@kungfu-tech/buildchain 3.0.1 → 3.0.2-alpha.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +5 -3
- package/actions/promote-buildchain-ref/README.md +7 -0
- package/bin/buildchain.mjs +173 -513
- package/bin/internal/cli-options.mjs +79 -0
- package/bin/internal/trust-release-cli.mjs +469 -0
- package/dist/site/agent-index.json +2 -0
- package/dist/site/artifact-schemas.json +5 -0
- package/dist/site/badge-endpoint-registry.json +18 -18
- package/dist/site/badges/v1/kfd-12/aligned.json +1 -1
- package/dist/site/badges/v1/kfd-12/declared.json +1 -1
- package/dist/site/badges/v1/kfd-12/downgraded.json +1 -1
- package/dist/site/badges/v1/kfd-12/draft.json +1 -1
- package/dist/site/badges/v1/kfd-12/failed.json +1 -1
- package/dist/site/badges/v1/kfd-12/missing.json +1 -1
- package/dist/site/badges/v1/kfd-12/passed.json +1 -1
- package/dist/site/badges/v1/kfd-12/planned.json +1 -1
- package/dist/site/badges/v1/kfd-13/aligned.json +1 -1
- package/dist/site/badges/v1/kfd-13/declared.json +1 -1
- package/dist/site/badges/v1/kfd-13/downgraded.json +1 -1
- package/dist/site/badges/v1/kfd-13/draft.json +1 -1
- package/dist/site/badges/v1/kfd-13/failed.json +1 -1
- package/dist/site/badges/v1/kfd-13/missing.json +1 -1
- package/dist/site/badges/v1/kfd-13/passed.json +1 -1
- package/dist/site/badges/v1/kfd-13/planned.json +1 -1
- package/dist/site/buildchain-contract.json +68 -28
- package/dist/site/buildchain-site.json +28 -18
- package/dist/site/capability-registry.json +3 -3
- package/dist/site/cli-registry.json +108 -0
- package/dist/site/controller-registry.json +36 -4
- package/dist/site/kfd-claims.json +156 -12
- package/dist/site/kfd-upstream-aggregate.json +20 -11
- package/dist/site/manual-registry.json +3 -3
- package/dist/site/node-api-registry.json +36 -10
- package/dist/site/page-registry.json +20 -10
- package/dist/site/public-surface-audit.json +122 -10
- package/dist/site/publication-registry.json +4 -4
- package/dist/site/release-passport-check-manifest.json +11 -0
- package/dist/site/release-provenance.json +4 -0
- package/dist/site/schemas/kfd-product-gate-input-v1.schema.json +164 -0
- package/dist/site/schemas/kfd-support-projection-v1.schema.json +106 -0
- package/dist/site/schemas/release-passport-v1.schema.json +3 -0
- package/dist/site/site-manifest.json +7 -7
- package/dist/site/workflow-registry.json +17 -5
- package/docs/cli.md +9 -2
- package/docs/kfd-support.md +43 -7
- package/docs/release-passport.md +15 -0
- package/package.json +7 -3
- package/packages/core/cache-evidence.js +288 -0
- package/packages/core/diagnostics.js +276 -10
- package/packages/core/github-governance-authority.js +71 -16
- package/packages/core/index.js +27 -0
