master
651b8e0fa3
- Added "StellaOps.Policy.Engine", "StellaOps.Cartographer", and "StellaOps.SbomService" projects to the StellaOps solution. - Created AGENTS.md to outline the Contract Testing Guild Charter, detailing mission, scope, and definition of done. - Established TASKS.md for the Contract Testing Task Board, outlining tasks for Sprint 62 and Sprint 63 related to mock servers and replay testing.
35 lines
3.7 KiB
Markdown
35 lines
3.7 KiB
Markdown
# Samples Task Board
|
|
|
|
| ID | Status | Owner(s) | Depends on | Description | Exit Criteria |
|
|
|----|--------|----------|------------|-------------|---------------|
|
|
| SAMPLES-10-001 | DONE | Samples Guild, Scanner Team | SCANNER-EMIT-10-605 | Curate sample images (nginx, alpine+busybox, distroless+go, .NET AOT, python venv, npm monorepo) with expected SBOM/BOM-Index sidecars. | Samples committed under `samples/`; golden SBOM/BOM-Index files present; documented usage. |
|
|
| SAMPLES-13-004 | DONE (2025-10-23) | Samples Guild, Policy Guild | POLICY-CORE-09-006, UI-POLICY-13-007 | Add policy preview/report fixtures showing confidence bands and unknown-age tags. | Confidence sample (`samples/policy/policy-preview-unknown.json`) reviewed, documented usage in UI dev guide, ajv validation hook updated. |
|
|
|
|
## Policy Engine v2
|
|
|
|
| ID | Status | Owner(s) | Depends on | Description | Exit Criteria |
|
|
|----|--------|----------|------------|-------------|---------------|
|
|
| SAMPLES-POLICY-20-001 | TODO | Samples Guild, Policy Guild | POLICY-ENGINE-20-002, DOCS-POLICY-20-011 | Create sample policies (`baseline.pol`, `serverless.pol`, `internal-only.pol`) with annotated SBOM/advisory fixtures. | Samples stored under `samples/policy/`; README documents usage; tests validate deterministic outputs. |
|
|
| SAMPLES-POLICY-20-002 | TODO | Samples Guild, UI Guild | UI-POLICY-20-002 | Produce simulation diff fixtures (before/after JSON) for UI/CLI tests. | Fixtures committed with schema validation; referenced by UI+CLI tests; docs cross-link. |
|
|
|
|
## Graph Explorer v1
|
|
|
|
| ID | Status | Owner(s) | Depends on | Description | Exit Criteria |
|
|
|----|--------|----------|------------|-------------|---------------|
|
|
| SAMPLES-GRAPH-21-001 | TODO | Samples Guild, Cartographer Guild | CARTO-GRAPH-21-003 | Produce small/medium SBOM graph fixtures (JSON, GraphML, layout tiles) for automated tests and docs. | Fixtures stored under `samples/graph/`; validated by Cartographer + UI tests; README documents usage. |
|
|
| SAMPLES-GRAPH-21-002 | TODO | Samples Guild, UI Guild | UI-GRAPH-21-005 | Capture golden Graph Explorer screenshots (baseline/diff) and path exports for visual regression + documentation. | Screenshots exported; stored with metadata; referenced in docs; tests consume assets. |
|
|
|
|
## Link-Not-Merge v1
|
|
|
|
| ID | Status | Owner(s) | Depends on | Description | Exit Criteria |
|
|
|----|--------|----------|------------|-------------|---------------|
|
|
| SAMPLES-LNM-22-001 | TODO | Samples Guild, Concelier Guild | CONCELIER-LNM-21-001..003 | Create advisory observation/linkset fixtures (NVD, GHSA, OSV disagreements) for API/CLI/UI tests with documented conflicts. | Fixtures deposited under `samples/advisories/`; metadata README added; tests reference fixtures. |
|
|
| SAMPLES-LNM-22-002 | TODO | Samples Guild, Excititor Guild | EXCITITOR-LNM-21-001..003 | Produce VEX observation/linkset fixtures demonstrating status conflicts and path relevance; include raw blobs. | Fixtures stored under `samples/vex/`; CLI/UI tests consume; docs linked. |
|
|
|
|
## Graph & Vuln Explorer v1 (extended)
|
|
|
|
| ID | Status | Owner(s) | Depends on | Description | Exit Criteria |
|
|
|----|--------|----------|------------|-------------|---------------|
|
|
| SAMPLES-GRAPH-24-003 | TODO | Samples Guild, SBOM Service Guild | SBOM-GRAPH-24-002 | Generate large-scale SBOM graph fixture (≈40k nodes) with policy overlay snapshot for performance/perf regression suites. | Fixture stored under `samples/graph/large/`; README updated; perf tests reference file. |
|
|
| SAMPLES-GRAPH-24-004 | TODO | Samples Guild, UI Guild | UI-GRAPH-24-005 | Create vulnerability explorer JSON/CSV fixtures capturing conflicting evidence and policy outputs for UI/CLI automated tests. | Fixtures available under `samples/vuln/`; schema documented; tests consume fixtures. |
|