Some checks failed
		
		
	
	Docs CI / lint-and-preview (push) Has been cancelled
				
			- Added `PolicyFindings` property to `SbomCompositionRequest` to include policy findings in SBOM. - Implemented `NormalizePolicyFindings` method to process and validate policy findings. - Updated `SbomCompositionRequest.Create` method to accept policy findings as an argument. - Upgraded CycloneDX.Core package from version 5.1.0 to 10.0.1. - Marked several tasks as DONE in TASKS.md, reflecting completion of SBOM-related features. - Introduced telemetry metrics for Go analyzer to track heuristic fallbacks. - Added performance benchmarks for .NET and Go analyzers. - Created new test fixtures for .NET applications, including dependencies and runtime configurations. - Added licenses and nuspec files for logging and toolkit packages used in tests. - Implemented `SbomPolicyFinding` record to encapsulate policy finding details and normalization logic.
		
			
				
	
	
		
			46 lines
		
	
	
		
			1.1 KiB
		
	
	
	
		
			JSON
		
	
	
	
	
	
			
		
		
	
	
			46 lines
		
	
	
		
			1.1 KiB
		
	
	
	
		
			JSON
		
	
	
	
	
	
| {
 | |
|   "thresholdMs": 5000,
 | |
|   "iterations": 5,
 | |
|   "scenarios": [
 | |
|     {
 | |
|       "id": "node_monorepo_walk",
 | |
|       "label": "Node.js analyzer on monorepo fixture",
 | |
|       "root": "samples/runtime/npm-monorepo",
 | |
|       "analyzers": [
 | |
|         "node"
 | |
|       ]
 | |
|     },
 | |
|     {
 | |
|       "id": "java_demo_archive",
 | |
|       "label": "Java analyzer on demo jar",
 | |
|       "root": "samples/runtime/java-demo",
 | |
|       "analyzers": [
 | |
|         "java"
 | |
|       ]
 | |
|     },
 | |
|     {
 | |
|       "id": "go_buildinfo_fixture",
 | |
|       "label": "Go analyzer on build-info binary",
 | |
|       "root": "src/StellaOps.Scanner.Analyzers.Lang.Go.Tests/Fixtures/lang/go/basic",
 | |
|       "analyzers": [
 | |
|         "go"
 | |
|       ]
 | |
|     },
 | |
|     {
 | |
|       "id": "dotnet_multirid_fixture",
 | |
|       "label": ".NET analyzer on multi-RID fixture",
 | |
|       "root": "src/StellaOps.Scanner.Analyzers.Lang.Tests/Fixtures/lang/dotnet/multi",
 | |
|       "analyzers": [
 | |
|         "dotnet"
 | |
|       ]
 | |
|     },
 | |
|     {
 | |
|       "id": "python_site_packages_walk",
 | |
|       "label": "Python site-packages dist-info crawl",
 | |
|       "root": "samples/runtime/python-venv/lib/python3.11/site-packages",
 | |
|       "matcher": "**/*.dist-info/METADATA",
 | |
|       "parser": "python"
 | |
|     }
 | |
|   ]
 | |
| }
 |