Surface.Env Package Release Note

Status: Published · 2025-11-23 Owners: Scanner Guild · BuildX Plugin Guild · Ops Guild Scope: Unblock SURFACE-ENV-03 and BuildX adoption by pinning package version for StellaOps.Scanner.Surface.Env.

Version & Build Inputs

Package ID: StellaOps.Scanner.Surface.Env
Version: 0.1.0-alpha.20251123 (semantic, date-stamped for sprint 136)
Source: src/Scanner/__Libraries/StellaOps.Scanner.Surface.Env/StellaOps.Scanner.Surface.Env.csproj
Pack command:
- dotnet pack src/Scanner/__Libraries/StellaOps.Scanner.Surface.Env/StellaOps.Scanner.Surface.Env.csproj -c Release -o .nuget/packages /p:Version=0.1.0-alpha.20251123
Restore sources: configured in nuget.config (nuget.org, stellaops internal feed).

Offline / Air-Gap Artefacts

The .nupkg is placed in .nuget/packages/ by the pack command above. For air-gap deployments, copy this cache to the target environment.
Manifest entry:
- packageId: StellaOps.Scanner.Surface.Env
- version: 0.1.0-alpha.20251123
- sha256: 7f79ec14cc52f0880904eccb6fbc8120bd7d316ab8d6390fef054ed11ee4716e
- size: 14080
- createdAt: 2025-11-23T00:00:00Z
No external network calls are required after packing; the offline kit consumes the local file.

Consumer Guidance

BuildX plugin (src/Scanner/StellaOps.Scanner.Sbomer.BuildXPlugin) should reference 0.1.0-alpha.20251123.
Scanner WebService/Worker should use the same version once Surface.Env integration tests pass (SCANNER-ENV-02).
Surface.Validation and Surface.Secrets depend on the env settings; keep prefix defaults and determinism rules from design/surface-env.md.

Verification

Run dotnet test for env library once restore is stable; until then, manual pack is acceptable for BuildX smoke tests.
Validate package contents:
- Contains StellaOps.Scanner.Surface.Env.dll and StellaOps.Scanner.Surface.Env.xml docs.
- lib/net10.0/ target only; no native assets.

Change Log

2025-11-23: Initial release note created to unblock SCANNER-ENV-03 and offline kit wiring; version pinned to 0.1.0-alpha.20251123.