@marinjursic/prc-linux-arm64 0.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +21 -0
- package/README.md +3 -0
- package/bin/LICENSE +21 -0
- package/bin/README.md +335 -0
- package/bin/THIRD_PARTY_NOTICES.md +74 -0
- package/bin/adapters/checkov-v3.3.8.yaml +50 -0
- package/bin/adapters/gitleaks-v8.30.0.yaml +63 -0
- package/bin/adapters/grype-v0.116.1.yaml +58 -0
- package/bin/adapters/syft-v1.51.0.yaml +54 -0
- package/bin/catalog/assertions/core-repository.yaml +625 -0
- package/bin/catalog/assertions/iac.yaml +24 -0
- package/bin/catalog/assertions/supply-chain.yaml +45 -0
- package/bin/catalog/control-contracts.json +1 -0
- package/bin/catalog/control-id-registry.json +110470 -0
- package/bin/catalog/objectives/core-repository.yaml +243 -0
- package/bin/catalog/objectives/iac.yaml +13 -0
- package/bin/catalog/objectives/supply-chain.yaml +13 -0
- package/bin/catalog/profiles/api.yaml +12 -0
- package/bin/catalog/profiles/core-repository.yaml +49 -0
- package/bin/catalog/profiles/iac.yaml +18 -0
- package/bin/catalog/profiles/kubernetes.yaml +15 -0
- package/bin/catalog/profiles/quick.yaml +27 -0
- package/bin/catalog/profiles/supply-chain.yaml +20 -0
- package/bin/docs/architecture/adapters.md +380 -0
- package/bin/docs/architecture/agent-providers.md +188 -0
- package/bin/docs/architecture/applicability.md +80 -0
- package/bin/docs/architecture/catalog-integrity.md +85 -0
- package/bin/docs/architecture/evidence-and-results.md +154 -0
- package/bin/docs/architecture/execution-plans.md +61 -0
- package/bin/docs/architecture/product-contract.md +76 -0
- package/bin/docs/architecture/publisher-trust.md +68 -0
- package/bin/docs/architecture/remediation-contract.md +113 -0
- package/bin/docs/architecture/trust-model.md +95 -0
- package/bin/docs/assets/hero.svg +37 -0
- package/bin/docs/assets/logo.svg +13 -0
- package/bin/docs/assets/production-readiness-scan-demo-poster.png +0 -0
- package/bin/docs/assets/production-readiness-scan-demo.gif +0 -0
- package/bin/docs/assets/production-readiness-scan-demo.mp4 +0 -0
- package/bin/docs/assets/social-card.png +0 -0
- package/bin/docs/assets/social-card.svg +40 -0
- package/bin/docs/checklists/00-readiness-principle.md +17 -0
- package/bin/docs/checklists/01-release-foundations.md +91 -0
- package/bin/docs/checklists/02-product-risk-architecture.md +136 -0
- package/bin/docs/checklists/03-source-build-supply-chain.md +97 -0
- package/bin/docs/checklists/04-environments-quality-experience.md +226 -0
- package/bin/docs/checklists/05-application-security.md +320 -0
- package/bin/docs/checklists/06-data-privacy-performance.md +166 -0
- package/bin/docs/checklists/07-reliability-operations.md +355 -0
- package/bin/docs/checklists/08-maintenance-vendors-compliance.md +112 -0
- package/bin/docs/checklists/09-conditional-modules.md +229 -0
- package/bin/docs/checklists/10-evidence-and-decision.md +111 -0
- package/bin/docs/engineering/00-overview.md +51 -0
- package/bin/docs/engineering/01-governance-and-foundations.md +919 -0
- package/bin/docs/engineering/02-product-and-requirements.md +186 -0
- package/bin/docs/engineering/03-user-experience-web-and-content.md +1352 -0
- package/bin/docs/engineering/04-architecture-and-design.md +387 -0
- package/bin/docs/engineering/05-code-quality-and-implementation.md +1103 -0
- package/bin/docs/engineering/06-application-services-and-apis.md +476 -0
- package/bin/docs/engineering/07-data-and-information-lifecycle.md +1009 -0
- package/bin/docs/engineering/08-security-and-cryptography.md +1215 -0
- package/bin/docs/engineering/09-privacy-and-data-protection.md +205 -0
- package/bin/docs/engineering/10-verification-and-testing.md +841 -0
- package/bin/docs/engineering/11-developer-experience-platform-and-delivery.md +1013 -0
- package/bin/docs/engineering/12-operations-sre-and-support.md +795 -0
- package/bin/docs/engineering/13-documentation-and-knowledge.md +349 -0
- package/bin/docs/engineering/14-trust-safety-and-ecosystems.md +330 -0
- package/bin/docs/engineering/15-ai-ml-and-ai-assisted-development.md +785 -0
- package/bin/docs/engineering/16-specialized-domains-and-release-assurance.md +775 -0
- package/bin/docs/engineering/source-manifest.md +479 -0
- package/bin/docs/guides/ai-assisted-review.md +61 -0
- package/bin/docs/guides/getting-started.md +78 -0
- package/bin/docs/index.md +66 -0
- package/bin/docs/prompts/evidence-challenge.md +26 -0
- package/bin/docs/prompts/full-readiness-review.md +34 -0
- package/bin/docs/prompts/release-diff-review.md +31 -0
- package/bin/docs/records/evidence-record.md +42 -0
- package/bin/docs/records/go-no-go-decision.md +63 -0
- package/bin/docs/records/release-assessment.md +124 -0
- package/bin/docs/records/risk-exception.md +64 -0
- package/bin/docs/references.md +52 -0
- package/bin/docs/scanner/ai-control-review.md +208 -0
- package/bin/docs/scanner/benchmarks.md +122 -0
- package/bin/docs/scanner/cli-contract.md +130 -0
- package/bin/docs/scanner/configuration.md +101 -0
- package/bin/docs/scanner/control-contracts.md +47 -0
- package/bin/docs/scanner/core-repository.md +62 -0
- package/bin/docs/scanner/diff-and-invalidation.md +79 -0
- package/bin/docs/scanner/doctor.md +71 -0
- package/bin/docs/scanner/getting-started.md +355 -0
- package/bin/docs/scanner/go-http-timeouts.md +96 -0
- package/bin/docs/scanner/infrastructure-policy.md +64 -0
- package/bin/docs/scanner/kubernetes-workloads.md +63 -0
- package/bin/docs/scanner/mcp-agent-integration.md +138 -0
- package/bin/docs/scanner/openapi-contracts.md +75 -0
- package/bin/docs/scanner/private-key-armor.md +44 -0
- package/bin/docs/scanner/releases.md +160 -0
- package/bin/docs/scanner/remediation.md +273 -0
