2e276d6676
- Added `MongoAdvisoryObservationEventPublisher` and `NatsAdvisoryObservationEventPublisher` for event publishing. - Registered `IAdvisoryObservationEventPublisher` to choose between NATS and MongoDB based on configuration. - Introduced `MongoAdvisoryObservationEventOutbox` for outbox pattern implementation. - Updated service collection to include new event publishers and outbox. - Added a new hosted service `AdvisoryObservationTransportWorker` for processing events. feat: Update project dependencies - Added `NATS.Client.Core` package to the project for NATS integration. test: Add unit tests for AdvisoryLinkset normalization - Created `AdvisoryLinksetNormalizationConfidenceTests` to validate confidence score calculations. fix: Adjust confidence assertion in `AdvisoryObservationAggregationTests` - Updated confidence assertion to allow a range instead of a fixed value. test: Implement tests for AdvisoryObservationEventFactory - Added `AdvisoryObservationEventFactoryTests` to ensure correct mapping and hashing of observation events. chore: Configure test project for Findings Ledger - Created `Directory.Build.props` for test project configuration. - Added `StellaOps.Findings.Ledger.Exports.Unit.csproj` for unit tests related to findings ledger exports. feat: Implement export contracts for findings ledger - Defined export request and response contracts in `ExportContracts.cs`. - Created various export item records for findings, VEX, advisories, and SBOMs. feat: Add export functionality to Findings Ledger Web Service - Implemented endpoints for exporting findings, VEX, advisories, and SBOMs. - Integrated `ExportQueryService` for handling export logic and pagination. test: Add tests for Node language analyzer phase 22 - Implemented `NodePhase22SampleLoaderTests` to validate loading of NDJSON fixtures. - Created sample NDJSON file for testing. chore: Set up isolated test environment for Node tests - Added `node-isolated.runsettings` for isolated test execution. - Created `node-tests-isolated.sh` script for running tests in isolation.
28 lines
1.0 KiB
JSON
28 lines
1.0 KiB
JSON
{
|
|
"eventId": "8c5e9d4e-54c0-4fb3-9e0c-7c4cdbf74c6a",
|
|
"tenantId": "urn:tenant:123e4567-e89b-12d3-a456-426614174000",
|
|
"observationId": "6560606df3c5d6ad3b5a1234",
|
|
"advisoryId": "CVE-2024-99999",
|
|
"source": {
|
|
"vendor": "ghsa",
|
|
"stream": "advisories",
|
|
"api": "https://api.github.com/advisories",
|
|
"collectorVersion": "1.12.0"
|
|
},
|
|
"linksetSummary": {
|
|
"aliases": ["GHSA-xxxx-yyyy-zzzz", "CVE-2024-99999"],
|
|
"purls": ["pkg:npm/lodash@4.17.21"],
|
|
"cpes": ["cpe:/a:lodash:lodash:4.17.21"],
|
|
"scopes": ["runtime"],
|
|
"relationships": [
|
|
{"type": "contains", "source": "pkg:npm/lodash@4.17.21", "target": "file://dist/lodash.js", "provenance": "ghsa"}
|
|
]
|
|
},
|
|
"supersedesId": "65605fdaf3c5d6ad3b5a0fff",
|
|
"documentSha": "2f8f568cc1ed3474f0a4564ddb8c64f4b4d176fbe0a2a98a02b88e822a4f5b6d",
|
|
"observationHash": "10f4fc0b5c1a1d4c266fafd2b4f45618f6a0a4b86087c3e67e4c1a2c8f38e990",
|
|
"ingestedAt": "2025-11-20T14:35:12Z",
|
|
"traceId": "trace-4f29d7f6f1f147da",
|
|
"replayCursor": "cs-0000000172-0001"
|
|
}
|