_REFERENCE.md – authoritative CLI commands and flags (use for scripting).
- ../api/sdk-openapi-program.md – guidance for downstream SDK generation.
- ../policy/gateway.md & ../policy/dsl.md – foundations for automating policy programs.
Scaffolding & Examples
- ../examples/policies/README.md – sample policy bundles.
- ../examples/ui-tours.md and ../assets/ui/tours/README.md – console tour authoring guides.
- ../task-packs/ – reusable task templates for sprints.
- ../faq/policy-faq.md – policy author FAQ.
- ../faq/ – additional Q&A sets useful during development.