stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 2 Releases Wiki Activity
Files
cf5b72974f923126944f4dcd47e85864ebb31a3b
git.stella-ops.org/docs/features/unchecked/scanner/evidence-privacy-controls.md

1.5 KiB
Raw Blame History

Evidence Privacy Controls (Redaction Service)

Module

Scanner

Status

IMPLEMENTED

Description

Role-based evidence redaction with three levels: Full (no redaction for security_admin/evidence:full), Standard (redacts source code from reachability paths and call stack arguments/locals, keeps hashes and line ranges), and Minimal (strips reachability paths entirely, removes call stacks, reduces provenance to build ID/digest/verified flag, preserves VEX and EPSS public data). Supports field-level selective redaction (SourceCode, CallArguments flags). Determines redaction level from ClaimsPrincipal.

Implementation Details

  • Redaction Service:
    • src/Scanner/__Libraries/StellaOps.Scanner.Evidence/Privacy/EvidenceRedactionService.cs - Core redaction service with role-based level determination from ClaimsPrincipal
    • src/Scanner/__Libraries/StellaOps.Scanner.Evidence/Privacy/EvidenceRedactionLevel.cs - Redaction level enum (Full, Standard, Minimal)

E2E Test Plan

  • Authenticate as security_admin and verify Full redaction level returns all evidence fields
  • Authenticate as a standard user and verify Standard redaction level redacts source code and call stack arguments
  • Authenticate with minimal permissions and verify Minimal redaction level strips reachability paths and call stacks
  • Verify VEX and EPSS public data is preserved at all redaction levels
  • Verify field-level selective redaction (SourceCode, CallArguments flags) works correctly
  • Verify hash values and line ranges are preserved at Standard level