open-source/qinglong
1
0
Fork 0
mirror of https://github.com/whyour/qinglong.git synced 2026-09-22 19:29:13 +08:00
Code Issues Packages Projects Releases Wiki Activity

feat(ql3): materialize offline deployment locks

Browse Source
This commit is contained in:
whyour
2026-08-16 13:39:50 +08:00
parent a44c213be1
commit 8c09850249
14 changed files with 1763 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files
test/back/ql3ClusterImageReleaseAudit.test.cjs
+24 -1
View File
@@ -31,6 +31,7 @@ test('accepts the reviewed native CI and digest release contracts', () => {
clusterAdminContextPreflight: true,
clusterAdminContextReadiness: true,
releaseVersionAudit: true,
deploymentLockMaterialization: true,
ociAttestations: true,
osVulnerabilityScan: {
scanner: 'trivy@0.70.0',
@@ -149,7 +150,29 @@ test('rejects removal of the durable release-catalog contract tests', () => {
);
assert.throws(
() => auditClusterImageCiWorkflow(mutated),
/durable catalog and workflow negative tests/,
/durable catalog, deployment-lock and workflow negative tests/,
);
});
test('rejects removal of the deployment-lock materialization contract tests', () => {
const mutated = ciSource.replace(
'test/back/ql3DeploymentLockContract.test.cjs',
'test/back/deployment-lock-tests-removed.test.cjs',
);
assert.throws(
() => auditClusterImageCiWorkflow(mutated),
/deployment-lock and workflow negative tests/,
);
});
test('rejects removal of the deployment image surface audit', () => {
const mutated = ciSource.replace(
'pnpm audit:deployment-lock-surfaces:ql3',
'echo deployment-image-surfaces-removed',
);
assert.throws(
() => auditClusterImageCiWorkflow(mutated),
/reviewed deployment image surfaces/,
);
});