18d87c64c5
- Implemented PolicyPackSelectorComponent for selecting policy packs. - Added unit tests for component behavior, including API success and error handling. - Introduced monaco-workers type declarations for editor workers. - Created acceptance tests for guardrails with stubs for AT1–AT10. - Established SCA Failure Catalogue Fixtures for regression testing. - Developed plugin determinism harness with stubs for PL1–PL10. - Added scripts for evidence upload and verification processes.
40 lines
2.0 KiB
Markdown
40 lines
2.0 KiB
Markdown
# Vuln Explorer CLI (Md.XI draft)
|
|
|
|
> Status: DRAFT — depends on explorer API/console assets and GRAP0101 schema. Do not publish until samples are hashed and prerequisites land.
|
|
|
|
## Scope
|
|
- Command reference for Explorer-related CLI verbs (list/view/actions/reports/exports/VEX decisions).
|
|
- Examples must be deterministic and offline-friendly (fixed fixtures, no live endpoints).
|
|
|
|
## Prerequisites
|
|
- GRAP0101 contract for finalized field names and filters.
|
|
- CLI sample payloads (requested with console assets; due 2025-12-09).
|
|
- API schema from `docs/vuln/explorer-api.md` once finalized.
|
|
|
|
## Commands (outline)
|
|
- `stella findings list` — filters, pagination, sorting, `--fields`, `--reachability`, `--vex-status`.
|
|
- `stella findings view <id>` — includes history, actions, explain bundle refs.
|
|
- `stella findings action <id> --assign/--comment/--status/--remediate/--ticket` — DSSE signing optional.
|
|
- `stella findings report create` — outputs manifest path and DSSE envelope.
|
|
- `stella findings export offline` — deterministic bundle with hashes (aligns with Offline Kit).
|
|
- `stella vex decisions` — create/update/list VEX decisions.
|
|
|
|
## Determinism & Offline
|
|
- Record all sample command outputs (stdout/stderr) with hashes in `docs/assets/vuln-explorer/SHA256SUMS`.
|
|
- Use fixed fixture IDs, ordered output, and `--format json` where applicable.
|
|
|
|
### Fixtures to Capture (once CLI samples arrive)
|
|
- `assets/vuln-explorer/cli-findings-list.json` (list with filters)
|
|
- `assets/vuln-explorer/cli-findings-view.json` (detail view)
|
|
- `assets/vuln-explorer/cli-action.json` (assign/comment/status change)
|
|
- `assets/vuln-explorer/cli-report-create.json` (report creation output)
|
|
- `assets/vuln-explorer/cli-export-offline.json` (bundle manifest snippet)
|
|
- `assets/vuln-explorer/cli-vex-decision.json` (decision create/list)
|
|
|
|
## Open Items
|
|
- Insert real examples and exit codes once assets arrive.
|
|
- Confirm DSSE flag names and default signing key selection.
|
|
- Add CI snippets for GitLab/GitHub once policy overlays provided.
|
|
|
|
_Last updated: 2025-12-05 (UTC)_
|