- package/packages/core/kfd-product-gates.js +865 -0
- package/packages/core/kfd.js +16 -7
- package/packages/core/kfd3-surface-register.js +105 -1
- package/packages/core/public-surface-audit.js +6 -1
- package/packages/core/release-passport-contract.js +13 -0
- package/packages/core/release-passport.js +87 -3
- package/scripts/check-internal-architecture.mjs +171 -0
- package/scripts/check-inventory.mjs +4 -0
- package/scripts/generate-site-bundle.mjs +24 -0
- package/scripts/locked-source-checkout.mjs +48 -0
- package/scripts/promotion-routing-evidence.mjs +73 -0
- package/scripts/reconcile-github-governance.mjs +158 -25
- package/scripts/shifu-gate-profile.mjs +26 -20
|
@@ -1778,7 +1778,7 @@
|
|
|
1778
1778
|
{
|
|
1779
1779
|
"id": "kfd-12",
|
|
1780
1780
|
"label": "KFD-12",
|
|
1781
|
-
"messageTemplate": "
|
|
1781
|
+
"messageTemplate": "KFD-12 {state}",
|
|
1782
1782
|
"linkRole": "repository-release-passport",
|
|
1783
1783
|
"states": [
|
|
1784
1784
|
{
|
|
@@ -1788,7 +1788,7 @@
|
|
|
1788
1788
|
"payload": {
|
|
1789
1789
|
"schemaVersion": 1,
|
|
1790
1790
|
"label": "KFD-12",
|
|
1791
|
-
"message": "
|
|
1791
|
+
"message": "KFD-12 passed",
|
|
1792
1792
|
"color": "2ea44f",
|
|
1793
1793
|
"logoPolicy": {
|
|
1794
1794
|
"contract": "kungfu-buildchain-badge-logo-policy",
|
|
@@ -1807,7 +1807,7 @@
|
|
|
1807
1807
|
"payload": {
|
|
1808
1808
|
"schemaVersion": 1,
|
|
1809
1809
|
"label": "KFD-12",
|
|
1810
|
-
"message": "
|
|
1810
|
+
"message": "KFD-12 aligned",
|
|
1811
1811
|
"color": "0969da",
|
|
1812
1812
|
"logoPolicy": {
|
|
1813
1813
|
"contract": "kungfu-buildchain-badge-logo-policy",
|
|
@@ -1826,7 +1826,7 @@
|
|
|
1826
1826
|
"payload": {
|
|
1827
1827
|
"schemaVersion": 1,
|
|
1828
1828
|
"label": "KFD-12",
|
|
1829
|
-
"message": "
|
|
1829
|
+
"message": "KFD-12 declared",
|
|
1830
1830
|
"color": "6e7781",
|
|
1831
1831
|
"logoPolicy": {
|
|
1832
1832
|
"contract": "kungfu-buildchain-badge-logo-policy",
|
|
@@ -1845,7 +1845,7 @@
|
|
|
1845
1845
|
"payload": {
|
|
1846
1846
|
"schemaVersion": 1,
|
|
1847
1847
|
"label": "KFD-12",
|
|
1848
|
-
"message": "
|
|
1848
|
+
"message": "KFD-12 planned",
|
|
1849
1849
|
"color": "bf8700",
|
|
1850
1850
|
"logoPolicy": {
|
|
1851
1851
|
"contract": "kungfu-buildchain-badge-logo-policy",
|
|
@@ -1864,7 +1864,7 @@
|
|
|
1864
1864
|
"payload": {
|
|
1865
1865
|
"schemaVersion": 1,
|
|
1866
1866
|
"label": "KFD-12",
|
|
1867
|
-
"message": "
|
|
1867
|
+
"message": "KFD-12 draft",
|
|
1868
1868
|
"color": "8250df",
|
|
1869
1869
|
"logoPolicy": {
|
|
1870
1870
|
"contract": "kungfu-buildchain-badge-logo-policy",
|
|
@@ -1883,7 +1883,7 @@
|
|
|
1883
1883
|
"payload": {
|
|
1884
1884
|
"schemaVersion": 1,
|
|
1885
1885
|
