Files
git.stella-ops.org/docs/modules/scanner/design
StellaOps Bot b6b9ffc050
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
Add PHP Analyzer Plugin and Composer Lock Data Handling
- Implemented the PhpAnalyzerPlugin to analyze PHP projects.
- Created ComposerLockData class to represent data from composer.lock files.
- Developed ComposerLockReader to load and parse composer.lock files asynchronously.
- Introduced ComposerPackage class to encapsulate package details.
- Added PhpPackage class to represent PHP packages with metadata and evidence.
- Implemented PhpPackageCollector to gather packages from ComposerLockData.
- Created PhpLanguageAnalyzer to perform analysis and emit results.
- Added capability signals for known PHP frameworks and CMS.
- Developed unit tests for the PHP language analyzer and its components.
- Included sample composer.lock and expected output for testing.
- Updated project files for the new PHP analyzer library and tests.
2025-11-22 14:02:49 +02:00
..
2025-11-18 23:45:25 +02:00

Scanner Design Dossiers

This directory contains deep technical designs for current and upcoming analyzers and surface components.

Language analyzers

  • ruby-analyzer.md — lockfile, runtime graph, capability signals for Ruby.
  • deno-runtime-signals.md — runtime trace + policy signal contract for Deno analyzer.
  • deno-runtime-shim.md — loader/trace shim plan for runtime NDJSON capture in Deno analyzer.

Surface & platform contracts

  • surface-fs.md
  • surface-env.md
  • surface-validation.md
  • surface-secrets.md

OS ecosystem designs

  • macos-analyzer.md — Homebrew, pkgutil, .app bundle plan.
  • windows-analyzer.md — MSI, WinSxS, Chocolatey, registry collectors.

Demand & dashboards

  • ../../benchmarks/scanner/windows-macos-demand.md — demand tracker.
  • ../../benchmarks/scanner/windows-macos-interview-template.md — interview template.
  • ../../api/scanner/windows-coverage.md — coverage summary dashboard.
  • ../../api/scanner/windows-macos-summary.md — metric snapshot.

Utility & reference

  • ../operations/field-engagement.md — SE workflow guidance.
  • ../operations/analyzers.md — operational runbook.
  • ../operations/rustfs-migration.md — storage migration notes.

Maintenance tips

  • Keep demand tracker (../../benchmarks/scanner/windows-macos-demand.md) and API dashboards in sync when updating macOS/Windows designs.
  • Cross-reference policy readiness briefs for associated predicates and waiver models.

Policy readiness

  • ../policy/secret-leak-detection-readiness.md — secret leak pipeline decisions.
  • ../policy/windows-package-readiness.md — Windows analyzer policy decisions.