79b8e53441
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
- Introduced `SbomService` tasks documentation. - Updated `StellaOps.sln` to include new projects: `StellaOps.AirGap.Time` and `StellaOps.AirGap.Importer`. - Added unit tests for `BundleImportPlanner`, `DsseVerifier`, `ImportValidator`, and other components in the `StellaOps.AirGap.Importer.Tests` namespace. - Implemented `InMemoryBundleRepositories` for testing bundle catalog and item repositories. - Created `MerkleRootCalculator`, `RootRotationPolicy`, and `TufMetadataValidator` tests. - Developed `StalenessCalculator` and `TimeAnchorLoader` tests in the `StellaOps.AirGap.Time.Tests` namespace. - Added `fetch-sbomservice-deps.sh` script for offline dependency fetching.
21 lines
677 B
Markdown
21 lines
677 B
Markdown
# SBOM Service Prep — PREP-SBOM-SERVICE-21-001
|
|
|
|
Status: Draft (2025-11-20)
|
|
Owners: SBOM Service Guild · Cartographer Guild
|
|
Scope: Waiting on LNM v1 fixtures to freeze normalized SBOM projection read API.
|
|
|
|
## Needed inputs
|
|
- LNM v1 fixtures (due 2025-11-18 UTC) for schema alignment.
|
|
|
|
## Proposed API surface (draft)
|
|
- `GET /sboms/{id}/projection` with query `page`, `page_size`, `tenant_id`.
|
|
- Response includes `components[]`, `licenses[]`, `hashes[]`, `provenance`.
|
|
- Deterministic ordering, tenant enforcement.
|
|
|
|
## Open decisions
|
|
- Pagination defaults and max page size.
|
|
- Which hash algorithms to expose.
|
|
|
|
## Handoff
|
|
Use as PREP artefact; finalize once fixtures arrive.
|