stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 2 Releases Wiki Activity
Files
d0f2cc3b2cf0dfa4b1ea69737ad5ebd02089fbc6
git.stella-ops.org/docs/features/checked/web/evidence-ribbon-ui-component.md
master 5bca406787 save checkpoint: save features
2026-02-12 10:27:23 +02:00

2.1 KiB
Raw Blame History

Evidence Ribbon UI Component

Module

Web

Status

VERIFIED

Description

Horizontal evidence ribbon component that displays a compact summary strip of evidence types (SBOM, VEX, attestation, provenance) with color-coded badges and drill-down capability. Integrated into developer and auditor workspace views.

Implementation Details

  • Feature directory: src/Web/StellaOps.Web/src/app/features/evidence-ribbon/
  • Components:
    • evidence-ribbon (src/Web/StellaOps.Web/src/app/features/evidence-ribbon/components/evidence-ribbon/evidence-ribbon.component.ts)
  • Services:
    • evidence-ribbon (src/Web/StellaOps.Web/src/app/features/evidence-ribbon/services/evidence-ribbon.service.ts)
  • Models:
    • src/Web/StellaOps.Web/src/app/features/evidence-ribbon/models/evidence-ribbon.models.ts
  • Source: batch_38/file_11.md

E2E Test Plan

  • Setup:
    • Log in with a user that has appropriate permissions
    • Navigate to /triage/artifacts/:artifactId
    • Ensure test data exists (scanned artifacts, SBOM data, or seed data as needed)
  • Core verification:
    • Verify the component renders correctly with sample data
    • Verify interactive elements respond to user input
    • Verify data is fetched and displayed from the correct API endpoints
  • Edge cases:
    • Verify graceful handling when backend API is unavailable (error state)
    • Verify responsive layout at different viewport sizes
    • Verify accessibility (keyboard navigation, screen reader labels, ARIA attributes)

Verification

  • Run: docs/qa/feature-checks/runs/web/evidence-ribbon-ui-component/run-001/
  • Tier 0 (source): pass ( ier0-source-check.json)
  • Tier 1 (build/tests): pass ( ier1-build-check.json)
  • Tier 2 (behavior): pass ( ier2-e2e-check.json)
  • Verified on (UTC): 2026-02-10

Recheck (run-003)

  • Date (UTC): 2026-02-11T06:40:35Z
  • Status: VERIFIED (strict Tier 2 UI replay)
  • Tier 2 evidence: docs/qa/feature-checks/runs/web/evidence-ribbon-ui-component/run-003/tier2-ui-check.json
  • Notes: Developer workspace strict Playwright flow now explicitly verifies DSSE/Rekor/CycloneDX ribbon pills and user click interaction.