- package/bin/docs/scanner/risk-exceptions.md +52 -0
- package/bin/docs/scanner/security-walkthrough.md +236 -0
- package/bin/docs/scanner/state-and-history.md +113 -0
- package/bin/docs/scanner/supply-chain.md +132 -0
- package/bin/docs/scanner/test-discovery.md +60 -0
- package/bin/docs/stylesheets/extra.css +183 -0
- package/bin/fixtures/benchmarks/core-native/suite-comprehensive.yaml +302 -0
- package/bin/fixtures/benchmarks/core-native/suite.yaml +59 -0
- package/bin/fixtures/benchmarks/core-native/targets/baseline/README.md +3 -0
- package/bin/fixtures/benchmarks/core-native/targets/baseline/app.go +1 -0
- package/bin/fixtures/benchmarks/core-native/targets/conflict-template/app.js +5 -0
- package/bin/fixtures/benchmarks/core-native/targets/container-risky-template/Dockerfile +2 -0
- package/bin/fixtures/benchmarks/core-native/targets/container-valid/Dockerfile +2 -0
- package/bin/fixtures/benchmarks/core-native/targets/dependency-lock-missing/package.json +5 -0
- package/bin/fixtures/benchmarks/core-native/targets/dependency-lock-present/package-lock.json +6 -0
- package/bin/fixtures/benchmarks/core-native/targets/dependency-lock-present/package.json +5 -0
- package/bin/fixtures/benchmarks/core-native/targets/empty-manifest-template/package.json +1 -0
- package/bin/fixtures/benchmarks/core-native/targets/final-newline-template/app.py +1 -0
- package/bin/fixtures/benchmarks/core-native/targets/foundation-present/.github/CODEOWNERS +1 -0
- package/bin/fixtures/benchmarks/core-native/targets/foundation-present/.github/dependabot.yml +6 -0
- package/bin/fixtures/benchmarks/core-native/targets/foundation-present/.github/workflows/validate.yml +15 -0
- package/bin/fixtures/benchmarks/core-native/targets/foundation-present/CODE_OF_CONDUCT.md +3 -0
- package/bin/fixtures/benchmarks/core-native/targets/foundation-present/CONTRIBUTING.md +3 -0
- package/bin/fixtures/benchmarks/core-native/targets/foundation-present/LICENSE +1 -0
- package/bin/fixtures/benchmarks/core-native/targets/foundation-present/README.md +3 -0
- package/bin/fixtures/benchmarks/core-native/targets/foundation-present/SECURITY.md +3 -0
- package/bin/fixtures/benchmarks/core-native/targets/foundation-present/package-lock.json +6 -0
- package/bin/fixtures/benchmarks/core-native/targets/foundation-present/package.json +7 -0
- package/bin/fixtures/benchmarks/core-native/targets/foundation-present/tests/example.test.js +3 -0
- package/bin/fixtures/benchmarks/core-native/targets/go-http-server-timeout-risky-template/go.mod +3 -0
- package/bin/fixtures/benchmarks/core-native/targets/go-http-server-timeout-risky-template/server.go +18 -0
- package/bin/fixtures/benchmarks/core-native/targets/go-http-timeout-malformed-template/client.go +3 -0
- package/bin/fixtures/benchmarks/core-native/targets/go-http-timeout-malformed-template/go.mod +3 -0
- package/bin/fixtures/benchmarks/core-native/targets/go-http-timeout-risky-template/client.go +7 -0
- package/bin/fixtures/benchmarks/core-native/targets/go-http-timeout-risky-template/go.mod +3 -0
- package/bin/fixtures/benchmarks/core-native/targets/go-http-timeout-safe/client.go +22 -0
- package/bin/fixtures/benchmarks/core-native/targets/go-http-timeout-safe/go.mod +3 -0
- package/bin/fixtures/benchmarks/core-native/targets/go-http-timeout-safe/hazards_test.go +8 -0
- package/bin/fixtures/benchmarks/core-native/targets/kubernetes-risky-template/deployment.yaml +27 -0
- package/bin/fixtures/benchmarks/core-native/targets/kubernetes-valid/deployment.yaml +26 -0
- package/bin/fixtures/benchmarks/core-native/targets/openapi-operation-ids-risky-template/openapi.yaml +17 -0
- package/bin/fixtures/benchmarks/core-native/targets/openapi-operation-responses-risky-template/openapi.yaml +11 -0
- package/bin/fixtures/benchmarks/core-native/targets/openapi-root-malformed-template/openapi.yaml +5 -0
- package/bin/fixtures/benchmarks/core-native/targets/openapi-root-risky-template/openapi.yaml +5 -0
- package/bin/fixtures/benchmarks/core-native/targets/openapi-root-valid/openapi.yaml +17 -0
- package/bin/fixtures/benchmarks/core-native/targets/package-test-command/app.js +3 -0
- package/bin/fixtures/benchmarks/core-native/targets/package-test-command/package.json +7 -0
- package/bin/fixtures/benchmarks/core-native/targets/package-test-placeholder/app.js +3 -0
- package/bin/fixtures/benchmarks/core-native/targets/package-test-placeholder/package.json +7 -0
- package/bin/fixtures/benchmarks/core-native/targets/private-key-template/deploy.pem +3 -0
- package/bin/fixtures/benchmarks/core-native/targets/readme-missing/fixture.txt +1 -0
- package/bin/fixtures/benchmarks/core-native/targets/runtime-missing/package-lock.json +6 -0
- package/bin/fixtures/benchmarks/core-native/targets/runtime-missing/package.json +4 -0
- package/bin/fixtures/benchmarks/core-native/targets/terraform-locked/.terraform.lock.hcl +3 -0
- package/bin/fixtures/benchmarks/core-native/targets/terraform-locked/main.tf +7 -0
- package/bin/fixtures/benchmarks/core-native/targets/terraform-unlocked-template/.terraform.lock.hcl +3 -0
- package/bin/fixtures/benchmarks/core-native/targets/terraform-unlocked-template/main.tf +7 -0
- package/bin/fixtures/benchmarks/core-native/targets/test-declaration-valid/app.py +2 -0
- package/bin/fixtures/benchmarks/core-native/targets/test-declaration-valid/tests/test_app.py +5 -0
- package/bin/fixtures/benchmarks/core-native/targets/test-path-without-declaration/app.py +2 -0
- package/bin/fixtures/benchmarks/core-native/targets/test-path-without-declaration/tests/test_app.py +1 -0
- package/bin/fixtures/benchmarks/core-native/targets/workflow-malformed/.github/workflows/validate.yml +1 -0
