2.6 KiB
2.6 KiB
TASKS
| Task | Owner(s) | Depends on | Notes |
|---|---|---|---|
| FEEDCONN-RUBDU-02-001 Identify BDU data source & schema | BE-Conn-BDU | Research | DONE (2025-10-11) – Candidate endpoints (https://bdu.fstec.ru/component/rsform/form/7-bdu?format=xml, ...?format=json) return 403/404 even with --insecure because TLS chain requires Russian Trusted Sub CA and WAF expects referer/session headers. Documented request/response samples in docs/concelier-connector-research-20251011.md; blocked until trusted root + access strategy from Ops. |
| FEEDCONN-RUBDU-02-002 Fetch pipeline & cursor handling | BE-Conn-BDU | Source.Common, Storage.Mongo | DONE (2025-10-14) – Connector streams vulxml.zip through cached fetches, persists JSON payloads via RawDocumentStorage, and tracks cursor pending sets. Added cache fallback + deterministic SHA logging and state updates tied to TimeProvider. |
| FEEDCONN-RUBDU-02-003 DTO/parser implementation | BE-Conn-BDU | Source.Common | DONE (2025-10-14) – RuBduXmlParser now captures identifiers, source links, CVSS 2/3 metrics, CWE arrays, and environment/software metadata with coverage for multi-entry fixtures. |
| FEEDCONN-RUBDU-02-004 Canonical mapping & range primitives | BE-Conn-BDU | Models | DONE (2025-10-14) – RuBduMapper emits vendor/ICS packages with normalized ru-bdu.raw rules, dual status provenance, alias/reference hydration (CVE, external, source), and CVSS severity normalisation. |
| FEEDCONN-RUBDU-02-005 Deterministic fixtures & regression tests | QA | Testing | DONE (2025-10-14) – Added connector harness snapshot suite with canned archive, state/documents/dtos/advisories snapshots under Fixtures/, gated by UPDATE_BDU_FIXTURES. |
| FEEDCONN-RUBDU-02-006 Telemetry & documentation | DevEx | Docs | DONE (2025-10-14) – Introduced RuBduDiagnostics meter (fetch/parse/map counters & histograms) and authored connector README covering configuration, trusted roots, telemetry, and offline behaviour. |
| FEEDCONN-RUBDU-02-007 Access & export options assessment | BE-Conn-BDU | Research | DONE (2025-10-14) – Documented archive access constraints, offline mirroring expectations, and export packaging in src/Concelier/StellaOps.Concelier.PluginBinaries/StellaOps.Concelier.Connector.Ru.Bdu/README.md + flagged Offline Kit bundling requirements. |
| FEEDCONN-RUBDU-02-008 Trusted root onboarding plan | BE-Conn-BDU | Source.Common | DONE (2025-10-14) – Validated Russian Trusted Root/Sub CA bundle wiring (certificates/russian_trusted_bundle.pem), updated Offline Kit guidance, and surfaced concelier:httpClients:source.bdu:trustedRootPaths sample configuration. |