Operational Excellence Guide
Unified Execution Framework & Reproducible Environments
This project is engineered with a "Shift-Left" operational philosophy. By utilizing Taskfile as our orchestration engine and Docker-wrapped binaries, we ensure that the cryptographic boundary validation you run on your local workstation is bit-for-bit identical to the one executed in our FIPS-compliant CI/CD pipelines.
:material-laptop-config: Local Environment Prerequisites
To maintain the integrity of the build and audit process, your local environment must strictly adhere to the following minimalist footprint:
- Python 3.13+: The primary engine for metadata processing and data injection.
- Pipenv: Used for deterministic Python dependency management and virtual environment isolation.
- Docker Engine: Required to run "Executables as Containers," ensuring zero local tool pollution.
- Task: The task runner used to orchestrate the entire lifecycle. Install Taskfile
The "Docker-as-Executable" Architecture
Every critical operation (Security Scanning, FIPS KAT Tests, Compliance Auditing) is encapsulated within a pre-configured Docker image.
Why this matters:
1. Zero Drift: No version mismatch between your local trivy or openssl and the CI versions.
2. Environment Isolation: No need to install complex audit tools or FIPS providers on your host OS.
3. Reproducibility: If a compliance test fails in GitHub Actions, you can reproduce the exact failure locally with a single command.
Automated Operational Registry
This registry provides a live inventory of the project's orchestration layer. Each task is designed to be atomic, idempotent, and portable across developer workstations and CI runners.
Standard Development Workflows
1. Initialization & Setup
Prepare the local bridge infrastructure and build the required audit images.
2. Executing FIPS Audit Suite
Run the full functional verification against the FIPS boundary (Standard & Distroless).
3. Compliance & Vulnerability Scanning
Perform deep static analysis and container hardening checks.
4. Documentation & Performance Dashboard
Generate performance benchmarks and build the local preview of this dashboard.
Integrity Guarantee
Parity Statement
This project strictly follows SLSA Level 3 supply chain standards. Every task defined here is an abstraction of the same logic used in .github/workflows/build.yml. By executing these tasks, you are participating in a verified, high-assurance cryptographic build process.