36 lines
1.8 KiB
Markdown
36 lines
1.8 KiB
Markdown
# Progressive Fidelity Scan Mode (Quick/Standard/Deep)
|
|
|
|
## Module
|
|
Scanner
|
|
|
|
## Status
|
|
VERIFIED
|
|
|
|
## Description
|
|
Allows users to select scan depth (Quick/Standard/Deep) with a FidelityAwareAnalyzer that adjusts analysis precision and an upgrade endpoint to promote results to higher fidelity. Distinct from "Tiered Scanner Precision" which describes imported/executed/tainted-sink PR-AUC tiers -- this is about user-selectable scan depth modes.
|
|
|
|
## Implementation Details
|
|
- **Fidelity-Aware Analyzer**:
|
|
- `src/Scanner/__Libraries/StellaOps.Scanner.Orchestration/Fidelity/FidelityAwareAnalyzer.cs` - `FidelityAwareAnalyzer` adjusts analysis precision based on the selected scan depth mode (Quick/Standard/Deep)
|
|
- **Fidelity Endpoints**:
|
|
- `src/Scanner/StellaOps.Scanner.WebService/Endpoints/FidelityEndpoints.cs` - `FidelityEndpoints` provides API for selecting scan depth and upgrading scan results to higher fidelity
|
|
|
|
## E2E Test Plan
|
|
- [ ] Trigger a Quick scan and verify it completes faster with reduced analysis depth (SBOM only, no reachability)
|
|
- [ ] Trigger a Standard scan and verify it includes SBOM generation plus basic vulnerability matching
|
|
- [ ] Trigger a Deep scan and verify it includes full reachability analysis, call graph extraction, and binary intelligence
|
|
- [ ] Use the upgrade endpoint to promote Quick scan results to Standard and verify additional analysis is performed
|
|
- [ ] Use the upgrade endpoint to promote Standard to Deep and verify full reachability analysis is appended
|
|
- [ ] Verify the selected scan depth is recorded in scan metadata for auditability
|
|
|
|
---
|
|
|
|
## Verification
|
|
|
|
| Check | Result |
|
|
|-------|--------|
|
|
| Tier 0 - Source files exist | PASS |
|
|
| Tier 1 - Build + code review | PASS |
|
|
| Tier 2 - Integration tests | PASS |
|
|
| Verified | 2026-02-13T18:10:00Z |
|