- package/bin/fixtures/benchmarks/core-native/targets/workflow-no-jobs/.github/workflows/empty.yml +9 -0
- package/bin/fixtures/benchmarks/core-native/targets/workflow-risky/.github/workflows/risky.yml +10 -0
- package/bin/fixtures/benchmarks/core-native/targets/workflow-valid/.github/workflows/validate.yml +14 -0
- package/bin/packs/core-foundation.yaml +25 -0
- package/bin/packs/core-native.yaml +59 -0
- package/bin/prc +0 -0
- package/bin/schemas/adapter-execution-v0.1.schema.json +101 -0
- package/bin/schemas/adapter-execution-v0.2.schema.json +128 -0
- package/bin/schemas/adapter-execution.schema.json +145 -0
- package/bin/schemas/adapter-fixture-report.schema.json +59 -0
- package/bin/schemas/adapter-fixture-suite.schema.json +104 -0
- package/bin/schemas/adapter-manifest-v0.1.schema.json +55 -0
- package/bin/schemas/adapter-manifest-v0.2.schema.json +122 -0
- package/bin/schemas/adapter-manifest-v0.3.schema.json +172 -0
- package/bin/schemas/adapter-manifest.schema.json +299 -0
- package/bin/schemas/adapter-message.schema.json +136 -0
- package/bin/schemas/adapter-registry-report.schema.json +13 -0
- package/bin/schemas/adapter-registry.schema.json +47 -0
- package/bin/schemas/agent-execution-v0.1.schema.json +26 -0
- package/bin/schemas/agent-execution.schema.json +26 -0
- package/bin/schemas/agent-failure-v0.1.schema.json +102 -0
- package/bin/schemas/agent-failure.schema.json +102 -0
- package/bin/schemas/agent-output-v0.1.schema.json +36 -0
- package/bin/schemas/agent-output.schema.json +36 -0
- package/bin/schemas/agent-task-v0.1.schema.json +44 -0
- package/bin/schemas/agent-task.schema.json +46 -0
- package/bin/schemas/assertion-catalog.schema.json +69 -0
- package/bin/schemas/benchmark-report.schema.json +94 -0
- package/bin/schemas/benchmark-suite.schema.json +116 -0
- package/bin/schemas/catalog-bundle.schema.json +27 -0
- package/bin/schemas/catalog-manifest.schema.json +23 -0
- package/bin/schemas/checkov-iac-policy-report.schema.json +82 -0
- package/bin/schemas/control-contracts.schema.json +44 -0
- package/bin/schemas/control-review-output.schema.json +51 -0
- package/bin/schemas/doctor.schema.json +53 -0
- package/bin/schemas/evidence-v0.1.schema.json +21 -0
- package/bin/schemas/evidence.schema.json +21 -0
- package/bin/schemas/finding-v0.1.schema.json +70 -0
- package/bin/schemas/finding.schema.json +70 -0
- package/bin/schemas/fix-contract-v0.1.schema.json +35 -0
- package/bin/schemas/fix-contract-v0.2.schema.json +46 -0
- package/bin/schemas/fix-contract-v0.3.schema.json +49 -0
- package/bin/schemas/fix-contract.schema.json +49 -0
- package/bin/schemas/grype-vulnerability-report.schema.json +88 -0
- package/bin/schemas/history.schema.json +37 -0
- package/bin/schemas/invalidation.schema.json +86 -0
- package/bin/schemas/inventory-v0.1.schema.json +42 -0
- package/bin/schemas/inventory-v0.2.schema.json +95 -0
- package/bin/schemas/inventory-v0.3.schema.json +139 -0
- package/bin/schemas/inventory.schema.json +139 -0
- package/bin/schemas/objective-catalog.schema.json +62 -0
- package/bin/schemas/pack-report.schema.json +16 -0
- package/bin/schemas/pack.schema.json +53 -0
- package/bin/schemas/plan-v0.1.schema.json +31 -0
- package/bin/schemas/plan-v0.2.schema.json +32 -0
- package/bin/schemas/plan-v0.3.schema.json +44 -0
- package/bin/schemas/plan-v0.4.schema.json +48 -0
- package/bin/schemas/plan-v0.5.schema.json +49 -0
- package/bin/schemas/plan-v0.6.schema.json +137 -0
- package/bin/schemas/plan.schema.json +137 -0
- package/bin/schemas/profile.schema.json +42 -0
- package/bin/schemas/project-config.schema.json +128 -0
- package/bin/schemas/release-manifest-v0.1.schema.json +86 -0
- package/bin/schemas/release-manifest-v0.2.schema.json +146 -0
- package/bin/schemas/release-manifest-v0.3.schema.json +146 -0
- package/bin/schemas/release-manifest.schema.json +6 -0
- package/bin/schemas/remediation-candidate-v0.1.schema.json +51 -0
- package/bin/schemas/remediation-candidate-v0.2.schema.json +51 -0
- package/bin/schemas/remediation-candidate-v0.3.schema.json +51 -0
- package/bin/schemas/remediation-candidate-v0.4.schema.json +69 -0
- package/bin/schemas/remediation-candidate.schema.json +69 -0
- package/bin/schemas/remediation-run-v0.1.schema.json +69 -0
- package/bin/schemas/remediation-run-v0.2.schema.json +78 -0
- package/bin/schemas/remediation-run-v0.3.schema.json +86 -0
- package/bin/schemas/remediation-run-v0.4.schema.json +86 -0
- package/bin/schemas/remediation-run-v0.5.schema.json +131 -0
- package/bin/schemas/remediation-run-v0.6.schema.json +143 -0
- package/bin/schemas/remediation-run-v0.7.schema.json +160 -0
- package/bin/schemas/remediation-run-v0.8.schema.json +161 -0
- package/bin/schemas/remediation-run.schema.json +161 -0
- package/bin/schemas/risk-exception-verification.schema.json +17 -0
- package/bin/schemas/risk-exception.schema.json +137 -0
- package/bin/schemas/run-result-v0.1.schema.json +54 -0
- package/bin/schemas/run-result-v0.10.schema.json +64 -0
- package/bin/schemas/run-result-v0.11.schema.json +146 -0
- package/bin/schemas/run-result-v0.2.schema.json +60 -0
- package/bin/schemas/run-result-v0.3.schema.json +52 -0
- package/bin/schemas/run-result-v0.4.schema.json +52 -0
- package/bin/schemas/run-result-v0.5.schema.json +60 -0
- package/bin/schemas/run-result-v0.6.schema.json +61 -0
- package/bin/schemas/run-result-v0.7.schema.json +61 -0
- package/bin/schemas/run-result-v0.8.schema.json +61 -0
- package/bin/schemas/run-result-v0.9.schema.json +77 -0
- package/bin/schemas/run-result.schema.json +165 -0
- package/bin/schemas/signature-verification.schema.json +22 -0
- package/bin/schemas/signature.schema.json +18 -0
- package/bin/schemas/state-check-v0.1.schema.json +27 -0
