d63af51f84
Some checks failed
api-governance / spectral-lint (push) Has been cancelled
Docs CI / lint-and-preview (push) Has been cancelled
oas-ci / oas-validate (push) Has been cancelled
SDK Publish & Sign / sdk-publish (push) Has been cancelled
Policy Lint & Smoke / policy-lint (push) Has been cancelled
Policy Simulation / policy-simulate (push) Has been cancelled
devportal-offline / build-offline (push) Has been cancelled
627 B
627 B
Release Notes snippet — Scanner Determinism
- Determinism score: {{overall_score}} (threshold {{overall_min}}); per-image summary:
- {{image_digest}} → score {{score}} ({{identical}}/{{runs}} identical)
- {{next_image_digest}} → score {{score}} ({{identical}}/{{runs}} identical)
- Inputs: policy {{policy_sha}}, feeds {{feeds_sha}}, scanner {{scanner_sha}}, platform {{platform}}.
- Evidence: attached
determinism.json+ artefact hashes (DSSE-signed, offline-ready). - Actions: rerun harness with
stella detscore run --bundle determinism.jsonif score < threshold; block promotion until pass.