c8f3120174
- Implement `SbomVexOrderingDeterminismProperties` for testing component list and vulnerability metadata hash consistency. - Create `UnicodeNormalizationDeterminismProperties` to validate NFC normalization and Unicode string handling. - Add project file for `StellaOps.Testing.Determinism.Properties` with necessary dependencies. - Introduce CI/CD template validation tests including YAML syntax checks and documentation content verification. - Create validation script for CI/CD templates ensuring all required files and structures are present.
84 lines
2.6 KiB
Markdown
84 lines
2.6 KiB
Markdown
# Web
|
|
|
|
**Status:** Implemented
|
|
**Source:** `src/Web/`
|
|
**Owner:** UI Guild
|
|
|
|
## Purpose
|
|
|
|
Web provides the Angular 17 single-page application (SPA) frontend for StellaOps. Delivers the user interface for vulnerability exploration, policy management, scan results, SBOM visualization, and administrative functions.
|
|
|
|
## Components
|
|
|
|
**Application:**
|
|
- `StellaOps.Web` - Angular 17 application with TypeScript, routing, and component library
|
|
|
|
**Key Features:**
|
|
- Dashboard and vulnerability overview
|
|
- Container scan results and SBOM explorer
|
|
- Policy editor and rule visualization
|
|
- VEX statement review and approval workflows
|
|
- Task pack execution monitoring
|
|
- Admin console for configuration and user management
|
|
- **Unified Triage Experience** - Smart-Diff Compare View, Triage Canvas, Risk Dashboard
|
|
- **Risk Budget Visualization** - Burn-up charts, heatmaps, exception ledger
|
|
|
|
## Configuration
|
|
|
|
Angular configuration in `angular.json` and environment files.
|
|
|
|
Key settings:
|
|
- Backend API URL (`STELLAOPS_BACKEND_URL`)
|
|
- Authority OAuth/OIDC endpoints
|
|
- Feature flags for module visibility
|
|
- Telemetry and error reporting
|
|
|
|
## Build and Development
|
|
|
|
```bash
|
|
# Install dependencies
|
|
cd src/Web/StellaOps.Web
|
|
npm install
|
|
|
|
# Development server
|
|
npm start
|
|
|
|
# Production build
|
|
npm run build
|
|
|
|
# Run tests
|
|
npm test
|
|
|
|
# Run E2E tests (Playwright)
|
|
npx playwright test
|
|
```
|
|
|
|
## Dependencies
|
|
|
|
- Gateway (API access)
|
|
- Authority (authentication and authorization)
|
|
- All backend services (via Gateway routing)
|
|
|
|
## Related Documentation
|
|
|
|
### Triage Experience
|
|
- [Unified Triage Specification](./unified-triage-specification.md) - Consolidated triage requirements
|
|
- [Smart-Diff UI Architecture](./smart-diff-ui-architecture.md) - Compare view design
|
|
- [Triage Component Catalog](./triage-component-catalog.md) - Angular component documentation
|
|
- [Competitive Triage Patterns](./competitive-triage-patterns.md) - Industry comparison
|
|
|
|
### Module Dependencies
|
|
- UI Module: `../ui/` (shared UI components)
|
|
- Gateway: `../gateway/` (API access)
|
|
- Authority: `../authority/` (authentication)
|
|
- VulnExplorer: `../vulnexplorer/` (vulnerability data)
|
|
|
|
### Implementation Sprints
|
|
- [Smart-Diff Compare](../../implplan/SPRINT_20251226_012_FE_smart_diff_compare.md)
|
|
- [Triage Canvas](../../implplan/SPRINT_20251226_013_FE_triage_canvas.md)
|
|
- [Risk Dashboard](../../implplan/SPRINT_20251226_004_FE_risk_dashboard.md)
|
|
|
|
## Current Status
|
|
|
|
Angular 17 application implemented with routing, authentication, and integration with backend services. Supports vulnerability exploration, scan results, SBOM visualization, and policy management. Playwright E2E tests configured.
|