- package/bin/schemas/state-check.schema.json +28 -0
- package/bin/schemas/trust-store.schema.json +50 -0
- package/bin/schemas/verification-execution-v0.1.schema.json +105 -0
- package/bin/schemas/verification-execution.schema.json +105 -0
- package/bin/schemas/version-v0.1.schema.json +27 -0
- package/bin/schemas/version.schema.json +27 -0
- package/manifest.json +9 -0
- package/package.json +28 -0
|
@@ -0,0 +1,69 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
3
|
+
"$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/assertion-catalog.schema.json",
|
|
4
|
+
"title": "Production Readiness Atomic Assertion Catalog",
|
|
5
|
+
"type": "object",
|
|
6
|
+
"additionalProperties": false,
|
|
7
|
+
"required": ["schema_version", "catalog_version", "assertions"],
|
|
8
|
+
"properties": {
|
|
9
|
+
"schema_version": {"const": "prc.assertions/v0.1"},
|
|
10
|
+
"catalog_version": {"type": "string", "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$"},
|
|
11
|
+
"assertions": {
|
|
12
|
+
"type": "array",
|
|
13
|
+
"minItems": 1,
|
|
14
|
+
"items": {"$ref": "#/$defs/assertion"}
|
|
15
|
+
}
|
|
16
|
+
},
|
|
17
|
+
"$defs": {
|
|
18
|
+
"evidence_requirement": {
|
|
19
|
+
"type": "object",
|
|
20
|
+
"additionalProperties": false,
|
|
21
|
+
"required": ["kind", "minimum_authority", "description"],
|
|
22
|
+
"properties": {
|
|
23
|
+
"kind": {"type": "string", "pattern": "^[a-z0-9-]+$"},
|
|
24
|
+
"minimum_authority": {"enum": ["declared", "repository", "executed", "artifact", "environment", "human"]},
|
|
25
|
+
"description": {"type": "string", "minLength": 1}
|
|
26
|
+
}
|
|
27
|
+
},
|
|
28
|
+
"assertion": {
|
|
29
|
+
"type": "object",
|
|
30
|
+
"additionalProperties": false,
|
|
31
|
+
"required": [
|
|
32
|
+
"id",
|
|
33
|
+
"revision",
|
|
34
|
+
"control_ids",
|
|
35
|
+
"title",
|
|
36
|
+
"statement",
|
|
37
|
+
"applicability",
|
|
38
|
+
"evidence_required",
|
|
39
|
+
"implementation_id",
|
|
40
|
+
"severity",
|
|
41
|
+
"gate",
|
|
42
|
+
"remediation_class"
|
|
43
|
+
],
|
|
44
|
+
"properties": {
|
|
45
|
+
"id": {"type": "string", "pattern": "^PRC-A-[A-Z0-9]+-[0-9]{3}$"},
|
|
46
|
+
"revision": {"type": "integer", "minimum": 1},
|
|
47
|
+
"control_ids": {
|
|
48
|
+
"type": "array",
|
|
49
|
+
"minItems": 1,
|
|
50
|
+
"uniqueItems": true,
|
|
51
|
+
"items": {"type": "string", "pattern": "^(PRC-[0-9]{2}-[0-9]{3}|USEQ-[A-F0-9]{8})$"}
|
|
52
|
+
},
|
|
53
|
+
"title": {"type": "string", "minLength": 1},
|
|
54
|
+
"statement": {"type": "string", "minLength": 1},
|
|
55
|
+
"applicability": {"type": "string", "minLength": 1},
|
|
56
|
+
"evidence_required": {
|
|
57
|
+
"type": "array",
|
|
58
|
+
"minItems": 1,
|
|
59
|
+
"items": {"$ref": "#/$defs/evidence_requirement"}
|
|
60
|
+
},
|
|
61
|
+
"implementation_id": {"type": "string", "pattern": "^prc\\.[a-z0-9.-]+@[0-9]+\\.[0-9]+$"},
|
|
62
|
+
"parameters": {"type": "object"},
|
|
63
|
+
"severity": {"enum": ["info", "low", "medium", "high", "critical"]},
|
|
64
|
+
"gate": {"enum": ["advisory", "required", "no-go"]},
|
|
65
|
+
"remediation_class": {"enum": ["R0", "R1", "R2", "R3", "R4", "R5", "R6"]}
|
|
66
|
+
}
|
|
67
|
+
}
|
|
68
|
+
}
|
|
69
|
+
}
|
|
@@ -0,0 +1,94 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
3
|
+
"$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/benchmark-report.schema.json",
|
|
4
|
+
"title": "Production Readiness Benchmark Report v0.1",
|
|
5
|
+
"type": "object",
|
|
6
|
+
"additionalProperties": false,
|
|
7
|
+
"required": ["schema_version", "suite_id", "suite_digest", "corpus_digest", "catalog_digest", "profile_id", "evaluated_at", "quality_budget", "summary", "metrics", "cases", "quality_failures", "passed"],
|
|
8
|
+
"properties": {
|
|
9
|
+
"schema_version": {"const": "prc.benchmark-report/v0.1"},
|
|
10
|
+
"suite_id": {"type": "string", "pattern": "^prc\\.benchmark\\.[a-z0-9.-]+@[0-9]+\\.[0-9]+$"},
|
|
11
|
+
"suite_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
|
|
12
|
+
"corpus_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
|
|
13
|
+
"catalog_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
|
|
14
|
+
"profile_id": {"type": "string", "pattern": "^prc/[a-z0-9-]+$"},
|
|
15
|
+
"evaluated_at": {"type": "string", "format": "date-time"},
|
|
16
|
+
"quality_budget": {"$ref": "benchmark-suite.schema.json#/$defs/quality_budget"},
|
|
17
|
+
"summary": {"$ref": "#/$defs/summary"},
|
|
18
|
+
"metrics": {"$ref": "#/$defs/metrics"},
|
|
19
|
+
"cases": {"type": "array", "minItems": 1, "maxItems": 100, "items": {"$ref": "#/$defs/case_result"}},
|
|
20
|
+
"quality_failures": {"type": "array", "items": {"type": "string", "minLength": 1}},
|
|
21
|
+
"passed": {"type": "boolean"}
|
|
22
|
+
},
|
|
23
|
+
"$defs": {
|
|
24
|
+
"outcome_counts": {
|
|
25
|
+
"type": "object",
|
|
26
|
+
"additionalProperties": false,
|
|
27
|
+
"required": ["pass", "fail", "not_applicable", "unknown", "manual_review", "stale", "conflicting"],
|
|
28
|
+
"properties": {
|
|
29
|
+
"pass": {"type": "integer", "minimum": 0},
|
|
30
|
+
"fail": {"type": "integer", "minimum": 0},
|
|
31
|
+
"not_applicable": {"type": "integer", "minimum": 0},
|
|
32
|
+
"unknown": {"type": "integer", "minimum": 0},
|
|
33
|
+
"manual_review": {"type": "integer", "minimum": 0},
|
|
34
|
+
"stale": {"type": "integer", "minimum": 0},
|
|
35
|
+
"conflicting": {"type": "integer", "minimum": 0}
|
|
36
|
+
}
|
|
37
|
+
},
|
|
38
|
+
"summary": {
|
|
39
|
+
"type": "object",
|
|
40
|
+
"additionalProperties": false,
|
|
41
|
+
"required": ["cases", "expectations", "matched", "mismatched", "deterministic_cases", "expected_outcomes"],
|
|
42
|
+
"properties": {
