- Introduced `sink-detect.js` with various security sink detection patterns categorized by type (e.g., command injection, SQL injection, file operations). - Implemented functions to build a lookup map for fast sink detection and to match sink calls against known patterns. - Added `package-lock.json` for dependency management.
44 lines
1.3 KiB
C#
44 lines
1.3 KiB
C#
using StellaOps.Cli.Services.Models;
|
|
|
|
namespace StellaOps.Cli.Services;
|
|
|
|
public interface IOciRegistryClient
|
|
{
|
|
Task<string> ResolveDigestAsync(OciImageReference reference, CancellationToken cancellationToken = default);
|
|
|
|
/// <summary>
|
|
/// Resolve a tag to its digest.
|
|
/// </summary>
|
|
Task<string> ResolveTagAsync(
|
|
string registry,
|
|
string repository,
|
|
string tag,
|
|
CancellationToken cancellationToken = default);
|
|
|
|
Task<OciReferrersResponse> ListReferrersAsync(
|
|
OciImageReference reference,
|
|
string digest,
|
|
CancellationToken cancellationToken = default);
|
|
|
|
/// <summary>
|
|
/// Get referrers for an image digest, optionally filtered by artifact type.
|
|
/// Sprint: SPRINT_4300_0001_0001_oci_verdict_attestation_push
|
|
/// </summary>
|
|
Task<IReadOnlyList<OciReferrerDescriptor>> GetReferrersAsync(
|
|
string registry,
|
|
string repository,
|
|
string digest,
|
|
string? artifactType = null,
|
|
CancellationToken cancellationToken = default);
|
|
|
|
Task<OciManifest> GetManifestAsync(
|
|
OciImageReference reference,
|
|
string digest,
|
|
CancellationToken cancellationToken = default);
|
|
|
|
Task<byte[]> GetBlobAsync(
|
|
OciImageReference reference,
|
|
string digest,
|
|
CancellationToken cancellationToken = default);
|
|
}
|