64 lines
7.5 KiB
XML
64 lines
7.5 KiB
XML
<svg xmlns="http://www.w3.org/2000/svg" width="960" height="590" viewBox="0 0 960 590" role="img" aria-labelledby="title desc">
|
|
<title id="title">Границы данных между правилом, SARIF result и контекстом</title>
|
|
<desc id="desc">Схема разделяет поля, которые описывает правило, формат SARIF, результат и location, от отдельного проектного контекста. Явное решение появляется только после соединения слоёв.</desc>
|
|
<rect width="960" height="590" rx="32" fill="#F8FAFC"/>
|
|
<rect x="32" y="28" width="896" height="66" rx="18" fill="#172554"/>
|
|
<text x="64" y="68" fill="#F8FAFC" font-family="-apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif" font-size="28" font-weight="700">SARIF и context: разные владельцы фактов</text>
|
|
<text x="64" y="86" fill="#BFDBFE" font-family="-apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif" font-size="15">Формат передаёт сигнал; проектная запись объясняет, что с ним делать</text>
|
|
|
|
<rect x="48" y="142" width="180" height="292" rx="20" fill="#E0F2FE" stroke="#0284C7" stroke-width="2"/>
|
|
<text x="72" y="181" fill="#075985" font-family="-apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif" font-size="23" font-weight="700">Rule</text>
|
|
<rect x="72" y="201" width="143" height="27" rx="13" fill="#BAE6FD"/>
|
|
<text x="86" y="220" fill="#075985" font-family="-apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif" font-size="13" font-weight="700">policy author</text>
|
|
<text x="72" y="264" fill="#0F172A" font-family="-apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif" font-size="18">id</text>
|
|
<text x="72" y="296" fill="#0F172A" font-family="-apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif" font-size="18">revision</text>
|
|
<text x="72" y="328" fill="#0F172A" font-family="-apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif" font-size="18">category</text>
|
|
<text x="72" y="360" fill="#0F172A" font-family="-apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif" font-size="18">default level</text>
|
|
<text x="72" y="402" fill="#475569" font-family="-apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif" font-size="15">называет гипотезу</text>
|
|
|
|
<path d="M242 288H256" fill="none" stroke="#64748B" stroke-width="5" stroke-linecap="round"/>
|
|
<path d="M248 276L264 288L248 300" fill="none" stroke="#64748B" stroke-width="5" stroke-linecap="round" stroke-linejoin="round"/>
|
|
|
|
<rect x="270" y="142" width="180" height="292" rx="20" fill="#FEF3C7" stroke="#D97706" stroke-width="2"/>
|
|
<text x="294" y="181" fill="#92400E" font-family="-apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif" font-size="23" font-weight="700">SARIF log</text>
|
|
<rect x="294" y="201" width="132" height="27" rx="13" fill="#FDE68A"/>
|
|
<text x="306" y="220" fill="#92400E" font-family="-apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif" font-size="13" font-weight="700">tool producer</text>
|
|
<text x="294" y="264" fill="#0F172A" font-family="-apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif" font-size="18">version 2.1.0</text>
|
|
<text x="294" y="296" fill="#0F172A" font-family="-apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif" font-size="18">tool.driver</text>
|
|
<text x="294" y="328" fill="#0F172A" font-family="-apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif" font-size="18">rules[]</text>
|
|
<text x="294" y="360" fill="#0F172A" font-family="-apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif" font-size="18">results[]</text>
|
|
<text x="294" y="402" fill="#475569" font-family="-apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif" font-size="15">передаёт структуру</text>
|
|
|
|
<path d="M464 288H478" fill="none" stroke="#64748B" stroke-width="5" stroke-linecap="round"/>
|
|
<path d="M470 276L486 288L470 300" fill="none" stroke="#64748B" stroke-width="5" stroke-linecap="round" stroke-linejoin="round"/>
|
|
|
|
<rect x="492" y="142" width="180" height="292" rx="20" fill="#F3E8FF" stroke="#9333EA" stroke-width="2"/>
|
|
<text x="516" y="181" fill="#6B21A8" font-family="-apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif" font-size="23" font-weight="700">Result</text>
|
|
<rect x="516" y="201" width="132" height="27" rx="13" fill="#E9D5FF"/>
|
|
<text x="528" y="220" fill="#6B21A8" font-family="-apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif" font-size="13" font-weight="700">analysis output</text>
|
|
<text x="516" y="264" fill="#0F172A" font-family="-apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif" font-size="18">ruleId + level</text>
|
|
<text x="516" y="296" fill="#0F172A" font-family="-apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif" font-size="18">message</text>
|
|
<text x="516" y="328" fill="#0F172A" font-family="-apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif" font-size="18">fingerprint</text>
|
|
<text x="516" y="360" fill="#0F172A" font-family="-apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif" font-size="18">URI + line</text>
|
|
<text x="516" y="402" fill="#475569" font-family="-apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif" font-size="15">указывает на место</text>
|
|
|
|
<path d="M686 288H700" fill="none" stroke="#64748B" stroke-width="5" stroke-linecap="round"/>
|
|
<path d="M692 276L708 288L692 300" fill="none" stroke="#64748B" stroke-width="5" stroke-linecap="round" stroke-linejoin="round"/>
|
|
|
|
<rect x="714" y="142" width="198" height="292" rx="20" fill="#DCFCE7" stroke="#16A34A" stroke-width="2"/>
|
|
<text x="738" y="181" fill="#166534" font-family="-apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif" font-size="23" font-weight="700">Контекст</text>
|
|
<rect x="738" y="201" width="150" height="27" rx="13" fill="#BBF7D0"/>
|
|
<text x="751" y="220" fill="#166534" font-family="-apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif" font-size="13" font-weight="700">component owner</text>
|
|
<text x="738" y="264" fill="#0F172A" font-family="-apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif" font-size="18">asset</text>
|
|
<text x="738" y="296" fill="#0F172A" font-family="-apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif" font-size="18">entry point</text>
|
|
<text x="738" y="328" fill="#0F172A" font-family="-apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif" font-size="18">boundary</text>
|
|
<text x="738" y="360" fill="#0F172A" font-family="-apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif" font-size="18">owner + scope</text>
|
|
<text x="738" y="402" fill="#166534" font-family="-apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif" font-size="15" font-weight="700">добавляет reviewer</text>
|
|
|
|
<path d="M170 471H794" fill="none" stroke="#475569" stroke-width="4" stroke-linecap="round"/>
|
|
<path d="M786 459L802 471L786 483" fill="none" stroke="#475569" stroke-width="4" stroke-linecap="round" stroke-linejoin="round"/>
|
|
<rect x="274" y="446" width="420" height="52" rx="18" fill="#0F172A"/>
|
|
<text x="345" y="479" fill="#F8FAFC" font-family="-apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif" font-size="20" font-weight="700">Решение: keep · tune · suppress</text>
|
|
<text x="48" y="548" fill="#64748B" font-family="-apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif" font-size="15">Synthetic схема: rule и SARIF не доказывают запуск, reachability, exploitability или outcome безопасности.</text>
|
|
</svg>
|