"label": "KFD-12",
|
|
1886
|
-
"message": "
|
|
1886
|
+
"message": "KFD-12 downgraded",
|
|
1887
1887
|
"color": "bf8700",
|
|
1888
1888
|
"logoPolicy": {
|
|
1889
1889
|
"contract": "kungfu-buildchain-badge-logo-policy",
|
|
@@ -1902,7 +1902,7 @@
|
|
|
1902
1902
|
"payload": {
|
|
1903
1903
|
"schemaVersion": 1,
|
|
1904
1904
|
"label": "KFD-12",
|
|
1905
|
-
"message": "
|
|
1905
|
+
"message": "KFD-12 failed",
|
|
1906
1906
|
"color": "cf222e",
|
|
1907
1907
|
"logoPolicy": {
|
|
1908
1908
|
"contract": "kungfu-buildchain-badge-logo-policy",
|
|
@@ -1921,7 +1921,7 @@
|
|
|
1921
1921
|
"payload": {
|
|
1922
1922
|
"schemaVersion": 1,
|
|
1923
1923
|
"label": "KFD-12",
|
|
1924
|
-
"message": "
|
|
1924
|
+
"message": "KFD-12 missing",
|
|
1925
1925
|
"color": "6e7781",
|
|
1926
1926
|
"logoPolicy": {
|
|
1927
1927
|
"contract": "kungfu-buildchain-badge-logo-policy",
|
|
@@ -1938,7 +1938,7 @@
|
|
|
1938
1938
|
{
|
|
1939
1939
|
"id": "kfd-13",
|
|
1940
1940
|
"label": "KFD-13",
|
|
1941
|
-
"messageTemplate": "
|
|
1941
|
+
"messageTemplate": "KFD-13 {state}",
|
|
1942
1942
|
"linkRole": "repository-release-passport",
|
|
1943
1943
|
"states": [
|
|
1944
1944
|
{
|
|
@@ -1948,7 +1948,7 @@
|
|
|
1948
1948
|
"payload": {
|
|
1949
1949
|
"schemaVersion": 1,
|
|
1950
1950
|
"label": "KFD-13",
|
|
1951
|
-
"message": "
|
|
1951
|
+
"message": "KFD-13 passed",
|
|
1952
1952
|
"color": "2ea44f",
|
|
1953
1953
|
"logoPolicy": {
|
|
1954
1954
|
"contract": "kungfu-buildchain-badge-logo-policy",
|
|
@@ -1967,7 +1967,7 @@
|
|
|
1967
1967
|
"payload": {
|
|
1968
1968
|
"schemaVersion": 1,
|
|
1969
1969
|
"label": "KFD-13",
|
|
1970
|
-
"message": "
|
|
1970
|
+
"message": "KFD-13 aligned",
|
|
1971
1971
|
"color": "0969da",
|
|
1972
1972
|
"logoPolicy": {
|
|
1973
1973
|
"contract": "kungfu-buildchain-badge-logo-policy",
|
|
@@ -1986,7 +1986,7 @@
|
|
|
1986
1986
|
"payload": {
|
|
1987
1987
|
"schemaVersion": 1,
|
|
1988
1988
|
"label": "KFD-13",
|
|
1989
|
-
"message": "
|
|
1989
|
+
"message": "KFD-13 declared",
|
|
1990
1990
|
"color": "6e7781",
|
|
1991
1991
|
"logoPolicy": {
|
|
1992
1992
|
"contract": "kungfu-buildchain-badge-logo-policy",
|
|
@@ -2005,7 +2005,7 @@
|
|
|
2005
2005
|
"payload": {
|
|
2006
2006
|
"schemaVersion": 1,
|
|
2007
2007
|
"label": "KFD-13",
|
|
2008
|
-
"message": "
|
|
2008
|
+
"message": "KFD-13 planned",
|
|
2009
2009
|
"color": "bf8700",
|
|
2010
2010
|
"logoPolicy": {
|
|
2011
2011
|
"contract": "kungfu-buildchain-badge-logo-policy",
|
|
@@ -2024,7 +2024,7 @@
|
|
|
2024
2024
|
"payload": {
|
|
2025
2025
|
"schemaVersion": 1,
|
|
2026
2026
|
"label": "KFD-13",
|
|
2027
|
-
"message": "
|
|
2027
|
+
"message": "KFD-13 draft",
|
|
2028
2028
|