|
|
43
|
+
"cases": {"type": "integer", "minimum": 1},
|
|
44
|
+
"expectations": {"type": "integer", "minimum": 1},
|
|
45
|
+
"matched": {"type": "integer", "minimum": 0},
|
|
46
|
+
"mismatched": {"type": "integer", "minimum": 0},
|
|
47
|
+
"deterministic_cases": {"type": "integer", "minimum": 0},
|
|
48
|
+
"expected_outcomes": {"$ref": "#/$defs/outcome_counts"}
|
|
49
|
+
}
|
|
50
|
+
},
|
|
51
|
+
"metrics": {
|
|
52
|
+
"type": "object",
|
|
53
|
+
"additionalProperties": false,
|
|
54
|
+
"required": ["true_positive", "false_positive", "false_negative", "true_negative", "precision", "recall", "false_positive_rate"],
|
|
55
|
+
"properties": {
|
|
56
|
+
"true_positive": {"type": "integer", "minimum": 0},
|
|
57
|
+
"false_positive": {"type": "integer", "minimum": 0},
|
|
58
|
+
"false_negative": {"type": "integer", "minimum": 0},
|
|
59
|
+
"true_negative": {"type": "integer", "minimum": 0},
|
|
60
|
+
"precision": {"type": "number", "minimum": 0, "maximum": 1},
|
|
61
|
+
"recall": {"type": "number", "minimum": 0, "maximum": 1},
|
|
62
|
+
"false_positive_rate": {"type": "number", "minimum": 0, "maximum": 1}
|
|
63
|
+
}
|
|
64
|
+
},
|
|
65
|
+
"expectation_result": {
|
|
66
|
+
"type": "object",
|
|
67
|
+
"additionalProperties": false,
|
|
68
|
+
"required": ["assertion_id", "expected_assessment", "expected_execution", "actual_assessment", "actual_execution", "summary", "matched"],
|
|
69
|
+
"properties": {
|
|
70
|
+
"assertion_id": {"type": "string", "pattern": "^PRC-A-[A-Z0-9]+-[0-9]{3}$"},
|
|
71
|
+
"expected_assessment": {"enum": ["pass", "fail", "unknown", "manual_review", "not_applicable", "stale", "conflicting"]},
|
|
72
|
+
"expected_execution": {"enum": ["not_run", "completed", "blocked", "error"]},
|
|
73
|
+
"actual_assessment": {"enum": ["pass", "fail", "unknown", "manual_review", "not_applicable", "stale", "conflicting"]},
|
|
74
|
+
"actual_execution": {"enum": ["not_run", "completed", "blocked", "error"]},
|
|
75
|
+
"summary": {"type": "string", "minLength": 1},
|
|
76
|
+
"matched": {"type": "boolean"}
|
|
77
|
+
}
|
|
78
|
+
},
|
|
79
|
+
"case_result": {
|
|
80
|
+
"type": "object",
|
|
81
|
+
"additionalProperties": false,
|
|
82
|
+
"required": ["id", "target", "inventory_digest", "run_id", "deterministic", "passed", "expectations"],
|
|
83
|
+
"properties": {
|
|
84
|
+
"id": {"type": "string", "pattern": "^[a-z0-9][a-z0-9.-]{0,127}$"},
|
|
85
|
+
"target": {"type": "string", "minLength": 1},
|
|
86
|
+
"inventory_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
|
|
87
|
+
"run_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
|
|
88
|
+
"deterministic": {"type": "boolean"},
|
|
89
|
+
"passed": {"type": "boolean"},
|
|
90
|
+
"expectations": {"type": "array", "minItems": 1, "maxItems": 1000, "items": {"$ref": "#/$defs/expectation_result"}}
|
|
91
|
+
}
|
|
92
|
+
}
|
|
93
|
+
}
|
|
94
|
+
}
|
|
@@ -0,0 +1,116 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
3
|
+
"$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/benchmark-suite.schema.json",
|
|
4
|
+
"title": "Production Readiness Benchmark Suite v0.2",
|
|
5
|
+
"type": "object",
|
|
6
|
+
"additionalProperties": false,
|
|
7
|
+
"required": ["schema_version", "id", "title", "profile_id", "cases", "quality_budget"],
|
|
8
|
+
"properties": {
|
|
9
|
+
"schema_version": {"enum": ["prc.benchmark-suite/v0.1", "prc.benchmark-suite/v0.2"]},
|
|
10
|
+
"id": {"type": "string", "pattern": "^prc\\.benchmark\\.[a-z0-9.-]+@[0-9]+\\.[0-9]+$"},
|
|
11
|
+
"title": {"type": "string", "minLength": 1},
|
|
12
|
+
"profile_id": {"type": "string", "pattern": "^prc/[a-z0-9-]+$"},
|
|
13
|
+
"cases": {
|
|
14
|
+
"type": "array",
|
|
15
|
+
"minItems": 1,
|
|
16
|
+
"maxItems": 100,
|
|
17
|
+
"uniqueItems": true,
|
|
18
|
+
"items": {"$ref": "#/$defs/case"}
|
|
19
|
+
},
|
|
20
|
+
"quality_budget": {"$ref": "#/$defs/quality_budget"}
|
|
21
|
+
},
|
|
22
|
+
"$defs": {
|
|
23
|
+
"expectation": {
|
|
24
|
+
"type": "object",
|
|
25
|
+
"additionalProperties": false,
|
|
26
|
+
"required": ["assertion_id", "assessment", "execution"],
|
|
27
|
+
"properties": {
|
|
28
|
+
"assertion_id": {"type": "string", "pattern": "^PRC-A-[A-Z0-9]+-[0-9]{3}$"},
|
|
29
|
+
"assessment": {"enum": ["pass", "fail", "unknown", "manual_review", "not_applicable", "stale", "conflicting"]},
|
|
30
|
+
"execution": {"enum": ["not_run", "completed", "blocked", "error"]}
|
|
31
|
+
}
|
|
32
|
+
},
|
|
33
|
+
"setup_operation": {
|
|
34
|
+
"oneOf": [
|
|
35
|
+
{
|
|
36
|
+
"type": "object",
|
|
37
|
+
"additionalProperties": false,
|
|
38
|
+
"required": ["operation", "path", "find"],
|
|
39
|
+
"properties": {
|
|
40
|
+
"operation": {"const": "replace_text"},
|
|
41
|
+
"path": {"$ref": "#/$defs/relative_path"},
|
|
42
|
+
"find": {"type": "string", "minLength": 1, "maxLength": 4096},
|
|
43
|
+
"replace": {"type": "string", "maxLength": 4096}
|
|
44
|
+
}
|
|
45
|
+
},
|
|
46
|
+
{
|
|
47
|
+
"type": "object",
|
|
48
|
+
"additionalProperties": false,
|
|
49
|
+
"required": ["operation", "path"],
|
|
50
|
+
"properties": {
|
|
51
|
+
"operation": {"enum": ["remove_final_newline", "truncate"]},
|
|
52
|
+
"path": {"$ref": "#/$defs/relative_path"}
|
|
53
|
+
}
|
|
54
|
+
},
|
|
55
|
+
{
|
|
56
|
+
"type": "object",
|
|
57
|
+
"additionalProperties": false,
|
|
58
|
+
"required": ["operation", "path", "mode"],
|
|
59
|
+
"properties": {
|
|
60
|
+
"operation": {"const": "chmod"},
|
|
61
|
+
"path": {"$ref": "#/$defs/relative_path"},
|
|
62
|
+
"mode": {"type": "integer", "minimum": 0, "maximum": 511}
|
|
63
|
+
}
|
|
64
|
+
},
|
|
65
|
+
{
|
|
66
|
+
"type": "object",
|
|
67
|
+
"additionalProperties": false,
|
|
68
|
+
