@blamejs/exceptd-skills 0.16.12 → 0.16.13
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/AGENTS.md +2 -1
- package/CHANGELOG.md +4 -0
- package/README.md +5 -5
- package/bin/exceptd.js +2 -1
- package/data/_indexes/_meta.json +15 -14
- package/data/_indexes/activity-feed.json +9 -2
- package/data/_indexes/chains.json +4197 -283
- package/data/_indexes/currency.json +10 -1
- package/data/_indexes/frequency.json +48 -24
- package/data/_indexes/handoff-dag.json +5 -1
- package/data/_indexes/jurisdiction-map.json +6 -3
- package/data/_indexes/section-offsets.json +85 -0
- package/data/_indexes/stale-content.json +1 -1
- package/data/_indexes/summary-cards.json +38 -0
- package/data/_indexes/token-budget.json +53 -3
- package/data/_indexes/trigger-table.json +51 -0
- package/data/_indexes/xref.json +20 -3
- package/data/cwe-catalog.json +5 -1
- package/data/playbooks/crypto.json +18 -5
- package/data/playbooks/framework.json +1 -0
- package/data/playbooks/network-trust.json +646 -0
- package/manifest-snapshot.json +54 -2
- package/manifest-snapshot.sha256 +1 -1
- package/manifest.json +102 -46
- package/package.json +2 -2
- package/sbom.cdx.json +60 -30
- package/skills/network-trust/skill.md +81 -0
|
@@ -50,6 +50,7 @@
|
|
|
50
50
|
}
|
|
51
51
|
],
|
|
52
52
|
"fed_by": [
|
|
53
|
+
"network-trust",
|
|
53
54
|
"post-quantum-migration"
|
|
54
55
|
]
|
|
55
56
|
},
|
|
@@ -716,7 +717,11 @@
|
|
|
716
717
|
"system_libssl_upgrade_safe == true"
|
|
717
718
|
],
|
|
718
719
|
"priority": 1,
|
|
719
|
-
"for_signals": [
|
|
720
|
+
"for_signals": [
|
|
721
|
+
"ml-kem-absent",
|
|
722
|
+
"ml-dsa-slh-dsa-absent",
|
|
723
|
+
"openssl-pre-3-5"
|
|
724
|
+
],
|
|
720
725
|
"compensating_controls": [
|
|
721
726
|
"pin classical-only group fallback for legacy peers via per-service override"
|
|
722
727
|
],
|
|
@@ -730,7 +735,9 @@
|
|
|
730
735
|
"ops_authorization_for_service_restart == true"
|
|
731
736
|
],
|
|
732
737
|
"priority": 2,
|
|
733
|
-
"for_signals": [
|
|
738
|
+
"for_signals": [
|
|
739
|
+
"tls-no-hybrid-group"
|
|
740
|
+
],
|
|
734
741
|
"compensating_controls": [
|
|
735
742
|
"client_compat_canary_for_each_service",
|
|
736
743
|
"monitoring_for_negotiation_failures"
|
|
@@ -745,7 +752,9 @@
|
|
|
745
752
|
"operator_authorized_for_sshd_change == true"
|
|
746
753
|
],
|
|
747
754
|
"priority": 3,
|
|
748
|
-
"for_signals": [
|
|
755
|
+
"for_signals": [
|
|
756
|
+
"sshd-no-pqc-kex"
|
|
757
|
+
],
|
|
749
758
|
"compensating_controls": [
|
|
750
759
|
"bastion_session_recording_for_legacy_kex_fallback",
|
|
751
760
|
"monitoring_for_kex_negotiation_downgrades"
|
|
@@ -759,7 +768,9 @@
|
|
|
759
768
|
"ca_supports_hybrid_signatures == true OR internal_ca_can_be_extended == true"
|
|
760
769
|
],
|
|
761
770
|
"priority": 4,
|
|
762
|
-
"for_signals": [
|
|
771
|
+
"for_signals": [
|
|
772
|
+
"rsa-2048-cert-long-life"
|
|
773
|
+
],
|
|
763
774
|
"compensating_controls": [
|
|
764
775
|
"legacy_chain_for_pre-PQC_client_compat",
|
|
765
776
|
"transparency_log_entries_for_hybrid_certs"
|
|
@@ -773,7 +784,9 @@
|
|
|
773
784
|
"asset_inventory_baseline_exists == true"
|
|
774
785
|
],
|
|
775
786
|
"priority": 5,
|
|
776
|
-
"for_signals": [
|
|
787
|
+
"for_signals": [
|
|
788
|
+
"no-crypto-inventory"
|
|
789
|
+
],
|
|
777
790
|
"compensating_controls": [],
|
|
778
791
|
"estimated_time_hours": 40
|
|
779
792
|
},
|