sharang/compliance-scanner-agent
1
0
Fork 0
Code Issues 79 Pull Requests 1 Actions Packages Projects Releases 1 Wiki Activity

ONB-12 · PLC / SPS onboarding specifics (PLCopen XML / ST) #130

New Issue
Open
opened 2026-07-10 08:34:47 +00:00 by sharang · 0 comments
sharang commented 2026-07-10 08:34:47 +00:00
Owner
Copy Link
Copy Source

Part of #118.

Context

PLC / SPS (IEC 61131-3) targets are code-only: Structured Text (ST) and PLCopen XML project files. This is the onboarding surface for the CS-E control-logic epic.

Scope

  • Ingest PLCopen XML / ST source or project zip; detect structure (ties to CS-E1 parser / RuSTy eval).
  • SAST = control-logic security rules (CS-E2) + LLM remediation hints (CS-E3); no DAST/pentest for PLC.
  • Represent PLC program units in the artifact model for the classifier and scan matrix.

Acceptance criteria

  • A PLCopen XML fixture and an ST fixture both onboard and route to control-logic SAST only.
  • Matrix correctly blocks DAST/pentest for PLC with a rationale.

Depends on

ONB-02, ONB-03, ONB-04. Ties to CS-E1/E2/E3 (#112/#113/#114).

Part of #118. ## Context PLC / SPS (IEC 61131-3) targets are code-only: Structured Text (ST) and PLCopen XML project files. This is the onboarding surface for the CS-E control-logic epic. ## Scope - Ingest PLCopen XML / ST source or project zip; detect structure (ties to CS-E1 parser / RuSTy eval). - SAST = control-logic security rules (CS-E2) + LLM remediation hints (CS-E3); no DAST/pentest for PLC. - Represent PLC program units in the artifact model for the classifier and scan matrix. ## Acceptance criteria - A PLCopen XML fixture and an ST fixture both onboard and route to control-logic SAST only. - Matrix correctly blocks DAST/pentest for PLC with a rationale. ## Depends on ONB-02, ONB-03, ONB-04. Ties to CS-E1/E2/E3 (#112/#113/#114).
sharang added this to the Onboarding v1 milestone 2026-07-10 08:34:47 +00:00
sharang added the enhancementonboarding labels 2026-07-10 08:34:47 +00:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
P0-demo
CERTifAI P0 demo build tickets (CS-*)
 bug
critical
enhancement
epic
Tracking issue spanning multiple sub-issues
 high
infrastructure
onboarding
Multi-target onboarding wizard redesign
 performance
security
v0.3.0
No labels enhancement onboarding
Milestone
No items
No Milestone Onboarding v1
Projects
Clear projects
No projects
Assignees
Clear assignees
Benjamin_Boenisch sharang (Sharang Parnerkar)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: sharang/compliance-scanner-agent#130