stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 2 Releases Wiki Activity
Files
66cb6c4b8af58a33efa1521b7953dda834431497
git.stella-ops.org/src/Scanner/StellaOps.Scanner.Sbomer.BuildXPlugin/TASKS.completed.md
master 15b4a1de6a feat: Document completed tasks for KMS, Cryptography, and Plugin Libraries 
- Added detailed task completion records for KMS interface implementation and CLI support for file-based keys.
- Documented security enhancements including Argon2id password hashing, audit event contracts, and rate limiting configurations.
- Included scoped service support and integration updates for the Plugin platform, ensuring proper DI handling and testing coverage.
2025-10-31 14:37:45 +02:00

1.5 KiB
Raw Blame History

Completed Tasks

ID Status Owner(s) Depends on Description Exit Criteria
SP9-BLDX-09-001 DONE BuildX Guild SCANNER-EMIT-10-601 (awareness) Scaffold buildx driver, manifest, local CAS handshake; ensure plugin loads from plugins/scanner/buildx/. Plugin manifest + loader tests; local CAS writes succeed; restart required to activate.
SP9-BLDX-09-002 DONE BuildX Guild SP9-BLDX-09-001 Emit OCI annotations + provenance metadata for Attestor handoff (image + SBOM). OCI descriptors include DSSE/provenance placeholders; Attestor mock accepts payload.
SP9-BLDX-09-003 DONE BuildX Guild SP9-BLDX-09-002 CI demo pipeline: build sample image, produce SBOM, verify backend report wiring. GitHub/CI job runs sample build within 5 s overhead; artifacts saved; documentation updated.
SP9-BLDX-09-004 DONE (2025-10-19) BuildX Guild SP9-BLDX-09-002 Stabilize descriptor nonce derivation so repeated builds emit deterministic placeholders. Repeated descriptor runs with fixed inputs yield identical JSON; regression tests cover nonce determinism.
SP9-BLDX-09-005 DONE (2025-10-19) BuildX Guild SP9-BLDX-09-004 Integrate determinism check in GitHub/Gitea workflows and capture sample artifacts. Determinism step runs in .gitea/workflows/build-test-deploy.yml and samples/ci/buildx-demo, producing matching descriptors + archived artifacts.