ONB-02 · Artifact ingest layer (git/zip/firmware/mobile/container/URL/plaintext) #120

New Issue

2026-07-10T08:34:42Z

sharang commented

2026-07-10 08:34:42 +00:00

Part of #118.

Context

Onboarding must accept more than a git URL: source zip/tarball, firmware image/binary, mobile package (APK/AAB/IPA), container image, a live URL/endpoint, a PLC project (PLCopen XML / ST), or plaintext free-form info.

Scope

Ingest handlers per ArtifactKind: clone git; unpack/store archive; store firmware/mobile/container blobs; validate + normalize a live URL; parse-store PLC project; store plaintext.
Content-addressed storage for uploaded blobs (hash, dedup), with size limits and type/magic-byte validation (coordinate with the request-body-size-limit work in #59).
Normalize every ingested artifact to a local working path + recorded metadata for downstream scanners.
Reuse the existing repo clone/auth path (PAT/SSH) for GitRepo.

Acceptance criteria

Each artifact kind ingests to a normalized on-disk location + DB record.
Oversized/invalid uploads are rejected with a clear error.
Uploads are deduplicated by content hash.

Depends on

ONB-01 (data model).

Part of #118. ## Context Onboarding must accept more than a git URL: source zip/tarball, firmware image/binary, mobile package (APK/AAB/IPA), container image, a live URL/endpoint, a PLC project (PLCopen XML / ST), or plaintext free-form info. ## Scope - Ingest handlers per `ArtifactKind`: clone git; unpack/store archive; store firmware/mobile/container blobs; validate + normalize a live URL; parse-store PLC project; store plaintext. - Content-addressed storage for uploaded blobs (hash, dedup), with size limits and type/magic-byte validation (coordinate with the request-body-size-limit work in #59). - Normalize every ingested artifact to a local working path + recorded metadata for downstream scanners. - Reuse the existing repo clone/auth path (PAT/SSH) for `GitRepo`. ## Acceptance criteria - Each artifact kind ingests to a normalized on-disk location + DB record. - Oversized/invalid uploads are rejected with a clear error. - Uploads are deduplicated by content hash. ## Depends on ONB-01 (data model).

sharang added this to the Onboarding v1 milestone 2026-07-10 08:34:42 +00:00

sharang added the infrastructure enhancement onboarding labels 2026-07-10 08:34:42 +00:00

sharang referenced this issue

2026-07-10 08:41:02 +00:00

ONB-Epic · Multi-target artifact-aware onboarding wizard #118

sharang referenced this issue

2026-07-10 09:02:05 +00:00

ONB-15 · Unified scan-pipeline rewrite (feature-flagged run_target path) #133

sharang referenced this issue

2026-07-10 10:24:23 +00:00

feat(onboarding): unified multi-target model + scan matrix foundation #134

sharang referenced this issue