"required": ["operation", "value"],
|
|
69
|
+
"properties": {
|
|
70
|
+
"operation": {"const": "git_head"},
|
|
71
|
+
"value": {"type": "string", "pattern": "^[0-9a-f]{40,64}$"}
|
|
72
|
+
}
|
|
73
|
+
}
|
|
74
|
+
]
|
|
75
|
+
},
|
|
76
|
+
"relative_path": {
|
|
77
|
+
"type": "string",
|
|
78
|
+
"pattern": "^[A-Za-z0-9._-]+(?:/[A-Za-z0-9._-]+)*$",
|
|
79
|
+
"not": {"pattern": "(^|/)\\.\\.?(/|$)"}
|
|
80
|
+
},
|
|
81
|
+
"case": {
|
|
82
|
+
"type": "object",
|
|
83
|
+
"additionalProperties": false,
|
|
84
|
+
"required": ["id", "target", "expectations"],
|
|
85
|
+
"properties": {
|
|
86
|
+
"id": {"type": "string", "pattern": "^[a-z0-9][a-z0-9.-]{0,127}$"},
|
|
87
|
+
"target": {"$ref": "#/$defs/relative_path"},
|
|
88
|
+
"setup": {
|
|
89
|
+
"type": "array",
|
|
90
|
+
"minItems": 1,
|
|
91
|
+
"maxItems": 16,
|
|
92
|
+
"items": {"$ref": "#/$defs/setup_operation"}
|
|
93
|
+
},
|
|
94
|
+
"expectations": {
|
|
95
|
+
"type": "array",
|
|
96
|
+
"minItems": 1,
|
|
97
|
+
"maxItems": 1000,
|
|
98
|
+
"uniqueItems": true,
|
|
99
|
+
"items": {"$ref": "#/$defs/expectation"}
|
|
100
|
+
}
|
|
101
|
+
}
|
|
102
|
+
},
|
|
103
|
+
"quality_budget": {
|
|
104
|
+
"type": "object",
|
|
105
|
+
"additionalProperties": false,
|
|
106
|
+
"required": ["minimum_precision", "minimum_recall", "maximum_false_positive_rate", "maximum_mismatches", "require_determinism"],
|
|
107
|
+
"properties": {
|
|
108
|
+
"minimum_precision": {"type": "number", "minimum": 0, "maximum": 1},
|
|
109
|
+
"minimum_recall": {"type": "number", "minimum": 0, "maximum": 1},
|
|
110
|
+
"maximum_false_positive_rate": {"type": "number", "minimum": 0, "maximum": 1},
|
|
111
|
+
"maximum_mismatches": {"type": "integer", "minimum": 0, "maximum": 10000},
|
|
112
|
+
"require_determinism": {"type": "boolean"}
|
|
113
|
+
}
|
|
114
|
+
}
|
|
115
|
+
}
|
|
116
|
+
}
|
|
@@ -0,0 +1,27 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
3
|
+
"$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/catalog-bundle.schema.json",
|
|
4
|
+
"title": "Production Readiness Canonical Catalog Bundle v0.1",
|
|
5
|
+
"type": "object",
|
|
6
|
+
"additionalProperties": false,
|
|
7
|
+
"required": ["schema_version", "manifest", "objectives", "assertions", "profiles"],
|
|
8
|
+
"properties": {
|
|
9
|
+
"schema_version": {"const": "prc.catalog-bundle/v0.1"},
|
|
10
|
+
"manifest": {"$ref": "catalog-manifest.schema.json"},
|
|
11
|
+
"objectives": {
|
|
12
|
+
"type": "array",
|
|
13
|
+
"minItems": 1,
|
|
14
|
+
"items": {"$ref": "objective-catalog.schema.json#/$defs/objective"}
|
|
15
|
+
},
|
|
16
|
+
"assertions": {
|
|
17
|
+
"type": "array",
|
|
18
|
+
"minItems": 1,
|
|
19
|
+
"items": {"$ref": "assertion-catalog.schema.json#/$defs/assertion"}
|
|
20
|
+
},
|
|
21
|
+
"profiles": {
|
|
22
|
+
"type": "array",
|
|
23
|
+
"minItems": 1,
|
|
24
|
+
"items": {"$ref": "profile.schema.json"}
|
|
25
|
+
}
|
|
26
|
+
}
|
|
27
|
+
}
|
|
@@ -0,0 +1,23 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
3
|
+
"$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/catalog-manifest.schema.json",
|
|
4
|
+
"title": "Production Readiness Catalog Manifest v0.1",
|
|
5
|
+
"type": "object",
|
|
6
|
+
"additionalProperties": false,
|
|
7
|
+
"required": [
|
|
8
|
+
"schema_version",
|
|
9
|
+
"catalog_version",
|
|
10
|
+
"catalog_digest",
|
|
11
|
+
"objective_count",
|
|
12
|
+
"assertion_count",
|
|
13
|
+
"profile_count"
|
|
14
|
+
],
|
|
15
|
+
"properties": {
|
|
16
|
+
"schema_version": {"const": "prc.catalog-manifest/v0.1"},
|
|
17
|
+
"catalog_version": {"type": "string", "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$"},
|
|
18
|
+
"catalog_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
|
|
19
|
+
"objective_count": {"type": "integer", "minimum": 1},
|
|
20
|
+
"assertion_count": {"type": "integer", "minimum": 1},
|
|
21
|
+
"profile_count": {"type": "integer", "minimum": 1}
|
|
22
|
+
}
|
|
23
|
+
}
|
|
@@ -0,0 +1,82 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
3
|
+
"$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/checkov-iac-policy-report.schema.json",
|
|
4
|
+
"title": "PRC normalized Checkov IaC policy report",
|
|
5
|
+
"type": "object",
|
|
6
|
+
"additionalProperties": false,
|
|
7
|
+
"required": ["schema", "tool", "summary", "expected_paths", "analyzed_paths", "unsupported_paths", "findings"],
|
|
8
|
+
"properties": {
|
|
9
|
+
"schema": {"const": "prc.checkov-iac-policy-report/v1"},
|
|
10
|
+
"tool": {
|
|
11
|
+
"type": "object",
|
|
12
|
+
"additionalProperties": false,
|
|
13
|
+
"required": ["name", "version"],
|
|
14
|
+
"properties": {
|
|
15
|
+
"name": {"const": "checkov"},
|
|
16
|
+
"version": {"const": "3.3.8"}
|
|
17
|
+
}
|
|
18
|
+
},
|
|
19
|
+
"summary": {
|
|
20
|
+
"type": "object",
|
|
21
|
+
"additionalProperties": false,
|
|
22
|
+
"required": ["passed", "failed", "resources", "frameworks"],
|
|
23
|
+
"properties": {
|
|
24
|
+
"passed": {"type": "integer", "minimum": 0},
|
|
25
|
+
"failed": {"type": "integer", "minimum": 0},
|
|
26
|
+
"resources": {"type": "integer", "minimum": 0},
|
|
27
|
+
"frameworks": {
|
|
28
|
+
"type": "array",
|
|
29
|
+
"maxItems": 4,
|
|
30
|
+
"items": {"$ref": "#/$defs/framework"}
|
|
31
|
+
}
|
|
32
|
+
}
|
|
33
|
+
},
|
|
34
|
+
"expected_paths": {"$ref": "#/$defs/paths"},
|
|
35
|
+
"analyzed_paths": {"$ref": "#/$defs/paths"},
|
|
36
|
+
"unsupported_paths": {"$ref": "#/$defs/paths"},
|
|
37
|
+
"findings": {
|
|
38
|
+
"type": "array",
|
|
39
|
+
"maxItems": 100000,
|
|
40
|
+
"items": {"$ref": "#/$defs/finding"}
|
|
41
|
+
}
|
|
42
|
+
},
|
|
43
|
+
"$defs": {
|
|
44
|
+
"path": {
|
|
45
|
+
"type": "string",
|
|
46
|
+
