菜单
Software supply chain pillar — CASB catalog, shadow IT, SBOM gating. Use before CASB ingest or app catalog changes. Write software.contract.test.js first.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Data pillar — classification, DLP ingest (backlog). Use when adding Purview/ Macie-style signals or app-layer DLP. Write data.contract.test.js first.
Network pillar — segmentation, exposure scanning (backlog). Use when adding topology or port-exposure features. Write network.contract.test.js first.
Resilience engine — Git-to-cloud DR, RTO/RPO measurement. Use before recovery orchestrator or DR field changes. Write resilience.contract.test.js first.
SecOps engine — Sentinel ingest, incident lifecycle, FAIR trigger, SecOps UI. Use before incident API, SLA, or CISO dashboard changes. Write secops.contract.test.js first.
Devices pillar — multi-cloud asset register, DR posture, incident binding. Use before asset sync, CASB correlation, or register UI changes. Write devices.contract.test.js first.
Identity pillar (JIT elevation, Break Glass, RBAC). Use before changing auth, privileged access, or break-glass flows. Write identity.contract.test.js first.
| name | pillar-software |
| description | Software supply chain pillar — CASB catalog, shadow IT, SBOM gating. Use before CASB ingest or app catalog changes. Write software.contract.test.js first. |
NIST: GV.SC
Status: CASB ingest contracts active (shadow IT → asset_register + SecOps)
| Area | Paths |
|---|---|
| CASB ingest (pillar API) | api/software-router.js, services/software-casb-ingest.js |
| Legacy CASB bulk ingest | api/asset-router.js (/casb-ingest), services/casb-ingest-parser.js |
| Shadow IT schema | sql/software_casb_events.sql, sql/casb_shadow_fields.sql |
| App catalog | api/casb-app-catalog.js, db-casb-app-catalog-schema.sql |
ict-governance-framework/tests/contracts/software.contract.test.js
POST /api/software/ingest — persists shadow IT event with risk levelx-webhook-signature (401)deviceId when managed device existsSW-CASB-{eventId})npm run setup:software-casb
npm run test:contracts:software
npm run verify:post-feature # includes verify:casb-ingest before QG-601
npm run verify:casb-ingest
npm run verify:casb-polling
SOFTWARE_INGEST_WEBHOOK_SECRET / CASB_INGEST_WEBHOOK_SECRET