Files

StellaOps Bot 2d08f52715 feat(zastava): add evidence locker plan and schema examples

- Introduced README.md for Zastava Evidence Locker Plan detailing artifacts to sign and post-signing steps.
- Added example JSON schemas for observer events and webhook admissions.
- Updated implementor guidelines with checklist for CI linting, determinism, secrets management, and schema control.
- Created alert rules for Vuln Explorer to monitor API latency and projection errors.
- Developed analytics ingestion plan for Vuln Explorer, focusing on telemetry and PII guardrails.
- Implemented Grafana dashboard configuration for Vuln Explorer metrics visualization.
- Added expected projection SHA256 for vulnerability events.
- Created k6 load testing script for Vuln Explorer API.
- Added sample projection and replay event data for testing.
- Implemented ReplayInputsLock for deterministic replay inputs management.
- Developed tests for ReplayInputsLock to ensure stable hash computation.
- Created SurfaceManifestDeterminismVerifier to validate manifest determinism and integrity.
- Added unit tests for SurfaceManifestDeterminismVerifier to ensure correct functionality.
- Implemented Angular tests for VulnerabilityHttpClient and VulnerabilityDetailComponent to verify API interactions and UI rendering.

2025-12-02 09:27:31 +02:00

openapi

work

2025-11-25 08:01:23 +02:00

runbooks

feat(zastava): add evidence locker plan and schema examples

2025-12-02 09:27:31 +02:00

AGENTS.md

Update AGENTS.md files across multiple modules to standardize task status update instructions and introduce a new document for Secret Leak Detection operations.

2025-11-05 11:58:32 +02:00

api.md

work

2025-11-25 08:01:23 +02:00

architecture.md

feat: Implement Filesystem and MongoDB provenance writers for PackRun execution context

2025-11-30 15:38:14 +02:00

implementation_plan.md

feat: Implement Filesystem and MongoDB provenance writers for PackRun execution context

2025-11-30 15:38:14 +02:00

README.md

feat: Implement Filesystem and MongoDB provenance writers for PackRun execution context

2025-11-30 15:38:14 +02:00

TASKS.md

feat: Implement Filesystem and MongoDB provenance writers for PackRun execution context

2025-11-30 15:38:14 +02:00

README.md

StellaOps Vulnerability Explorer

Vulnerability Explorer delivers policy-aware triage, investigation, and reporting surfaces for effective findings.

Latest updates (2025-11-30)

Documentation refresh aligned to sprint 0334: added observability/runbook snapshot and cross-links to OpenAPI draft (./api.md) and schemas in architecture.md.
New offline-friendly observability runbook at runbooks/observability.md plus stub Grafana JSON in runbooks/dashboards/.
Retained 2025-11-03 access-control changes; verify Authority scopes before enabling attachment uploads (docs/updates/2025-11-03-vuln-explorer-access-controls.md).

Responsibilities

Present policy-evaluated findings with advisory, VEX, SBOM, and runtime context.
Capture triage workflow in an immutable findings ledger with role-based access.
Provide pivots, exports, and reports for auditors and operations teams.
Integrate explain traces, remediation notes, and offline bundles.

Key components

Findings Ledger service + API.
Console module and CLI verbs for triage workflows.
Export integrations for reports and evidence packages.

Integrations & dependencies

Policy Engine for effective findings streams.
Concelier/Excititor for evidence provenance.
Scheduler for remediation/verification jobs.
Notify for triage notifications.

Operational notes

Audit logging per Epic 6 requirements.
Offline-ready CSV/PDF exports with deterministic hashes.
Dashboards for MTTR and triage throughput.
Observability runbook and dashboard stub: see runbooks/observability.md and runbooks/dashboards/vuln-explorer-observability.json (import locally).

Epic alignment

Epic 6: Vulnerability Explorer.
VULN stories tracked in ../../TASKS.md and src/VulnExplorer/**/TASKS.md.