stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 16 Releases Wiki Activity
Files
8355e2ff7575b8fa5a1bc137850b018701c51373
git.stella-ops.org/docs/modules/scanner/design/README.md
master 8355e2ff75
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
Details
feat: Add initial implementation of Vulnerability Resolver Jobs 
- Created project for StellaOps.Scanner.Analyzers.Native.Tests with necessary dependencies.
- Documented roles and guidelines in AGENTS.md for Scheduler module.
- Implemented IResolverJobService interface and InMemoryResolverJobService for handling resolver jobs.
- Added ResolverBacklogNotifier and ResolverBacklogService for monitoring job metrics.
- Developed API endpoints for managing resolver jobs and retrieving metrics.
- Defined models for resolver job requests and responses.
- Integrated dependency injection for resolver job services.
- Implemented ImpactIndexSnapshot for persisting impact index data.
- Introduced SignalsScoringOptions for configurable scoring weights in reachability scoring.
- Added unit tests for ReachabilityScoringService and RuntimeFactsIngestionService.
- Created dotnet-filter.sh script to handle command-line arguments for dotnet.
- Established nuget-prime project for managing package downloads.
2025-11-18 07:52:15 +02:00

1.5 KiB
Raw Blame History

Scanner Design Dossiers

This directory contains deep technical designs for current and upcoming analyzers and surface components.

Language analyzers

  • ruby-analyzer.md — lockfile, runtime graph, capability signals for Ruby.
  • deno-runtime-signals.md — runtime trace + policy signal contract for Deno analyzer.

Surface & platform contracts

  • surface-fs.md
  • surface-env.md
  • surface-validation.md
  • surface-secrets.md

OS ecosystem designs

  • macos-analyzer.md — Homebrew, pkgutil, .app bundle plan.
  • windows-analyzer.md — MSI, WinSxS, Chocolatey, registry collectors.

Demand & dashboards

  • ../../benchmarks/scanner/windows-macos-demand.md — demand tracker.
  • ../../benchmarks/scanner/windows-macos-interview-template.md — interview template.
  • ../../api/scanner/windows-coverage.md — coverage summary dashboard.
  • ../../api/scanner/windows-macos-summary.md — metric snapshot.

Utility & reference

  • ../operations/field-engagement.md — SE workflow guidance.
  • ../operations/analyzers.md — operational runbook.
  • ../operations/rustfs-migration.md — storage migration notes.

Maintenance tips

  • Keep demand tracker (../../benchmarks/scanner/windows-macos-demand.md) and API dashboards in sync when updating macOS/Windows designs.
  • Cross-reference policy readiness briefs for associated predicates and waiver models.

Policy readiness

  • ../policy/secret-leak-detection-readiness.md — secret leak pipeline decisions.
  • ../policy/windows-package-readiness.md — Windows analyzer policy decisions.