stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 2 Releases Wiki Activity
Files
5593212b414864ab213082c8945a267451b99901
git.stella-ops.org/docs/features/unchecked/concelier/vex-distribution-network.md

2.0 KiB
Raw Blame History

VEX Distribution Network (Moat Score 3-4)

Module

Concelier

Status

IMPLEMENTED

Description

32 advisory connectors covering national CERTs, distro security trackers, vendor advisories, ICS sources, and general vulnerability databases.

Implementation Details

  • Modules: src/Concelier/__Libraries/StellaOps.Concelier.Connector.*/, src/Concelier/__Connectors/
  • Key Connectors (32 total, each implementing IFeedConnector + IConnectorPlugin):
    • National CERTs: CertBundConnector (Germany), CertFrConnector (France), CertCcConnector (US), CertInConnector (India), CccsConnector (Canada), AcscConnector (Australia), KisaConnector (Korea), JvnConnector (Japan), RuBduConnector (Russia BDU), RuNkckiConnector (Russia NKCKI)
    • General Vulnerability DBs: NvdConnector, OsvConnector, GhsaConnector, CveConnector, KevConnector, EpssConnector
    • Distro Security Trackers: AlpineConnector, DebianConnector, RedHatConnector, SuseConnector, UbuntuConnector
    • Vendor Advisories: CiscoConnector, VmwareConnector, OracleConnector, MsrcConnector, AppleConnector, ChromiumConnector, AdobeConnector
    • ICS Sources: IcsCisaConnector, KasperskyConnector
    • Regional/Special: AstraConnector, StellaOpsMirrorConnector
  • Orchestration: ConnectorRegistrationService, ConnectorWorker (src/Concelier/__Libraries/StellaOps.Concelier.Core/Orchestration/)
  • Source: Feature matrix scan

E2E Test Plan

  • Verify all 32 connectors are discovered and registered by ConnectorRegistrationService at startup
  • Trigger ingestion for at least one connector from each category (national CERT, general DB, distro, vendor, ICS) and verify advisories are stored
  • Verify connector count: query the registration service and confirm 32 connectors are registered
  • Verify scheduled ingestion: confirm connectors run on their configured schedules without manual intervention
  • Verify air-gap support: configure a connector in offline mode and verify it falls back to local bundle