feat(ql3): publish complete release sets

2026-09-23 03:18:09 +08:00 · 2026-08-16 10:06:34 +08:00
parent bad8399cc3
commit 41549524d4
16 changed files with 1302 additions and 39 deletions
@@ -252,7 +252,8 @@ function auditClusterCopilotConsoleDistribution(options = {}) {
      '--predicate-type "https://qinglong.dev/attestations/release-candidate-contract/v1"',
      '--deny-self-hosted-runners',
      '--bundle-from-oci',
-      'Promote only the verified digest to immutable release tags',
+      'Promote tags only after the complete set is verified',
+      'Attest the complete release-set file provenance',
    ],
    'QL3_CLUSTER_ADMIN_RELEASE_WORKFLOW_DRIFT',
  );