5146204f1b
- Introduced `sink-detect.js` with various security sink detection patterns categorized by type (e.g., command injection, SQL injection, file operations). - Implemented functions to build a lookup map for fast sink detection and to match sink calls against known patterns. - Added `package-lock.json` for dependency management.
60 lines
2.4 KiB
C#
60 lines
2.4 KiB
C#
namespace StellaOps.Scanner.Storage.Oci;
|
|
|
|
public static class OciAnnotations
|
|
{
|
|
public const string Created = "org.opencontainers.image.created";
|
|
public const string Title = "org.opencontainers.image.title";
|
|
public const string Description = "org.opencontainers.image.description";
|
|
public const string BaseDigest = "org.opencontainers.image.base.digest";
|
|
public const string BaseName = "org.opencontainers.image.base.name";
|
|
|
|
public const string StellaPredicateType = "org.stellaops.predicate.type";
|
|
public const string StellaAttestationDigest = "org.stellaops.attestation.digest";
|
|
public const string StellaBeforeDigest = "org.stellaops.delta.before.digest";
|
|
public const string StellaAfterDigest = "org.stellaops.delta.after.digest";
|
|
public const string StellaSbomDigest = "org.stellaops.sbom.digest";
|
|
public const string StellaVerdictDigest = "org.stellaops.verdict.digest";
|
|
|
|
// Sprint: SPRINT_4300_0001_0001 - OCI Verdict Attestation Push
|
|
/// <summary>
|
|
/// The final decision (pass, warn, block) for the verdict.
|
|
/// </summary>
|
|
public const string StellaVerdictDecision = "org.stellaops.verdict.decision";
|
|
|
|
/// <summary>
|
|
/// Digest of the feeds snapshot used for vulnerability matching.
|
|
/// </summary>
|
|
public const string StellaFeedsDigest = "org.stellaops.feeds.digest";
|
|
|
|
/// <summary>
|
|
/// Digest of the policy bundle used for evaluation.
|
|
/// </summary>
|
|
public const string StellaPolicyDigest = "org.stellaops.policy.digest";
|
|
|
|
/// <summary>
|
|
/// Graph revision identifier for the scan.
|
|
/// </summary>
|
|
public const string StellaGraphRevisionId = "org.stellaops.graph.revision.id";
|
|
|
|
/// <summary>
|
|
/// Digest of the proof bundle containing the evidence chain.
|
|
/// </summary>
|
|
public const string StellaProofBundleDigest = "org.stellaops.proof.bundle.digest";
|
|
|
|
/// <summary>
|
|
/// Timestamp when the verdict was computed.
|
|
/// </summary>
|
|
public const string StellaVerdictTimestamp = "org.stellaops.verdict.timestamp";
|
|
|
|
// Sprint: SPRINT_4300_0002_0002 - Unknowns Attestation Predicates
|
|
/// <summary>
|
|
/// Digest of the uncertainty state attestation.
|
|
/// </summary>
|
|
public const string StellaUncertaintyDigest = "org.stellaops.uncertainty.digest";
|
|
|
|
/// <summary>
|
|
/// Digest of the uncertainty budget attestation.
|
|
/// </summary>
|
|
public const string StellaUncertaintyBudgetDigest = "org.stellaops.uncertainty.budget.digest";
|
|
}
|