1.2 KiB
1.2 KiB
IssuerDirectory
Status: Implemented
Source: src/IssuerDirectory/
Owner: VEX Guild
Purpose
IssuerDirectory maintains a trust registry of CSAF publishers and VEX statement issuers. Provides discovery, validation, and trust scoring for upstream vulnerability advisories and VEX statements.
Components
Services:
StellaOps.IssuerDirectory- Main service for issuer registry management and API
Configuration
See etc/issuer-directory.yaml.sample for configuration options.
Key settings:
- PostgreSQL connection (schema:
issuer_directory) - Authority integration settings
- Issuer discovery endpoints
- Trust validation policies
- CSAF provider metadata validation
Dependencies
- PostgreSQL (schema:
issuer_directory) - Authority (authentication)
- Concelier (consumes issuer metadata)
- VexHub (consumes issuer trust data)
- VexLens (trust scoring integration)
Related Documentation
- Architecture:
./architecture.md - Concelier:
../concelier/ - VexHub:
../vexhub/ - VexLens:
../vex-lens/
Current Status
Implemented with CSAF publisher discovery and validation. Supports issuer metadata storage and trust registry queries. Integrated with VEX ingestion pipeline.