@kungfu-tech/buildchain 2.12.6 → 2.12.7-alpha.1

package/dist/site/public-surface-audit.json

@@ -3,15 +3,20 @@
   "contract": "kungfu-buildchain-public-surface-reverse-audit",
   "status": "passed",
   "summary": {
-    "cliCommandCount": 76,
-    "workflowCount": 43,
+    "cliCommandCount": 79,
+    "workflowCount": 46,
     "actionCount": 4,
-    "sitePageCount": 48,
-    "docCommandRefCount": 241,
+    "sitePageCount": 49,
+    "docCommandRefCount": 246,
     "failureCount": 0
   },
   "enumerated": {
     "cliCommands": [
+      {
+        "id": "audit",
+        "source": "bin/buildchain.mjs",
+        "usage": "buildchain audit publication-control-plane --repository <owner/repo> --branch <protected-branch>"
+      },
       {
         "id": "badges",
         "source": "bin/buildchain.mjs",
@@ -47,6 +52,11 @@
         "source": "bin/buildchain.mjs",
         "usage": "buildchain collect github-release --tag <tag> [--repository <owner/repo>]"
       },
+      {
+        "id": "create",
+        "source": "bin/buildchain.mjs",
+        "usage": "buildchain create publication-admission --input-json <file-or-json> [--output <file>] [--json]"
+      },
       {
         "id": "diagnostics",
         "source": "bin/buildchain.mjs",
@@ -377,6 +387,11 @@
         "source": "bin/buildchain.mjs",
         "usage": "buildchain verify observability-log <jsonl> [--min-events <n>]"
       },
+      {
+        "id": "verify-publication-admission",
+        "source": "bin/buildchain.mjs",
+        "usage": "buildchain verify publication-admission <file-or-json>"
+      },
       {
         "id": "verify-release-passport",
         "source": "bin/buildchain.mjs",
@@ -394,6 +409,27 @@
       }
     ],
     "workflowInputs": [
+      {
+        "id": ".binary-release-assets",
+        "path": ".github/workflows/.binary-release-assets.yml",
+        "reusable": true,
+        "inputs": [
+          "buildchain-ref",
+          "buildchain-repository",
+          "evidence-run-id",
+          "publication-admission-json",
+          "publication-control-plane-audit-json",
+          "publication-expected-json",
+          "publication-runner-provenance-json",
+          "publication-used-nonces-json",
+          "release-tag"
+        ],
+        "inputCount": 9,
+        "secrets": [],
+        "secretCount": 0,
+        "outputs": [],
+        "outputCount": 0
+      },
       {
         "id": ".build",
         "path": ".github/workflows/.build.yml",
@@ -567,6 +603,44 @@
         ],
         "outputCount": 14
       },
+      {
+        "id": ".publication-authority",
+        "path": ".github/workflows/.publication-authority.yml",
+        "reusable": true,
+        "inputs": [
+          "admission-json",
+          "auto-admission",
+          "buildchain-ref",
+          "buildchain-repository",
+          "control-plane-audit-json",
+          "dry-run",
+          "evidence-manifest-pattern",
+          "evidence-passport-artifact",
+          "evidence-payload-pattern",
+          "evidence-repository",
+          "evidence-run-id",
+          "evidence-summary-artifact",
+          "expected-json",
+          "gate-aggregate-json",
+          "package-name",
+          "product",
+          "publication-target",
+          "publisher-workflow-path",
+          "runner-provenance-json",
+          "source-sha",
+          "target-ref",
+          "used-nonces-json"
+        ],
+        "inputCount": 22,
+        "secrets": [],
+        "secretCount": 0,
+        "outputs": [
+          "capability-artifact",
+          "capability-digest",
+          "capability-json"
+        ],
+        "outputCount": 3
+      },
       {
         "id": ".release-docker",
         "path": ".github/workflows/.release-docker.yml",
@@ -832,6 +906,11 @@
           "production-release-on-main",
           "production-release-pr-mode",
           "production-release-pr-token",
+          "publication-admission-json",
+          "publication-control-plane-audit-json",
+          "publication-expected-json",
+          "publication-runner-provenance-json",
+          "publication-used-nonces-json",
           "release-feedback-actor-privacy",
           "staging-apply",
           "staging-aws-role-arn",
@@ -839,7 +918,7 @@
           "verify-command",
           "working-directory"
         ],
-        "inputCount": 33,
+        "inputCount": 38,
         "secrets": [
           "production-release-app-private-key"
         ],
@@ -921,6 +1000,17 @@
         "outputs": [],
         "outputCount": 0
       },
+      {
+        "id": "binary-release-assets",
+        "path": ".github/workflows/binary-release-assets.yml",
+        "reusable": false,
+        "inputs": [],
+        "inputCount": 0,
+        "secrets": [],
+        "secretCount": 0,
+        "outputs": [],
+        "outputCount": 0
+      },
       {
