stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 2 Releases Wiki Activity
Files
cf5b72974f923126944f4dcd47e85864ebb31a3b
git.stella-ops.org/docs/features/unchecked/scanner/offline-slice-bundle-export-import.md

1.6 KiB
Raw Blame History

Offline Slice Bundle Export/Import (OCI Layout)

Module

Scanner

Status

IMPLEMENTED

Description

Offline distribution of reachability slices via OCI layout tar.gz bundles including all referenced artifacts (graphs, SBOMs), with integrity verification on import. Targets <100MB for typical scans.

Implementation Details

  • Offline Bundle Service:
    • src/Scanner/__Libraries/StellaOps.Scanner.Storage.Oci/Offline/OfflineBundleService.cs - OfflineBundleService exports and imports reachability slices as OCI layout tar.gz bundles with all referenced artifacts
  • Evidence Bundle Export:
    • src/Scanner/StellaOps.Scanner.WebService/Services/IEvidenceBundleExporter.cs - IEvidenceBundleExporter interface for exporting evidence bundles
    • src/Scanner/StellaOps.Scanner.WebService/Services/EvidenceBundleExporter.cs - EvidenceBundleExporter exports scan evidence as portable bundles
  • OCI Slice Services:
    • src/Scanner/__Libraries/StellaOps.Scanner.Storage.Oci/SlicePushService.cs - Push slices to OCI registries
    • src/Scanner/__Libraries/StellaOps.Scanner.Storage.Oci/SlicePullService.cs - Pull slices from OCI registries

E2E Test Plan

  • Export a reachability slice bundle as an OCI layout tar.gz file and verify it contains all referenced artifacts (graphs, SBOMs)
  • Import the exported bundle into a disconnected instance and verify integrity verification passes
  • Verify the exported bundle size stays under 100MB for typical scans
  • Verify tampered bundles fail integrity verification on import
  • Verify the imported bundle's reachability data is usable for offline vulnerability analysis