47168fec38
- Introduced a new VEX compact fixture for testing purposes. - Implemented `verify_export.py` script to validate Findings Ledger exports, ensuring deterministic ordering and applying redaction manifests. - Added a lightweight stub `HarnessRunner` for unit tests to validate ledger hashing expectations. - Documented tasks related to the Mirror Creator. - Created models for entropy signals and implemented the `EntropyPenaltyCalculator` to compute penalties based on scanner outputs. - Developed unit tests for `EntropyPenaltyCalculator` to ensure correct penalty calculations and handling of edge cases. - Added tests for symbol ID normalization in the reachability scanner. - Enhanced console status service with comprehensive unit tests for connection handling and error recovery. - Included Cosign tool version 2.6.0 with checksums for various platforms.
109 lines
2.1 KiB
JSON
109 lines
2.1 KiB
JSON
{
|
|
"$id": "https://stella-ops.org/schemas/zastava/webhook_admission.schema.json",
|
|
"$schema": "http://json-schema.org/draft-07/schema#",
|
|
"properties": {
|
|
"bypass_waiver_id": {
|
|
"type": "string"
|
|
},
|
|
"decision": {
|
|
"enum": [
|
|
"allow",
|
|
"deny",
|
|
"dry-run"
|
|
]
|
|
},
|
|
"decision_at": {
|
|
"format": "date-time",
|
|
"type": "string"
|
|
},
|
|
"decision_reason": {
|
|
"minLength": 1,
|
|
"type": "string"
|
|
},
|
|
"graph_revision_id": {
|
|
"minLength": 1,
|
|
"type": "string"
|
|
},
|
|
"ledger_id": {
|
|
"type": "string"
|
|
},
|
|
"manifest_pointer": {
|
|
"description": "Surface.FS manifest pointer",
|
|
"type": "string"
|
|
},
|
|
"monotonic_nanos": {
|
|
"type": "integer"
|
|
},
|
|
"namespace": {
|
|
"minLength": 1,
|
|
"type": "string"
|
|
},
|
|
"payload": {
|
|
"description": "AdmissionReview payload (canonical JSON) hashed via payload_hash",
|
|
"type": "object"
|
|
},
|
|
"payload_hash": {
|
|
"pattern": "^sha256:[0-9a-f]{64}$",
|
|
"type": "string"
|
|
},
|
|
"policy_hash": {
|
|
"minLength": 1,
|
|
"type": "string"
|
|
},
|
|
"project_id": {
|
|
"minLength": 1,
|
|
"type": "string"
|
|
},
|
|
"replay_manifest": {
|
|
"type": "string"
|
|
},
|
|
"request_uid": {
|
|
"minLength": 1,
|
|
"type": "string"
|
|
},
|
|
"resource_kind": {
|
|
"minLength": 1,
|
|
"type": "string"
|
|
},
|
|
"side_effect": {
|
|
"enum": [
|
|
"none",
|
|
"mutating",
|
|
"bypass"
|
|
]
|
|
},
|
|
"signature": {
|
|
"description": "DSSE envelope reference",
|
|
"pattern": "^dsse://[A-Za-z0-9._:/-]+$",
|
|
"type": "string"
|
|
},
|
|
"tenant_id": {
|
|
"minLength": 1,
|
|
"type": "string"
|
|
},
|
|
"workload_name": {
|
|
"minLength": 1,
|
|
"type": "string"
|
|
}
|
|
},
|
|
"required": [
|
|
"tenant_id",
|
|
"project_id",
|
|
"request_uid",
|
|
"resource_kind",
|
|
"namespace",
|
|
"workload_name",
|
|
"policy_hash",
|
|
"graph_revision_id",
|
|
"decision",
|
|
"decision_reason",
|
|
"decision_at",
|
|
"manifest_pointer",
|
|
"payload",
|
|
"payload_hash",
|
|
"signature"
|
|
],
|
|
"title": "Zastava Webhook Admission",
|
|
"type": "object"
|
|
}
|