ONLINE NETWORK (INTERNET-CONNECTED)
OFFLINE NETWORK (AIR-GAPPED)
GitLab CI · PIPELINE
1 · DEPENDENCY PACKAGING
2 · SECURITY FEEDS MIRROR
BUILD
SECURITY SCAN
DOC GENERATION
URL list
direct downloads
APT packages
Linux deps
MSVC packages
Windows deps
build-spec.yaml
Go Packager
Resolve & fetch deps
from URLs / APT / MSVC
Build archive + SHA-256
Artifacts
.tar.zst / .zip
+ SHA-256
checksums
OSV.dev
advisory DB
Emerging Threats
IDS ruleset
Coverity
SAST models
vuln / rule sources
DB Snapshots
OSV · ET · Coverity
pulled + verified
signed · versioned
Export
Staging
store
Data Diode
Import Store
Replicated artifacts
+ DB snapshots
checksum-verified
CI Runners
bash / PowerShell
Docker (Linux)
VMware (Windows)
Build · Linux
compile on
Docker runner
Build · Windows
compile on
VMware runner
Security Scan
osv-scanner (deps)
Coverity (SAST)
ET rules · gate
on new findings
Doc Generation
Markdown source
pandoc →
DOCX · PDF · HTML
pull · verify · pin
artifacts + deps
runs pipeline jobs
mirrored DBs
LEGEND
Online network
Offline (air-gapped)
GitLab CI pipeline
External input
Build / artifact flow
One-way diode
Security DB usage
Runner assignment
Text is not SVG - cannot display