df5984d07e
Some checks failed
Build Test Deploy / build-test (push) Has been cancelled
Build Test Deploy / authority-container (push) Has been cancelled
Build Test Deploy / docs (push) Has been cancelled
Build Test Deploy / deploy (push) Has been cancelled
Docs CI / lint-and-preview (push) Has been cancelled
3.3 KiB
3.3 KiB
TASKS
| Task | Owner(s) | Depends on | Notes |
|---|---|---|---|
| Merge identity graph & alias store | BE-Merge | Models, Storage.Mongo | DONE – alias store/resolver, component builder, reconcile job, persistence + diagnostics endpoint landed. |
| OSV alias consolidation & per-ecosystem snapshots | BE-Conn-OSV, QA | Merge, Testing | DONE – alias graph handles GHSA/CVE records and deterministic snapshots exist across ecosystems. |
| Oracle PSIRT pipeline completion | BE-Conn-Oracle | Source.Common, Core | DONE – Oracle mapper now emits CVE aliases, vendor affected packages, patch references, and resume/backfill flow is covered by integration tests. |
| VMware connector observability & resume coverage | BE-Conn-VMware, QA | Source.Common, Storage.Mongo | DONE – VMware diagnostics emit fetch/parse/map metrics, fetch dedupe uses hash cache, and integration test covers snapshot plus resume path. |
| Model provenance & range backlog | BE-Merge | Models | DOING – VMware/Oracle/Chromium, NVD, Debian, SUSE, Ubuntu, Adobe, ICS Kaspersky, CERT-In, CERT-FR, JVN, and KEV now emit RangePrimitives (KEV adds due-date/vendor extensions with deterministic snapshots). Remaining connectors (Acsc, Cccs, CertBund, CertCc, Cve, Ghsa, Ics.Cisa, Kisa, Ru.Bdu, Ru.Nkcki, Vndr.Apple, Vndr.Cisco, Vndr.Msrc) still need structured coverage. |
| Trivy DB exporter delta strategy | BE-Export | Exporters | DONE – planner promotes chained deltas back to full exports, OCI writer reuses base blobs, regression tests cover the delta→delta→full sequence, and a full-stack layer-reuse smoke test + operator docs landed (2025-10-10). |
| Red Hat fixture validation sweep | QA | Source.Distro.RedHat | DOING – finalize RHSA fixture regeneration once connector regression fixes land. |
| JVN VULDEF schema update | BE-Conn-JVN, QA | Source.Jvn | DONE – schema patched (vendor/product attrs, impact entries, err codes), parser tightened, fixtures/tests refreshed. |
| Build/test sweeps | QA | All modules | DONE – wired Authority plugin abstractions into the build, updated CLI export tests for the new overrides, and full dotnet test now succeeds (perf suite within budget). |
| Authority plugin PLG1–PLG3 | BE-Auth Plugin | Authority DevEx | DONE – abstractions/tests shipped, plugin loader integrated, and Mongo-backed Standard plugin stub operational with bootstrap seeding. |
| Authority plugin PLG4–PLG6 | BE-Auth Plugin, DevEx/Docs | Authority plugin PLG1–PLG3 | READY FOR DOCS REVIEW (2025-10-10) – Capability metadata validated, configuration guardrails shipped, developer guide finalised; waiting on Docs polish + diagram export. |
| Authority plugin PLG7 RFC | BE-Auth Plugin | PLG4 | DRAFTED (2025-10-10) – docs/rfcs/authority-plugin-ldap.md captured LDAP plugin architecture, configuration schema, and implementation plan; needs Auth/Security guild review. |
| Feedser modularity test sweep | BE-Conn/QA | Feedser build | DONE (2025-10-10) – AngleSharp upgrade applied, helper assemblies copy-local, Kaspersky fixtures updated; full dotnet test src/StellaOps.Feedser.sln now passes locally. |
| OSV vs GHSA parity checks | QA, BE-Merge | Merge | DONE – parity inspector/diagnostics wired into OSV connector regression sweep; fixtures validated via OsvGhsaParityRegressionTests (see docs/19_TEST_SUITE_OVERVIEW.md) and metrics emitted through OsvGhsaParityDiagnostics. |