"color": "8250df",
|
|
2029
2029
|
"logoPolicy": {
|
|
2030
2030
|
"contract": "kungfu-buildchain-badge-logo-policy",
|
|
@@ -2043,7 +2043,7 @@
|
|
|
2043
2043
|
"payload": {
|
|
2044
2044
|
"schemaVersion": 1,
|
|
2045
2045
|
"label": "KFD-13",
|
|
2046
|
-
"message": "
|
|
2046
|
+
"message": "KFD-13 downgraded",
|
|
2047
2047
|
"color": "bf8700",
|
|
2048
2048
|
"logoPolicy": {
|
|
2049
2049
|
"contract": "kungfu-buildchain-badge-logo-policy",
|
|
@@ -2062,7 +2062,7 @@
|
|
|
2062
2062
|
"payload": {
|
|
2063
2063
|
"schemaVersion": 1,
|
|
2064
2064
|
"label": "KFD-13",
|
|
2065
|
-
"message": "
|
|
2065
|
+
"message": "KFD-13 failed",
|
|
2066
2066
|
"color": "cf222e",
|
|
2067
2067
|
"logoPolicy": {
|
|
2068
2068
|
"contract": "kungfu-buildchain-badge-logo-policy",
|
|
@@ -2081,7 +2081,7 @@
|
|
|
2081
2081
|
"payload": {
|
|
2082
2082
|
"schemaVersion": 1,
|
|
2083
2083
|
"label": "KFD-13",
|
|
2084
|
-
"message": "
|
|
2084
|
+
"message": "KFD-13 missing",
|
|
2085
2085
|
"color": "6e7781",
|
|
2086
2086
|
"logoPolicy": {
|
|
2087
2087
|
"contract": "kungfu-buildchain-badge-logo-policy",
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"schemaVersion": 1,
|
|
3
3
|
"label": "KFD-12",
|
|
4
|
-
"message": "
|
|
4
|
+
"message": "KFD-12 aligned",
|
|
5
5
|
"color": "0969da",
|
|
6
6
|
"logoPolicy": {
|
|
7
7
|
"contract": "kungfu-buildchain-badge-logo-policy",
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"schemaVersion": 1,
|
|
3
3
|
"label": "KFD-12",
|
|
4
|
-
"message": "
|
|
4
|
+
"message": "KFD-12 declared",
|
|
5
5
|
"color": "6e7781",
|
|
6
6
|
"logoPolicy": {
|
|
7
7
|
"contract": "kungfu-buildchain-badge-logo-policy",
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"schemaVersion": 1,
|
|
3
3
|
"label": "KFD-12",
|
|
4
|
-
"message": "
|
|
4
|
+
"message": "KFD-12 downgraded",
|
|
5
5
|
"color": "bf8700",
|
|
6
6
|
"logoPolicy": {
|
|
7
7
|
"contract": "kungfu-buildchain-badge-logo-policy",
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"schemaVersion": 1,
|
|
3
3
|
"label": "KFD-12",
|
|
4
|
-
"message": "
|
|
4
|
+
"message": "KFD-12 draft",
|
|
5
5
|
"color": "8250df",
|
|
6
6
|
"logoPolicy": {
|
|
7
7
|
"contract": "kungfu-buildchain-badge-logo-policy",
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"schemaVersion": 1,
|
|
3
3
|
"label": "KFD-12",
|
|
4
|
-
"message": "
|
|
4
|
+
"message": "KFD-12 failed",
|
|
5
5
|
"color": "cf222e",
|
|
6
6
|
"logoPolicy": {
|
|
7
7
|
"contract": "kungfu-buildchain-badge-logo-policy",
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"schemaVersion": 1,
|
|
3
3
|
"label": "KFD-12",
|
|
4
|
-
"message": "
|
|
4
|
+
"message": "KFD-12 missing",
|
|
5
5
|
"color": "6e7781",
|
|
6
6
|
"logoPolicy": {
|
