ONLINE NETWORK (INTERNET-CONNECTED)
OFFLINE NETWORK (AIR-GAPPED)
GitLab CI · PIPELINE
1 · DEPENDENCY PACKAGING
2 · SECURITY FEEDS MIRROR
BUILD
SECURITY SCAN
DOC GENERATION
URL list
direct downloads

APT packages
Linux deps

MSVC packages
Windows deps


build-spec.yaml
Go Packager

Resolve & fetch deps
from URLs / APT / MSVC
Build archive + SHA-256
Artifacts

.tar.zst / .zip
+ SHA-256
checksums
OSV.dev
advisory DB

Emerging Threats
IDS ruleset

Coverity
SAST models


vuln / rule sources
DB Snapshots

OSV · ET · Coverity
pulled + verified
signed · versioned
Export

Staging
store
Data Diode
Import Store

Replicated artifacts
+ DB snapshots
checksum-verified
CI Runners

bash / PowerShell
Docker (Linux)
VMware (Windows)
Build · Linux

compile on
Docker runner
Build · Windows

compile on
VMware runner
Security Scan

osv-scanner (deps)
Coverity (SAST)
ET rules · gate
on new findings
Doc Generation

Markdown source
pandoc →
DOCX · PDF · HTML
pull · verify · pin
artifacts + deps
runs pipeline jobs
mirrored DBs
LEGEND
Online network
Offline (air-gapped)
GitLab CI pipeline
External input
Build / artifact flow
One-way diode
Security DB usage
Runner assignment
Text is not SVG - cannot display