Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
- Implement `SbomIngestServiceCollectionExtensionsTests` to verify the SBOM ingestion pipeline exports snapshots correctly. - Create `SbomIngestTransformerTests` to ensure the transformation produces expected nodes and edges, including deduplication of license nodes and normalization of timestamps. - Add `SbomSnapshotExporterTests` to test the export functionality for manifest, adjacency, nodes, and edges. - Introduce `VexOverlayTransformerTests` to validate the transformation of VEX nodes and edges. - Set up project file for the test project with necessary dependencies and configurations. - Include JSON fixture files for testing purposes.
1.5 KiB
1.5 KiB
TASKS
| Task | Owner(s) | Depends on | Notes |
|---|---|---|---|
| FEEDCONN-KISA-02-008 Firmware range provenance | BE-Conn-KISA, Models | CONCELIER-LNM-21-001 | DONE (2025-11-04) – Defined comparison helpers for Hangul-labelled firmware ranges (XFU 1.0.1.0084 ~ 2.0.1.0034) and mapped them into advisory_observations.affected.versions[] with provenance tags. Coordinated localisation notes/fixtures for Link-Not-Merge schema.2025-11-03: Kicking off range normalization + provenance mapping; auditing existing mapper/tests before implementing semver/firmware helper. 2025-11-03: Implemented SemVer normalization pipeline with provenance slugs, added vendor extension masks, and refreshed end-to-end tests to cover normalized rules; Continue reviewing additional range phrasings ( 미만/초과) before marking DONE.2025-11-03: Added coverage for exclusive/inclusive single-ended ranges and fallback handling ( 미만, 이하, 초과, non-numeric text); mapper now emits deterministic SemVer primitives and normalized rules for those phrasings—final pass pending broader fixture sweep.2025-11-03: Switched detail fetch to HTML ( detailDos.do) and introduced DOM-based parser + fixtures so advisory products/ranges persist even when the JSON detail API rejects unauthenticated clients.2025-11-04: Parser severity/table extraction tightened and dedicated HTML fixture-powered tests ensure normalized ranges, vendor extensions, and severity survive the DOM path; integration suite runs against HTML snapshots. |