stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 16 Releases Wiki Activity
Files
bc0762e97d251723854b9c4e482b218c8efb1e04
git.stella-ops.org/docs/modules/scanner/design/README.md
StellaOps Bot e1262eb916 Add receipt input JSON and SHA256 hash for CVSS policy scoring tests 
- Introduced a new JSON fixture `receipt-input.json` containing base, environmental, and threat metrics for CVSS scoring.
- Added corresponding SHA256 hash file `receipt-input.sha256` to ensure integrity of the JSON fixture.
2025-12-04 07:30:42 +02:00

1.9 KiB
Raw Blame History

Scanner Design Dossiers

This directory contains deep technical designs for current and upcoming analyzers and surface components.

Language analyzers

  • ruby-analyzer.md — lockfile, runtime graph, capability signals for Ruby.
  • deno-runtime-signals.md — runtime trace + policy signal contract for Deno analyzer.
  • deno-runtime-shim.md — loader/trace shim plan for runtime NDJSON capture in Deno analyzer.

Surface & platform contracts

  • surface-fs.md
  • surface-env.md
  • surface-validation.md
  • surface-secrets.md

OS ecosystem designs

  • macos-analyzer.md — Homebrew, pkgutil, .app bundle plan.
  • windows-analyzer.md — MSI, WinSxS, Chocolatey, registry collectors.
  • cdx17-cbom-contract.md — deterministic CycloneDX 1.7 + CBOM export profile (ordering, hashes, downgrade rules).
  • slsa-source-track.md — deterministic SLSA Source Track capture (repo/ref/commit, tree hash, invocation hash, provenance DSSE, CAS paths).

Demand & dashboards

  • ../../benchmarks/scanner/windows-macos-demand.md — demand tracker.
  • ../../benchmarks/scanner/windows-macos-interview-template.md — interview template.
  • ../../api/scanner/windows-coverage.md — coverage summary dashboard.
  • ../../api/scanner/windows-macos-summary.md — metric snapshot.

Utility & reference

  • ../operations/field-engagement.md — SE workflow guidance.
  • ../operations/analyzers.md — operational runbook.
  • ../operations/rustfs-migration.md — storage migration notes.

Maintenance tips

  • Keep demand tracker (../../benchmarks/scanner/windows-macos-demand.md) and API dashboards in sync when updating macOS/Windows designs.
  • Cross-reference policy readiness briefs for associated predicates and waiver models.

Policy readiness

  • ../policy/secret-leak-detection-readiness.md — secret leak pipeline decisions.
  • ../policy/windows-package-readiness.md — Windows analyzer policy decisions.