STORY · Demo target fixtures — curated representative targets #187

Open
opened 2026-07-16 22:16:32 +00:00 by sharang · 0 comments
Owner

As a Certifai maintainer I want a curated set of demo targets so that
every scan path can be exercised repeatably.

Part of #186.

Scope

A versioned fixture set (public/OSS or synthetic) covering:

  • PlcSps composite — CODESYS control app (PLCopen XML / .projectarchive) +
    a device firmware image + a live/provisioned endpoint.
  • FirmwareBareMetal / RTOS — an MCU firmware source/image.
  • WebApp — a git repo (SAST) + a live URL (DAST).
  • A plain git SAST repo.

Acceptance criteria

  • Fixtures are versioned and reproducible (checked-in refs or a seed script).
  • Documented how to (re)onboard each as a target.
  • Consumed by the nightly regression story.
**As a** Certifai maintainer **I want** a curated set of demo targets **so that** every scan path can be exercised repeatably. Part of #186. ## Scope A versioned fixture set (public/OSS or synthetic) covering: - **PlcSps** composite — CODESYS control app (PLCopen XML / `.projectarchive`) + a device firmware image + a live/provisioned endpoint. - **FirmwareBareMetal / RTOS** — an MCU firmware source/image. - **WebApp** — a git repo (SAST) + a live URL (DAST). - A plain **git SAST** repo. ## Acceptance criteria - [ ] Fixtures are versioned and reproducible (checked-in refs or a seed script). - [ ] Documented how to (re)onboard each as a target. - [ ] Consumed by the nightly regression story.
sharang added the enhancementonboarding labels 2026-07-16 22:16:32 +00:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: sharang/compliance-scanner-agent#187