Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
- Implemented LdapDistinguishedNameHelper for escaping RDN and filter values. - Created AuthorityCredentialAuditContext and IAuthorityCredentialAuditContextAccessor for managing credential audit context. - Developed StandardCredentialAuditLogger with tests for success, failure, and lockout events. - Introduced AuthorityAuditSink for persisting audit records with structured logging. - Added CryptoPro related classes for certificate resolution and signing operations.
1.7 KiB
1.7 KiB
Sprint 137 - Scanner & Surface
Phase focus: Scanner.VIII — Analyzer gap design & readiness.
- Depends on: Sprint 136 · Scanner.VII (Surface env/fs/secrets) to ensure shared primitives exist.
- Feeds: Sprint 138 (Ruby parity) and Sprint 139 (language-specific analyzers) by locking designs + policy hooks.
| Task ID | State | Summary | Owner / Source | Depends On |
|---|---|---|---|---|
SCANNER-ENG-0002 |
TODO | Design the Node.js lockfile collector + CLI validator per docs/benchmarks/scanner/scanning-gaps-stella-misses-from-competitors.md, capturing Surface + policy requirements before implementation. |
Scanner Guild, CLI Guild (docs/modules/scanner) | — |
SCANNER-ENG-0003 |
TODO | Design Python lockfile + editable-install parity checks with policy predicates and CLI workflow coverage as outlined in the gap analysis. | Python Analyzer Guild, CLI Guild (docs/modules/scanner) | — |
SCANNER-ENG-0004 |
TODO | Design Java lockfile ingestion/validation (Gradle/SBT collectors, CLI verb, policy hooks) to close comparison gaps. | Java Analyzer Guild, CLI Guild (docs/modules/scanner) | — |
SCANNER-ENG-0005 |
TODO | Enhance Go stripped-binary fallback inference design, including inferred module metadata + policy integration, per the gap analysis. | Go Analyzer Guild (docs/modules/scanner) | — |
SCANNER-ENG-0006 |
TODO | Expand Rust fingerprint coverage design (enriched fingerprint catalogue + policy controls) per the comparison matrix. | Rust Analyzer Guild (docs/modules/scanner) | — |
SCANNER-ENG-0007 |
TODO | Design the deterministic secret leak detection pipeline covering rule packaging, Policy Engine integration, and CLI workflow. | Scanner Guild, Policy Guild (docs/modules/scanner) | — |