e91da22836
- Introduced attestation inventory and subject-rekor mapping files for tracking Docker packages. - Added a comprehensive crypto registry decision document outlining defaults and required follow-ups. - Created an offline feeds manifest for bundling air-gap resources. - Implemented a script to generate and update binary manifests for curated binaries. - Added a verification script to ensure binary artefacts are located in approved directories. - Defined new schemas for AdvisoryEvidenceBundle, OrchestratorEnvelope, ScannerReportReadyPayload, and ScannerScanCompletedPayload. - Established project files for StellaOps.Orchestrator.Schemas and StellaOps.PolicyAuthoritySignals.Contracts. - Updated vendor manifest to track pinned binaries for integrity.
6 lines
215 B
JSON
6 lines
215 B
JSON
{
|
|
"pkg:docker/stellaops/evidencelocker@sha256:111": "sha256:rekor111",
|
|
"pkg:docker/stellaops/exportcenter@sha256:222": "sha256:rekor222",
|
|
"pkg:docker/stellaops/timelineindexer@sha256:333": "sha256:rekor333"
|
|
}
|