stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 16 Releases Wiki Activity
Files
bc0762e97d251723854b9c4e482b218c8efb1e04
git.stella-ops.org/docs/modules/scheduler
History
master 79b8e53441
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
Details
Add new features and tests for AirGap and Time modules 
- Introduced `SbomService` tasks documentation.
- Updated `StellaOps.sln` to include new projects: `StellaOps.AirGap.Time` and `StellaOps.AirGap.Importer`.
- Added unit tests for `BundleImportPlanner`, `DsseVerifier`, `ImportValidator`, and other components in the `StellaOps.AirGap.Importer.Tests` namespace.
- Implemented `InMemoryBundleRepositories` for testing bundle catalog and item repositories.
- Created `MerkleRootCalculator`, `RootRotationPolicy`, and `TufMetadataValidator` tests.
- Developed `StalenessCalculator` and `TimeAnchorLoader` tests in the `StellaOps.AirGap.Time.Tests` namespace.
- Added `fetch-sbomservice-deps.sh` script for offline dependency fetching.
2025-11-20 23:29:54 +02:00
..
operations
feat: Implement vulnerability token signing and verification utilities
2025-11-03 10:04:10 +02:00
prep
Add new features and tests for AirGap and Time modules
2025-11-20 23:29:54 +02:00
AGENTS.md
feat: Add initial implementation of Vulnerability Resolver Jobs
2025-11-18 07:52:15 +02:00
architecture.md
Add unit tests for SBOM ingestion and transformation
2025-11-04 07:49:39 +02:00
implementation_plan.md
Update AGENTS.md files across multiple modules to standardize task status update instructions and introduce a new document for Secret Leak Detection operations.
2025-11-05 11:58:32 +02:00
README.md
Align AOC tasks for Excititor and Concelier
2025-10-31 18:50:15 +02:00
TASKS.md
feat: Add initial implementation of Vulnerability Resolver Jobs
2025-11-18 07:52:15 +02:00

README.md

StellaOps Scheduler

Scheduler detects advisory/VEX deltas, computes impact windows, and orchestrates re-evaluations across Scanner and Policy Engine.

Responsibilities

  • Maintain impact cursors and queues for re-scan/re-evaluate jobs.
  • Expose APIs for policy-triggered rechecks and runtime hooks.
  • Emit DSSE-backed completion events for downstream consumers (UI, Notify).
  • Provide SLA-aware retry logic with deterministic evaluation windows.

Key components

  • StellaOps.Scheduler.WebService control plane.
  • StellaOps.Scheduler.Worker job executor.
  • Shared libraries under StellaOps.Scheduler.*.

Integrations & dependencies

  • MongoDB for impact models.
  • Redis/NATS for queueing.
  • Policy Engine, Scanner, Notify.

Operational notes

  • Monitoring assets in ./operations/worker-grafana-dashboard.json & worker-prometheus-rules.yaml.
  • Operational runbook ./operations/worker.md.

Related resources

  • ./operations/worker.md
  • ./operations/worker-grafana-dashboard.json
  • ./operations/worker-prometheus-rules.yaml

Backlog references

  • SCHED-MODELS-20-001 (policy run DTOs) and related tasks in ../../TASKS.md.
  • Scheduler observability follow-ups in src/Scheduler/**/TASKS.md.

Epic alignment

  • Epic 2 – Policy Engine & Editor: orchestrate incremental re-evaluation and simulation runs when raw facts or policies change.
  • Epic 6 – Vulnerability Explorer: feed triage workflows with up-to-date job status, explain traces, and ledger hooks.
  • Epic 9 – Orchestrator Dashboard: expose job telemetry, throttling, and replay controls through orchestration dashboards.