|
7
7
|
"contract": "kungfu-buildchain-badge-logo-policy",
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"schemaVersion": 1,
|
|
3
3
|
"label": "KFD-12",
|
|
4
|
-
"message": "
|
|
4
|
+
"message": "KFD-12 passed",
|
|
5
5
|
"color": "2ea44f",
|
|
6
6
|
"logoPolicy": {
|
|
7
7
|
"contract": "kungfu-buildchain-badge-logo-policy",
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"schemaVersion": 1,
|
|
3
3
|
"label": "KFD-12",
|
|
4
|
-
"message": "
|
|
4
|
+
"message": "KFD-12 planned",
|
|
5
5
|
"color": "bf8700",
|
|
6
6
|
"logoPolicy": {
|
|
7
7
|
"contract": "kungfu-buildchain-badge-logo-policy",
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"schemaVersion": 1,
|
|
3
3
|
"label": "KFD-13",
|
|
4
|
-
"message": "
|
|
4
|
+
"message": "KFD-13 aligned",
|
|
5
5
|
"color": "0969da",
|
|
6
6
|
"logoPolicy": {
|
|
7
7
|
"contract": "kungfu-buildchain-badge-logo-policy",
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"schemaVersion": 1,
|
|
3
3
|
"label": "KFD-13",
|
|
4
|
-
"message": "
|
|
4
|
+
"message": "KFD-13 declared",
|
|
5
5
|
"color": "6e7781",
|
|
6
6
|
"logoPolicy": {
|
|
7
7
|
"contract": "kungfu-buildchain-badge-logo-policy",
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"schemaVersion": 1,
|
|
3
3
|
"label": "KFD-13",
|
|
4
|
-
"message": "
|
|
4
|
+
"message": "KFD-13 downgraded",
|
|
5
5
|
"color": "bf8700",
|
|
6
6
|
"logoPolicy": {
|
|
7
7
|
"contract": "kungfu-buildchain-badge-logo-policy",
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"schemaVersion": 1,
|
|
3
3
|
"label": "KFD-13",
|
|
4
|
-
"message": "
|
|
4
|
+
"message": "KFD-13 draft",
|
|
5
5
|
"color": "8250df",
|
|
6
6
|
"logoPolicy": {
|
|
7
7
|
"contract": "kungfu-buildchain-badge-logo-policy",
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"schemaVersion": 1,
|
|
3
3
|
"label": "KFD-13",
|
|
4
|
-
"message": "
|
|
4
|
+
"message": "KFD-13 failed",
|
|
5
5
|
"color": "cf222e",
|
|
6
6
|
"logoPolicy": {
|
|
7
7
|
"contract": "kungfu-buildchain-badge-logo-policy",
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"schemaVersion": 1,
|
|
3
3
|
"label": "KFD-13",
|
|
4
|
-
"message": "
|
|
4
|
+
"message": "KFD-13 missing",
|
|
5
5
|
"color": "6e7781",
|
|
6
6
|
"logoPolicy": {
|
|
7
7
|
"contract": "kungfu-buildchain-badge-logo-policy",
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"schemaVersion": 1,
|
|
3
3
|
"label": "KFD-13",
|
|
4
|
-
"message": "
|
|
4
|
+
"message": "KFD-13 passed",
|
|
5
5
|
"color": "2ea44f",
|
|
6
6
|
"logoPolicy": {
|
|
7
7
|
"contract": "kungfu-buildchain-badge-logo-policy",
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"schemaVersion": 1,
|
|
3
3
|
"label": "KFD-13",
|
|
4
|
-
"message": "
|
|
4
|
+
