mirror of
https://github.com/whyour/qinglong.git
synced 2026-09-23 03:18:09 +08:00
feat(ql3): add read-only cluster context readiness
This commit is contained in:
@@ -289,8 +289,8 @@ function auditClusterImageCiWorkflow(
|
||||
);
|
||||
requirePattern(
|
||||
adminProductLiveContract,
|
||||
/runOperatorContextContract\(image\);[\s\S]*operatorContext: true,[\s\S]*contextPreflight: true/,
|
||||
'native admin image contract must verify owner-private operator context injection and offline preflight',
|
||||
/runOperatorContextContract\(image\);[\s\S]*operatorContext: true,[\s\S]*contextPreflight: true,[\s\S]*contextReadiness: true/,
|
||||
'native admin image contract must verify owner-private operator context injection, offline preflight and read-only readiness',
|
||||
);
|
||||
requirePattern(
|
||||
source,
|
||||
@@ -335,6 +335,7 @@ function auditClusterImageCiWorkflow(
|
||||
clusterAdminProductFacade: true,
|
||||
clusterAdminOperatorContext: true,
|
||||
clusterAdminContextPreflight: true,
|
||||
clusterAdminContextReadiness: true,
|
||||
ociAttestations: true,
|
||||
osVulnerabilityScan: {
|
||||
scanner: 'trivy@0.70.0',
|
||||
|
||||
Reference in New Issue
Block a user