open-source/qinglong
1
0
Fork 0
mirror of https://github.com/whyour/qinglong.git synced 2026-09-20 16:07:11 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix(ci): authorize reconciliation apply boundaries

Browse Source
This commit is contained in:
whyour
2026-08-22 20:48:22 +08:00
parent 546b02a0bc
commit 4541d142d3
3 changed files with 102 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/ql3-cluster-dependency-audit.cjs
+23
View File
@@ -2027,6 +2027,21 @@ function auditSourceImports(root, packagePath, findings) {
'@qinglong/local-sqlite/authentication-read',
].includes(specifier)
) &&
!(
path.relative(packageDirectory, filePath) ===
'src/deployment/reconciliation/application/automation/applyCoordinator.ts' &&
[
'@qinglong/local-admin/reconciliation-automation-decision',
'@qinglong/local-owner-console/authenticated-command',
'@qinglong/local-sqlite/authentication-read',
'@qinglong/local-sqlite/rollout-safety',
].includes(specifier)
) &&
!(
path.relative(packageDirectory, filePath) ===
'src/deployment/reconciliation/application/automation/applyEvidence.ts' &&
specifier === '@qinglong/local-sqlite/rollout-safety'
) &&
!(
path.relative(packageDirectory, filePath) ===
'src/deployment/reconciliation/application/automation/planReader.ts' &&
@@ -2691,6 +2706,14 @@ function auditSourceImports(root, packagePath, findings) {
file: 'src/deployment/reconciliation/review/issuerKeyring.ts',
specifiers: ['@qinglong/runtime-core/local-secret'],
},
{
file: 'src/deployment/reconciliation/application/automation/decisionCoordinator.ts',
specifiers: ['@qinglong/runtime-core/security'],
},
{
file: 'src/deployment/reconciliation/application/automation/applyCoordinator.ts',
specifiers: ['@qinglong/runtime-core/security'],
},
].some(
({ file, specifiers }) =>
path.relative(packageDirectory, filePath) === file &&