feat(local): bind legacy adoption provenance

This commit is contained in:
whyour
2026-08-23 20:26:01 +08:00
parent 74ae891070
commit 31a9bcbe83
32 changed files with 1437 additions and 81 deletions
+4 -2
View File
@@ -2069,8 +2069,10 @@ function auditSourceImports(root, packagePath, findings) {
!(
path.relative(packageDirectory, filePath) ===
'src/deployment/reconciliation/application/secret-and-config/rowPlan.ts' &&
specifier ===
'@qinglong/local-admin/reconciliation-secret-and-config-inspection'
[
'@qinglong/local-admin/reconciliation-secret-and-config-inspection',
'@qinglong/local-sqlite/adoption-provenance',
].includes(specifier)
) &&
!(
[
+3 -3
View File
@@ -225,9 +225,9 @@ function expectedImageConfig(architecture, revision, image) {
'io.qinglong.ai': 'excluded',
'io.qinglong.local.application-config': '2,3,4',
'io.qinglong.local.compose-selection': '1',
'io.qinglong.local.sqlite-contract-max': '50',
'io.qinglong.local.sqlite-contract-min': '50',
'io.qinglong.local.sqlite-write-contract': '50',
'io.qinglong.local.sqlite-contract-max': '51',
'io.qinglong.local.sqlite-contract-min': '51',
'io.qinglong.local.sqlite-write-contract': '51',
'io.qinglong.profile': 'edge,standalone',
'org.opencontainers.image.description':
'QingLong 3.0 AI-excluded Edge and Standalone runtime',
+3 -3
View File
@@ -261,9 +261,9 @@ function auditDockerfile(contents, findings) {
!contents.includes('io.qinglong.ai="excluded"') ||
!contents.includes('io.qinglong.profile="edge,standalone"') ||
!contents.includes('io.qinglong.local.application-config="2,3,4"') ||
!contents.includes('io.qinglong.local.sqlite-contract-min="50"') ||
!contents.includes('io.qinglong.local.sqlite-contract-max="50"') ||
!contents.includes('io.qinglong.local.sqlite-write-contract="50"') ||
!contents.includes('io.qinglong.local.sqlite-contract-min="51"') ||
!contents.includes('io.qinglong.local.sqlite-contract-max="51"') ||
!contents.includes('io.qinglong.local.sqlite-write-contract="51"') ||
!contents.includes('io.qinglong.local.compose-selection="1"')
) {
addFinding(findings, 'RUNTIME_IDENTITY_OR_LABEL_DRIFT');