Files
git.stella-ops.org/docs/implplan/SPRINT_137_scanner_gap_design.md
master 75c2bcafce
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
Add LDAP Distinguished Name Helper and Credential Audit Context
- Implemented LdapDistinguishedNameHelper for escaping RDN and filter values.
- Created AuthorityCredentialAuditContext and IAuthorityCredentialAuditContextAccessor for managing credential audit context.
- Developed StandardCredentialAuditLogger with tests for success, failure, and lockout events.
- Introduced AuthorityAuditSink for persisting audit records with structured logging.
- Added CryptoPro related classes for certificate resolution and signing operations.
2025-11-09 12:21:38 +02:00

1.7 KiB

Sprint 137 - Scanner & Surface

Phase focus: Scanner.VIII — Analyzer gap design & readiness.

  • Depends on: Sprint 136 · Scanner.VII (Surface env/fs/secrets) to ensure shared primitives exist.
  • Feeds: Sprint 138 (Ruby parity) and Sprint 139 (language-specific analyzers) by locking designs + policy hooks.
Task ID State Summary Owner / Source Depends On
SCANNER-ENG-0002 TODO Design the Node.js lockfile collector + CLI validator per docs/benchmarks/scanner/scanning-gaps-stella-misses-from-competitors.md, capturing Surface + policy requirements before implementation. Scanner Guild, CLI Guild (docs/modules/scanner)
SCANNER-ENG-0003 TODO Design Python lockfile + editable-install parity checks with policy predicates and CLI workflow coverage as outlined in the gap analysis. Python Analyzer Guild, CLI Guild (docs/modules/scanner)
SCANNER-ENG-0004 TODO Design Java lockfile ingestion/validation (Gradle/SBT collectors, CLI verb, policy hooks) to close comparison gaps. Java Analyzer Guild, CLI Guild (docs/modules/scanner)
SCANNER-ENG-0005 TODO Enhance Go stripped-binary fallback inference design, including inferred module metadata + policy integration, per the gap analysis. Go Analyzer Guild (docs/modules/scanner)
SCANNER-ENG-0006 TODO Expand Rust fingerprint coverage design (enriched fingerprint catalogue + policy controls) per the comparison matrix. Rust Analyzer Guild (docs/modules/scanner)
SCANNER-ENG-0007 TODO Design the deterministic secret leak detection pipeline covering rule packaging, Policy Engine integration, and CLI workflow. Scanner Guild, Policy Guild (docs/modules/scanner)