Files
git.stella-ops.org/docs/sbom/vex-mapping.md
StellaOps Bot 347c88342c Add draft skeletons for various documentation topics
- Created draft documentation for enabling reachability, CLI authentication, EntryTrace heuristics, Go stripped binaries, Java and Python lockfiles, Rust fingerprint enrichment, SAST integration, Windows/macOS analyzer coverage, scanner engine surface, multi-tenancy operations, RLS and data isolation, ABAC overlays, VEX trust model, VEX ops runbook, VEX mapping, scopes and roles, tenancy overview, VEX signatures, contract testing, VEX consensus algorithm, VEX consensus API, VEX consensus console, VEX consensus overview, and VEX issuer directory.
- Each document includes a status placeholder, purpose, and open TODOs for future updates.
2025-12-05 21:23:21 +02:00

318 B

VEX Mapping (CPE → purl) — Draft Skeleton (2025-12-05 UTC)

Status: draft placeholder. Inputs pending: SBOM/VEX dataflow spec.

Mapping Strategy

  • How CPEs map to purls; edge cases (to fill).

Overrides

  • Local override workflow.

Open TODOs

  • Add concrete examples and tables when dataflow spec lands.