StigElementExtension
Per-module element configuration. Set in each module's build.gradle.kts:
stig {
val sourceRepo by repos
val source_activities by groups
element {
group = source_activities
nativeBuild {
bazel {
target = "//activities/foo:foo"
}
}
softwareUnderAnalysis {
include(sourceRepo / "foo.cpp", sourceRepo / "bar.cpp")
}
analyzerInput {
interfacePoints {
entryPoint = "app::lifecycle::Activity::Step()"
topicsFile = sourceRepo / "activities/foo/foo_topics.json"
interfacePointsAnnotationFile = repos["model_repository"] /
"models/interface-definitions/Foo.json"
}
}
}
}Name, projectPath and moduleDir are derived from the module's location. The remaining fields are optional overrides on top of project-wide stigProject { ... } defaults (set in root build.gradle.kts).
Properties
Override of the parent element type, if needed.
Single severity threshold for pipeline problems.
Group reference. Use val source_activities by groups in the stig { } block.
Canonical Highway model element ID, i.e. MetamodelEntity.id for the context viewpoint element. For a top-level Kotlin declaration such as val fusion = Fusion(), this is the dot-separated package plus reference name, for example app.activities.example_activity.context.fusion.
Upstream implementation class name (e.g. the C++ class the element wraps, like "FusionActivity"). Used by source-code analysis tasks that need to match LLVM symbols against the implementation type.
Override of the upstream element directory path relative to the repo root. When non-null, analysis tasks (stigAnalysisP7CollectMetrics, stigAnalysisP7CollectDescriptions, etc.) use this path instead of the auto-derived Gradle module path.
Upstream namespace where implementationClassName lives (e.g. "app::aeb::fusion_activity").
Whether STIG import/synchronization is enabled.
Optional directory containing interface definition files.
Legacy/static interface-point import mode. Prefer P5 interfacePoints { mode } for analysis.
true once a nativeBuild { ... } block has been applied at this level.
Source-code patches applied to this element's upstream sources before Bazel build.
Override of the parent placement, if needed.
Repo reference. Override the group's repo if needed. Use val sourceRepo by repos in the stig { } block.
Functions
P6 — analyzer execution settings.
P5 — analyzer-input settings.
P7 — complexity metric extraction.
P7 — generated diagram formats and per-artifact size limit.
P7 — function description extraction.
Flow gaps that have already been assessed for this activity. Declare only defective sink rows, using the logical sink field emitted by P5.
Model-check configuration for stigCheckModel, per viewpoint.
P1 — native target build and compile-command extraction.
Append a StigPatchSpec directly.
P3 provenance-build settings.
P4 — source-file selection for the analyzer boundary.
P7 — source-code observation scope used by parsers/metrics.