"minLength": 1,
|
|
47
|
+
"maxLength": 16384,
|
|
48
|
+
"pattern": "^[^/]"
|
|
49
|
+
},
|
|
50
|
+
"paths": {
|
|
51
|
+
"type": "array",
|
|
52
|
+
"maxItems": 10000,
|
|
53
|
+
"uniqueItems": true,
|
|
54
|
+
"items": {"$ref": "#/$defs/path"}
|
|
55
|
+
},
|
|
56
|
+
"framework": {
|
|
57
|
+
"type": "object",
|
|
58
|
+
"additionalProperties": false,
|
|
59
|
+
"required": ["name", "passed", "failed", "resources"],
|
|
60
|
+
"properties": {
|
|
61
|
+
"name": {"enum": ["terraform", "terraform_json", "kubernetes", "dockerfile"]},
|
|
62
|
+
"passed": {"type": "integer", "minimum": 0},
|
|
63
|
+
"failed": {"type": "integer", "minimum": 0},
|
|
64
|
+
"resources": {"type": "integer", "minimum": 0}
|
|
65
|
+
}
|
|
66
|
+
},
|
|
67
|
+
"finding": {
|
|
68
|
+
"type": "object",
|
|
69
|
+
"additionalProperties": false,
|
|
70
|
+
"required": ["check_id", "check_name", "framework", "path", "line_start", "line_end", "resource"],
|
|
71
|
+
"properties": {
|
|
72
|
+
"check_id": {"type": "string", "pattern": "^(CKV2?|BC)_[A-Z0-9][A-Z0-9_]{0,31}_[A-Za-z0-9][A-Za-z0-9._-]{0,127}$"},
|
|
73
|
+
"check_name": {"type": "string", "minLength": 1, "maxLength": 16384},
|
|
74
|
+
"framework": {"enum": ["terraform", "terraform_json", "kubernetes", "dockerfile"]},
|
|
75
|
+
"path": {"$ref": "#/$defs/path"},
|
|
76
|
+
"line_start": {"type": "integer", "minimum": 1},
|
|
77
|
+
"line_end": {"type": "integer", "minimum": 1},
|
|
78
|
+
"resource": {"type": "string", "minLength": 1, "maxLength": 16384}
|
|
79
|
+
}
|
|
80
|
+
}
|
|
81
|
+
}
|
|
82
|
+
}
|
|
@@ -0,0 +1,44 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
3
|
+
"$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/control-contracts.schema.json",
|
|
4
|
+
"title": "Production Readiness Control Contracts v0.1",
|
|
5
|
+
"type": "object",
|
|
6
|
+
"additionalProperties": false,
|
|
7
|
+
"required": ["schema_version", "registry_sha256", "registry_version", "contract_count", "contracts"],
|
|
8
|
+
"properties": {
|
|
9
|
+
"schema_version": {"const": "prc.control-contracts/v0.1"},
|
|
10
|
+
"registry_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
|
|
11
|
+
"registry_version": {"type": "string", "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$"},
|
|
12
|
+
"contract_count": {"type": "integer", "minimum": 1, "maximum": 100000},
|
|
13
|
+
"contracts": {
|
|
14
|
+
"type": "array",
|
|
15
|
+
"minItems": 1,
|
|
16
|
+
"maxItems": 100000,
|
|
17
|
+
"items": {"$ref": "#/$defs/contract"}
|
|
18
|
+
}
|
|
19
|
+
},
|
|
20
|
+
"$defs": {
|
|
21
|
+
"contract": {
|
|
22
|
+
"type": "object",
|
|
23
|
+
"additionalProperties": false,
|
|
24
|
+
"required": ["control_id", "revision", "contract_status", "canonical_control_id", "evaluation_class", "automation_class", "applicability_class", "atomicity", "complete_inventory_required", "negative_condition", "project_thresholds_required", "evidence_authorities", "not_applicable_proof", "reviewer_status", "contract_sha256"],
|
|
25
|
+
"properties": {
|
|
26
|
+
"control_id": {"type": "string", "pattern": "^(PRC-[0-9]{2}-[0-9]{3}|USEQ-[A-F0-9]{8})$"},
|
|
27
|
+
"revision": {"type": "integer", "minimum": 1},
|
|
28
|
+
"contract_status": {"enum": ["generated_unreviewed", "reviewed", "retired"]},
|
|
29
|
+
"canonical_control_id": {"type": "string", "pattern": "^(PRC-[0-9]{2}-[0-9]{3}|USEQ-[A-F0-9]{8})$"},
|
|
30
|
+
"evaluation_class": {"enum": ["repository", "environment", "human_external", "mixed", "unclassified"]},
|
|
31
|
+
"automation_class": {"enum": ["deterministic_candidate", "ai_advisory_candidate", "environment_evidence_required", "human_or_external_required", "mixed_evidence_required"]},
|
|
32
|
+
"applicability_class": {"enum": ["conditional", "scope_required"]},
|
|
33
|
+
"atomicity": {"enum": ["apparently_atomic", "compound_review_required"]},
|
|
34
|
+
"complete_inventory_required": {"type": "boolean"},
|
|
35
|
+
"negative_condition": {"type": "boolean"},
|
|
36
|
+
"project_thresholds_required": {"type": "boolean"},
|
|
37
|
+
"evidence_authorities": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"enum": ["declared", "repository", "artifact", "environment", "human"]}},
|
|
38
|
+
"not_applicable_proof": {"type": "string", "minLength": 1, "maxLength": 1000},
|
|
39
|
+
"reviewer_status": {"enum": ["generated_unreviewed", "expert_reviewed"]},
|
|
40
|
+
"contract_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"}
|
|
41
|
+
}
|
|
42
|
+
}
|
|
43
|
+
}
|
|
44
|
+
}
|
|
@@ -0,0 +1,51 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
3
|
+
"$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/control-review-output.schema.json",
|
|
4
|
+
"title": "Advisory complete-control AI review output",
|
|
5
|
+
"type": "object",
|
|
6
|
+
"additionalProperties": false,
|
|
7
|
+
"required": ["schema_version", "task_id", "reviews"],
|
|
8
|
+
"properties": {
|
|
9
|
+
"schema_version": {"const": "prc.control-review-output/v0.1"},
|
|
10
|
+
"task_id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
|
|
11
|
+
"reviews": {
|
|
12
|
+
"type": "array",
|
|
13
|
+
"minItems": 1,
|
|
14
|
+
"maxItems": 8,
|
|
15
|
+
"items": {
|
|
16
|
+
"type": "object",
|
|
17
|
+
"additionalProperties": false,
|
|
18
|
+
"required": ["control_id", "assessment_candidate", "applicability_candidate", "confidence", "reason", "advice", "evidence", "limitations"],
|
|
19
|
+
"properties": {
|
|
20
|
+
"control_id": {"type": "string", "pattern": "^(PRC-[0-9]{2}-[0-9]{3}|USEQ-[A-F0-9]{8})$"},
|
|
21
|
+
"assessment_candidate": {"enum": ["advisory_pass_candidate", "advisory_fail_candidate", "needs_evidence", "not_applicable_candidate"]},
|
|
22
|
+