         "id": "build-surface-fixture",
         "path": ".github/workflows/build-surface-fixture.yml",
@@ -1266,6 +1356,11 @@
           "github-release-title",
           "node-version",
           "package-name",
+          "publication-admission-json",
+          "publication-control-plane-audit-json",
+          "publication-expected-json",
+          "publication-runner-provenance-json",
+          "publication-used-nonces-json",
           "publish-dist-tag",
           "publish-package-set-order",
           "release-passport-impact-json",
@@ -1282,11 +1377,9 @@
           "verify-command",
           "working-directory"
         ],
-        "inputCount": 32,
-        "secrets": [
-          "BUILDCHAIN_PROMOTION_TOKEN"
-        ],
-        "secretCount": 1,
+        "inputCount": 37,
+        "secrets": [],
+        "secretCount": 0,
         "outputs": [
           "controller-plan-artifact",
           "controller-plan-digest",
@@ -1447,6 +1540,17 @@
           "github-release-notes",
           "github-release-title",
           "package-manager",
+          "publication-admission-json",
+          "publication-auto-admission",
+          "publication-control-plane-audit-json",
+          "publication-expected-json",
+          "publication-gate-aggregate-json",
+          "publication-package-name",
+          "publication-product",
+          "publication-publisher-workflow-path",
+          "publication-runner-provenance-json",
+          "publication-target",
+          "publication-used-nonces-json",
           "publish-artifact-kind",
           "publish-command",
           "publish-dist-tag",
@@ -1475,17 +1579,16 @@
           "target-sha",
           "trusted-publishing"
         ],
-        "inputCount": 44,
+        "inputCount": 55,
         "secrets": [
           "BUILDCHAIN_ISSUE_APP_ID",
           "BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
           "BUILDCHAIN_ISSUE_TOKEN",
-          "BUILDCHAIN_PROMOTION_TOKEN",
           "buildchain-issue-app-id",
           "buildchain-issue-app-private-key",
           "buildchain-issue-token"
         ],
-        "secretCount": 7,
+        "secretCount": 6,
         "outputs": [
           "built-source-sha",
           "controller-plan-artifact",
@@ -1496,9 +1599,10 @@
           "controller-receipt-json",
           "controller-receipt-status",
           "promoted-sha",
+          "publication-capability-digest",
           "release-candidate-artifact"
         ],
-        "outputCount": 10
+        "outputCount": 11
       },
       {
         "id": "release-line-bootstrap",
@@ -1916,6 +2020,10 @@
         "id": "manual:publication-artifacts",
         "category": "manual"
       },
+      {
+        "id": "manual:publication-authority",
+        "category": "manual"
+      },
       {
         "id": "manual:publish-transaction",
         "category": "manual"
@@ -1982,6 +2090,26 @@
       }
     ],
     "docCommandRefs": [
+      {
+        "id": "audit",
+        "path": "docs/publication-authority.md",
+        "command": "buildchain audit publication-control-plane"
+      },
+      {
+        "id": "audit",
+        "path": "docs/publication-authority.md",
+        "command": "buildchain audit publication-control-plane"
+      },
+      {
+        "id": "audit",
+        "path": "docs/publication-authority.md",
+        "command": "buildchain audit publication-control-plane"
+      },
+      {
+        "id": "audit",
+        "path": "docs/publication-authority.md",
+        "command": "buildchain audit publication-control-plane"
+      },
       {
         "id": "badges-bundle",
         "path": "docs/cli.md",
@@ -3142,6 +3270,11 @@
         "path": "README.md",
         "command": "buildchain verify observability-log"
       },
+      {
+        "id": "verify-publication-admission",
+        "path": "docs/publication-authority.md",
+        "command": "buildchain verify publication-admission admission"
+      },
       {
         "id": "verify-release-passport",
         "path": "docs/cli.md",
@@ -3193,9 +3326,9 @@
     "cliRegistryPath": "dist/site/cli-registry.json",
     "workflowRegistryPath": "dist/site/workflow-registry.json",
     "pageRegistryPath": "dist/site/page-registry.json",
-    "cliRegistryDigest": "ab57fec294efb9dde1612787bfd0d532b5bb95298b5da14a2b51a5e71b9c7dcc",
-    "workflowRegistryDigest": "1da5cf730fa6a4816bc3d15a457b34dba28d9dfdcdc3146e9b35cb7e0e6c7abf",
-    "pageRegistryDigest": "0319f1af7e6241d1cf41d063b4b2870d2b405f475133cbfef05cfd8f435d0584"
+    "cliRegistryDigest": "a6daf4822365bf576425777230246046ebca67b3f8dcfea61fc7a61773776185",
+    "workflowRegistryDigest": "c71378eba66d2e03b5c90ed3e5b20a3e68f279b503062ffbf9fdfabe341adcae",
+    "pageRegistryDigest": "289cfbb5251f8dcba1ab683da86a434af31de2a791e7cd453e16d1c86b5069be"
   },
   "comparison": {
     "missingCliRegistry": [],