bd2529502e
Some checks failed
AOC Guard CI / aoc-guard (push) Has been cancelled
AOC Guard CI / aoc-verify (push) Has been cancelled
Docs CI / lint-and-preview (push) Has been cancelled
Scanner Analyzers / Discover Analyzers (push) Has been cancelled
Scanner Analyzers / Build Analyzers (push) Has been cancelled
Scanner Analyzers / Test Language Analyzers (push) Has been cancelled
Scanner Analyzers / Validate Test Fixtures (push) Has been cancelled
Scanner Analyzers / Verify Deterministic Output (push) Has been cancelled
Signals CI & Image / signals-ci (push) Has been cancelled
- Added WineCspHttpProvider class to interface with Wine-hosted CryptoPro CSP. - Implemented ICryptoProvider, ICryptoProviderDiagnostics, and IDisposable interfaces. - Introduced WineCspHttpSigner and WineCspHttpHasher for signing and hashing operations. - Created WineCspProviderOptions for configuration settings including service URL and key options. - Developed CryptoProGostSigningService to handle GOST signing operations and key management. - Implemented HTTP service for the Wine CSP with endpoints for signing, verification, and hashing. - Added Swagger documentation for API endpoints. - Included health checks and error handling for service availability. - Established DTOs for request and response models in the service.
61 lines
1.9 KiB
Plaintext
61 lines
1.9 KiB
Plaintext
# Signals service configuration template.
|
|
# Copy to ../etc/signals.yaml (relative to the Signals content root)
|
|
# and adjust values to fit your environment.
|
|
|
|
schemaVersion: 1
|
|
|
|
Signals:
|
|
Authority:
|
|
Enabled: true
|
|
Issuer: "https://authority.stella-ops.local"
|
|
AllowAnonymousFallback: false
|
|
Audiences:
|
|
- "api://signals"
|
|
RequiredTenants:
|
|
- "tenant-default"
|
|
RequiredScopes:
|
|
- "signals:read"
|
|
- "signals:write"
|
|
- "signals:admin"
|
|
BypassNetworks:
|
|
- "127.0.0.1/32"
|
|
- "::1/128"
|
|
Mongo:
|
|
ConnectionString: "mongodb://localhost:27017/signals"
|
|
Database: "signals"
|
|
CallgraphsCollection: "callgraphs"
|
|
ReachabilityFactsCollection: "reachability_facts"
|
|
Storage:
|
|
# Storage driver: "filesystem" (default) or "rustfs" (CAS-backed)
|
|
Driver: "filesystem"
|
|
# Filesystem driver options (used when Driver=filesystem)
|
|
RootPath: "../data/signals-artifacts"
|
|
# RustFS driver options (used when Driver=rustfs)
|
|
# Per CAS contract, signals uses "signals-data" bucket
|
|
BucketName: "signals-data"
|
|
RootPrefix: "callgraphs"
|
|
RustFs:
|
|
BaseUrl: "http://localhost:8180/api/v1"
|
|
AllowInsecureTls: false
|
|
ApiKey: ""
|
|
ApiKeyHeader: "X-API-Key"
|
|
Timeout: "00:01:00"
|
|
Scoring:
|
|
ReachableConfidence: 0.75
|
|
UnreachableConfidence: 0.25
|
|
RuntimeBonus: 0.15
|
|
MaxConfidence: 0.99
|
|
MinConfidence: 0.05
|
|
Cache:
|
|
ConnectionString: "localhost:6379"
|
|
DefaultTtlSeconds: 600
|
|
AirGap:
|
|
# Optional override for fact-update event topic when signaling across air-gap boundaries.
|
|
# Defaults to "signals.fact.updated" when omitted.
|
|
EventTopic: "signals.fact.updated"
|
|
SealedMode:
|
|
EnforcementEnabled: false
|
|
EvidencePath: "../ops/devops/sealed-mode-ci/artifacts/sealed-mode-ci/latest/signals-sealed-ci.json"
|
|
MaxEvidenceAge: "06:00:00"
|
|
CacheLifetime: "00:01:00"
|