Skip to content

Repository navigation

Reference Application 0.1.0-alpha.1

Pre-release
Pre-release

Choose a tag to compare

View all tags
@cdcavell cdcavell released this 18 Oct 12:32
v0.1.0-alpha.1
c4f96a8
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

0.1.0-alpha.1 is the first pre-release of the AsiBackbone Reference Application. It marks the NCAT baseline and the completed first step of the integration walkthrough, before AsiBackbone itself is added in Step 2.

Important

This is an alpha pre-release. The Reference Application is an example, not a product. AsiBackbone is not yet integrated, and the sample governance rules are still planned.

What this release contains

  • NCAT 2.11.5 host: an ASP.NET Core application generated from the .NET Core Application Template 2.11.5, with cookie authentication and SQLite. The unmodified scaffold is preserved on the protected ncat-baseline branch and tagged ncat-v2.11.5, so git diff ncat-baseline main shows everything the Reference Application adds.

  • Documentation site: https://asibackbone.github.io/ReferenceApplication/ has the generated API reference and the Integration Walkthrough.

  • Walkthrough status:

    Step Status
    1. Scaffold from NCAT Complete
    2. Add AsiBackbone packages Planned (AsiBackbone 7.2.0)
    3. Register AsiBackbone services Planned (AsiBackbone 7.2.0)
    4. Define governance rules Planned
    5. Govern endpoints Planned
    6. Persist and verify audit evidence Planned

    The supplemental Refresh NCAT Baseline guide records how the baseline moved from NCAT 2.11.4 to 2.11.5.

  • Repository automation and controls:

    • CI covers build, format, tests, and CodeQL.
    • OWASP Dependency-Check runs with documented suppressions for cross-ecosystem OpenTelemetry false positives.
    • Workflow security analysis uses zizmor and actionlint.
    • OpenSSF Scorecard runs on the repository. Its exceptions for a single-maintainer reference repository are documented in eng/repository-controls/README.md.
    • DocFX builds are strict (--warningsAsErrors), and the desired branch rulesets for main and ncat-baseline are versioned under eng/repository-controls/.

Versioning

The release version is independent of the NCAT version. Assemblies report version 0.1.0.0, and the informational version is 0.1.0-alpha.1+<commit>. Later pre-releases (v0.1.0-alpha.N) will mark walkthrough steps as they land.

Changes

  • Refresh the NCAT baseline to 2.11.5 (#1, #2).
  • Add repository documentation, automation, and controls (#3, #4).
  • Order the landing-page project cards from Learning to Reference (#5).
  • Remove prescribed working-branch names from the documentation (#9).
  • Suppress cross-ecosystem OpenTelemetry CVE false positives (#10, #12).
  • Record the OpenSSF Scorecard exceptions for a single-maintainer reference repository (#13).
  • Set the release version to 0.1.0-alpha.1, and plan Steps 2 and 3 against AsiBackbone 7.2.0 (#11).

Full history: ncat-v2.11.4...v0.1.0-alpha.1

Assets 2
Loading