git.stella-ops.org/dsse-dev.signing.json at 8768c27f30d4849b4f983ee6121d710c5eba9992 - git.stella-ops.org - Gitea: Git with a cup of tea

stella-ops.org/git.stella-ops.org

Files

StellaOps Bot 8768c27f30

Docs CI / lint-and-preview (push) Has been cancelled

Details

Signals DSSE Sign & Evidence Locker / sign-signals-artifacts (push) Has been cancelled

Details

Signals DSSE Sign & Evidence Locker / verify-signatures (push) Has been cancelled

Details

Add signal contracts for reachability, exploitability, trust, and unknown symbols

- Introduced `ReachabilityState`, `RuntimeHit`, `ExploitabilitySignal`, `ReachabilitySignal`, `SignalEnvelope`, `SignalType`, `TrustSignal`, and `UnknownSymbolSignal` records to define various signal types and their properties.
- Implemented JSON serialization attributes for proper data interchange.
- Created project files for the new signal contracts library and corresponding test projects.
- Added deterministic test fixtures for micro-interaction testing.
- Included cryptographic keys for secure operations with cosign.

2025-12-05 00:27:00 +02:00

7 lines

285 B

JSON

Raw Blame History

 {
   "keyId": "notify-dev-hmac-001",
   "secret": "ZGV2ZWxvcG1lbnQtc2lnbmluZy1rZXktZm9yLXRlc3Rpbmctb25seQ==",
   "algorithm": "HMACSHA256",
   "note": "Development-only HMAC key for DSSE signing. DO NOT use in production. Secret is base64 of 'development-signing-key-for-testing-only'."
 }