mirror of
https://github.com/SHOGGOTH-SECTOR/sica-fondt.git
synced 2026-08-01 08:30:20 +00:00
24f816b6a3
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):
- brain/ LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
dispatch, A51 channels, and the OSINT cluster
- knowledge/ LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
MITRE ATT&CK data
- reference/ defensive threat-reference (C3, shhbruh doc) + AdaYaml parser
License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.
Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.
https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
57 lines
1.5 KiB
Markdown
57 lines
1.5 KiB
Markdown
# API Reference: GitLab CI DevSecOps Pipeline
|
|
|
|
## GitLab Security Templates
|
|
| Template | Stage |
|
|
|----------|-------|
|
|
| `Security/SAST.gitlab-ci.yml` | Static analysis |
|
|
| `Security/DAST.gitlab-ci.yml` | Dynamic testing |
|
|
| `Security/Dependency-Scanning.gitlab-ci.yml` | Dependency audit |
|
|
| `Security/Container-Scanning.gitlab-ci.yml` | Container scan |
|
|
| `Security/Secret-Detection.gitlab-ci.yml` | Secret detection |
|
|
| `Security/IaC-Scanning.gitlab-ci.yml` | IaC security |
|
|
|
|
## .gitlab-ci.yml Structure
|
|
```yaml
|
|
include:
|
|
- template: Security/SAST.gitlab-ci.yml
|
|
- template: Security/Secret-Detection.gitlab-ci.yml
|
|
stages:
|
|
- build
|
|
- test
|
|
- security
|
|
- deploy
|
|
variables:
|
|
SECURE_LOG_LEVEL: info
|
|
```
|
|
|
|
## GitLab CI Lint API
|
|
```
|
|
POST /api/v4/projects/:id/ci/lint
|
|
PRIVATE-TOKEN: your-token
|
|
Body: {"content": "yaml-string"}
|
|
```
|
|
|
|
## Security Variables
|
|
| Variable | Description |
|
|
|----------|-------------|
|
|
| `SAST_DEFAULT_ANALYZERS` | Comma-separated analyzer list |
|
|
| `SAST_EXCLUDED_ANALYZERS` | Analyzers to skip |
|
|
| `CS_IMAGE` | Container image to scan |
|
|
| `DAST_WEBSITE` | Target URL for DAST |
|
|
| `SECRET_DETECTION_HISTORIC_SCAN` | Scan full history |
|
|
|
|
## Vulnerability Report API
|
|
```
|
|
GET /api/v4/projects/:id/vulnerability_findings
|
|
```
|
|
|
|
## Security Scanning Tools
|
|
| Tool | Type | Language |
|
|
|------|------|----------|
|
|
| Semgrep | SAST | Multi-language |
|
|
| Bandit | SAST | Python |
|
|
| Trivy | Container | Container images |
|
|
| Gitleaks | Secret | Git history |
|
|
| KICS | IaC | Terraform/CloudFormation |
|
|
| ZAP | DAST | Web applications |
|