stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 2 Releases Wiki Activity
Files
d0f2cc3b2cf0dfa4b1ea69737ad5ebd02089fbc6
git.stella-ops.org/docs/features/checked/web/signed-vex-override-badge.md
master 5bca406787 save checkpoint: save features
2026-02-12 10:27:23 +02:00

1.8 KiB
Raw Blame History

Signed VEX Override Badge (DSSE Status Display)

Module

Web

Status

VERIFIED

Description

SignedOverrideBadgeComponent displaying DSSE badge with verification status, optional expanded details (digest, signer, timestamp, Rekor link), and ASCII-only indicators.

Implementation Details

  • Feature directory: src/Web/StellaOps.Web/src/app/features/triage/components/signed-override-badge/
  • Components:
    • signed-override-badge (src/Web/StellaOps.Web/src/app/features/triage/components/signed-override-badge/signed-override-badge.component.ts)
  • Source: SPRINT_20260112_004_FE_risk_line_runtime_trace_ui.md

E2E Test Plan

  • Setup:
    • Log in with a user that has appropriate permissions
    • Navigate to the relevant page/section where this feature appears
    • Ensure test data exists (scanned artifacts, SBOM data, or seed data as needed)
  • Core verification:
    • Verify the badge/chip renders with correct status color and label
    • Verify the badge updates reactively when underlying data changes
    • Verify tooltip or popover shows additional detail on hover
  • Edge cases:
    • Verify graceful handling when backend API is unavailable (error state)
    • Verify responsive layout at different viewport sizes
    • Verify accessibility (keyboard navigation, screen reader labels, ARIA attributes)

Verification

  • Verified on 2026-02-11 via docs/qa/feature-checks/runs/web/signed-vex-override-badge/run-001/.
  • Tier 0 confirmed signed-override component/export/test assets and key DSSE status symbol wiring.
  • Tier 1 passed focused Angular behavior regression (13 files / 59 tests) and npm run build.
  • Tier 2 validated badge trust-state rendering, expanded DSSE/Rekor details, and explicit unsigned-state behavior.