"applicability_candidate": {"enum": ["applicable", "not_applicable", "undetermined"]},
|
|
23
|
+
"confidence": {"enum": ["low", "medium", "high"]},
|
|
24
|
+
"reason": {"type": "string", "minLength": 1, "maxLength": 16384},
|
|
25
|
+
"advice": {"type": "string", "maxLength": 16384},
|
|
26
|
+
"evidence": {
|
|
27
|
+
"type": "array",
|
|
28
|
+
"maxItems": 256,
|
|
29
|
+
"items": {
|
|
30
|
+
"type": "object",
|
|
31
|
+
"additionalProperties": false,
|
|
32
|
+
"required": ["path", "line"],
|
|
33
|
+
"properties": {
|
|
34
|
+
"path": {"type": "string", "minLength": 1, "maxLength": 4096},
|
|
35
|
+
"line": {"type": "integer", "minimum": 1},
|
|
36
|
+
"column": {"type": "integer", "minimum": 0}
|
|
37
|
+
}
|
|
38
|
+
}
|
|
39
|
+
},
|
|
40
|
+
"limitations": {
|
|
41
|
+
"type": "array",
|
|
42
|
+
"minItems": 1,
|
|
43
|
+
"maxItems": 256,
|
|
44
|
+
"uniqueItems": true,
|
|
45
|
+
"items": {"type": "string", "minLength": 1, "maxLength": 16384}
|
|
46
|
+
}
|
|
47
|
+
}
|
|
48
|
+
}
|
|
49
|
+
}
|
|
50
|
+
}
|
|
51
|
+
}
|
|
@@ -0,0 +1,53 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
3
|
+
"$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/doctor.schema.json",
|
|
4
|
+
"title": "Production Readiness Checklist Doctor Report v0.1",
|
|
5
|
+
"type": "object",
|
|
6
|
+
"additionalProperties": false,
|
|
7
|
+
"required": ["schema_version", "generated_at", "platform", "architecture", "target", "catalog_root", "ready", "summary", "checks"],
|
|
8
|
+
"properties": {
|
|
9
|
+
"schema_version": {"const": "prc.doctor/v0.1"},
|
|
10
|
+
"generated_at": {"type": "string", "format": "date-time"},
|
|
11
|
+
"platform": {"type": "string", "minLength": 1},
|
|
12
|
+
"architecture": {"type": "string", "minLength": 1},
|
|
13
|
+
"target": {"type": "string", "minLength": 1},
|
|
14
|
+
"catalog_root": {"type": "string", "minLength": 1},
|
|
15
|
+
"ready": {"type": "boolean"},
|
|
16
|
+
"summary": {
|
|
17
|
+
"type": "object",
|
|
18
|
+
"additionalProperties": false,
|
|
19
|
+
"required": ["passed", "warnings", "failed"],
|
|
20
|
+
"properties": {
|
|
21
|
+
"passed": {"type": "integer", "minimum": 0},
|
|
22
|
+
"warnings": {"type": "integer", "minimum": 0},
|
|
23
|
+
"failed": {"type": "integer", "minimum": 0}
|
|
24
|
+
}
|
|
25
|
+
},
|
|
26
|
+
"checks": {
|
|
27
|
+
"type": "array",
|
|
28
|
+
"minItems": 5,
|
|
29
|
+
"items": {
|
|
30
|
+
"type": "object",
|
|
31
|
+
"additionalProperties": false,
|
|
32
|
+
"required": ["id", "status", "required", "summary", "details"],
|
|
33
|
+
"properties": {
|
|
34
|
+
"id": {"type": "string", "pattern": "^[a-z][a-z0-9.-]+$"},
|
|
35
|
+
"status": {"enum": ["pass", "warn", "fail"]},
|
|
36
|
+
"required": {"type": "boolean"},
|
|
37
|
+
"summary": {"type": "string", "minLength": 1},
|
|
38
|
+
"details": {"type": "array", "items": {"type": "string", "minLength": 1}}
|
|
39
|
+
},
|
|
40
|
+
"allOf": [
|
|
41
|
+
{
|
|
42
|
+
"if": {"properties": {"status": {"const": "warn"}}, "required": ["status"]},
|
|
43
|
+
"then": {"properties": {"required": {"const": false}}}
|
|
44
|
+
},
|
|
45
|
+
{
|
|
46
|
+
"if": {"properties": {"status": {"const": "fail"}}, "required": ["status"]},
|
|
47
|
+
"then": {"properties": {"required": {"const": true}}}
|
|
48
|
+
}
|
|
49
|
+
]
|
|
50
|
+
}
|
|
51
|
+
}
|
|
52
|
+
}
|
|
53
|
+
}
|
|
@@ -0,0 +1,21 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
3
|
+
"$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/evidence-v0.1.schema.json",
|
|
4
|
+
"title": "Production Readiness Evidence Envelope v0.1",
|
|
5
|
+
"type": "object",
|
|
6
|
+
"additionalProperties": false,
|
|
7
|
+
"required": ["schema_version", "id", "kind", "authority", "producer", "target_digest", "source", "observed_at", "summary"],
|
|
8
|
+
"properties": {
|
|
9
|
+
"schema_version": {"const": "prc.evidence/v0.1"},
|
|
10
|
+
"id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
|
|
11
|
+
"kind": {"type": "string"},
|
|
12
|
+
"authority": {"enum": ["declared", "repository", "executed", "artifact", "environment", "human"]},
|
|
13
|
+
"producer": {"type": "string"},
|
|
14
|
+
"target_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
|
|
15
|
+
"source": {"type": "string"},
|
|
16
|
+
"content_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
|
|
17
|
+
"size": {"type": "integer", "minimum": 0},
|
|
18
|
+
"observed_at": {"type": "string", "format": "date-time"},
|
|
19
|
+
"summary": {"type": "string", "minLength": 1}
|
|
20
|
+
}
|
|
21
|
+
}
|
|
@@ -0,0 +1,21 @@
|
|
|
1
|
+
{
|
|
2
|
+
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
3
|
+
"$id": "https://marinjursic.github.io/production-readiness-checklist/schemas/evidence.schema.json",
|
|
4
|
+
"title": "Production Readiness Evidence Envelope",
|
|
5
|
+
"type": "object",
|
|
6
|
+
"additionalProperties": false,
|
|
7
|
+
"required": ["schema_version", "id", "kind", "authority", "producer", "target_digest", "source", "observed_at", "summary"],
|
|
8
|
+
"properties": {
|
|
9
|
+
"schema_version": {"const": "prc.evidence/v0.1"},
|
|
10
|
+
"id": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
|
|
11
|
+
"kind": {"type": "string"},
|
|
12
|
+
"authority": {"enum": ["declared", "repository", "executed", "artifact", "environment", "human"]},
|
|
13
|
+
"producer": {"type": "string"},
|
|
14
|
+
"target_digest": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
|
|
15
|
+
"source": {"type": "string"},
|
|
16
|
+
"content_sha256": {"type": "string", "pattern": "^[0-9a-f]{64}$"},
|
|
17
|
+
"size": {"type": "integer", "minimum": 0},
|
|
18
|
+
"observed_at": {"type": "string", "format": "date-time"},
|
|
19
|
+
"summary": {"type": "string", "minLength": 1}
|
|
20
|
+
}
|
|
21
|
+
}
|