open-source/qinglong
1
0
Fork 0
mirror of https://github.com/whyour/qinglong.git synced 2026-09-20 16:07:11 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix(ql3): bind alpha artifacts to CI evidence

Browse Source
This commit is contained in:
whyour
2026-08-27 06:57:08 +08:00
parent 4239464af6
commit 238df17fdf
10 changed files with 509 additions and 41 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/ql3-local-operator-image-audit.cjs
+25
View File
@@ -196,16 +196,41 @@ function auditWorkflow(contents, findings) {
'"${OPERATOR_IMAGE}" --version',
'scripts/ql3-local-alpha-trial-kit-live-contract.cjs',
'scripts/ql3-local-alpha-trial-kit-bundle.cjs',
'--mode=record-verification',
'--mode=create',
'--mode=audit',
'--application-sbom="${RUNNER_TEMP}/ql3-local-application.cdx.json"',
'--operator-sbom="${RUNNER_TEMP}/ql3-local-operator.cdx.json"',
'--verification-evidence="${RUNNER_TEMP}/ql3-local-alpha-verification-${{ matrix.image_arch }}.json"',
'--readme=docs/operations/ql3-local-alpha-trial-kit.md',
'--repository=${{ github.repository }}',
'--workflow-ref="${{ github.workflow_ref }}"',
'--workflow-sha=${{ github.workflow_sha }}',
'--event=${{ github.event_name }}',
'--job=${{ github.job }}',
'--run-id=${{ github.run_id }}',
'--run-attempt=${{ github.run_attempt }}',
];
for (const value of required) {
if (!contents.includes(value))
finding(findings, 'LOCAL_OPERATOR_CI_CONTRACT_DRIFT', value);
}
let cursor = -1;
for (const value of [
'name: Run the downloadable Local Alpha trial kit journey',
'name: Run authenticated Local API cancellation through real Linux processes',
'--mode=record-verification',
'--mode=create',
'--mode=audit',
'name: Upload the tested native Local Alpha trial kit',
]) {
const index = contents.indexOf(value, cursor + 1);
if (index <= cursor) {
finding(findings, 'LOCAL_OPERATOR_CI_GATE_ORDER_DRIFT', value);
break;
}
cursor = index;
}
}
function auditLocalOperatorImageContract(root) {