"message": "KFD-13 planned",
|
|
5
5
|
"color": "bf8700",
|
|
6
6
|
"logoPolicy": {
|
|
7
7
|
"contract": "kungfu-buildchain-badge-logo-policy",
|
|
@@ -4,7 +4,7 @@
|
|
|
4
4
|
"product": {
|
|
5
5
|
"name": "Buildchain",
|
|
6
6
|
"package": "@kungfu-tech/buildchain",
|
|
7
|
-
"version": "3.0.1",
|
|
7
|
+
"version": "3.0.2-alpha.1",
|
|
8
8
|
"repository": "https://github.com/kungfu-systems/buildchain"
|
|
9
9
|
},
|
|
10
10
|
"majorLine": "v3",
|
|
@@ -50,7 +50,7 @@
|
|
|
50
50
|
"retryable GitHub fallback fetches use a bounded attempt budget before exact source SHA and tree verification"
|
|
51
51
|
],
|
|
52
52
|
"breakingDigest": "sha256:a6a35370d6b0d0f46e1b2712dcc01961fe53c2febde95409a27a485c10a36650",
|
|
53
|
-
"auditDigest": "sha256:
|
|
53
|
+
"auditDigest": "sha256:4dc9a093dbc5e0010e0845610a05db2cf7fb2c2301c5d780ea437b1f9e91da27"
|
|
54
54
|
},
|
|
55
55
|
{
|
|
56
56
|
"contractVersion": 1,
|
|
@@ -89,7 +89,7 @@
|
|
|
89
89
|
"alpha and stable channel selections use separate consumer contract locks by default"
|
|
90
90
|
],
|
|
91
91
|
"breakingDigest": "sha256:c4597dfa89e1a58f1023905092b849644f5c080abf150aeba9c7e1cd5ed43962",
|
|
92
|
-
"auditDigest": "sha256:
|
|
92
|
+
"auditDigest": "sha256:b8122b68422dbf3ac5cf828de1122902655aee5cfe4881a3530799ec00bc59ad"
|
|
93
93
|
},
|
|
94
94
|
{
|
|
95
95
|
"contractVersion": 1,
|
|
@@ -170,7 +170,7 @@
|
|
|
170
170
|
"GitHub Release passport and evidence publication is delegated to promote-buildchain-ref after the semver release transaction completes"
|
|
171
171
|
],
|
|
172
172
|
"breakingDigest": "sha256:acd401cfc46450115a3763fd4b679d85f185e8757ebd52510d6262e1533df4cf",
|
|
173
|
-
"auditDigest": "sha256:
|
|
173
|
+
"auditDigest": "sha256:26993d90db926a0e086947a28359242cdaba042f0ceacee75f680216d6143ab7"
|
|
174
174
|
},
|
|
175
175
|
{
|
|
176
176
|
"contractVersion": 1,
|
|
@@ -212,7 +212,7 @@
|
|
|
212
212
|
"promotion reuses PR-stage release-candidate artifacts and does not run the heavy native build matrix"
|
|
213
213
|
],
|
|
214
214
|
"breakingDigest": "sha256:aa30f22e3af0a89841310bdbdc900844dd95a66974db173fa140a71bbd7e82c0",
|
|
215
|
-
"auditDigest": "sha256:
|
|
215
|
+
"auditDigest": "sha256:126ee323c031e318ca5d3623a834d5a39263e7b38e1ef349a239084ae1aff116"
|
|
216
216
|
},
|
|
217
217
|
{
|
|
218
218
|
"contractVersion": 1,
|
|
@@ -377,7 +377,7 @@
|
|
|
377
377
|
"sha256:a59f0910e6df842e7699139472e5dd69ac2fdd7f7213bf2cb346d1d622556874"
|
|
378
378
|
],
|
|
379
379
|
"breakingDigest": "sha256:6147c0a8d5c36bfaa6021871574e1fc28192a3f1b8cfdae4d24ef3059ac1ebda",
|
|
380
|
-
"auditDigest": "sha256:
|
|
380
|
+
"auditDigest": "sha256:e4bcbd5a232626b3bdc87213cc1733d05a64ba9465a4915122b30735a53b1f90"
|
|
381
381
|
},
|
|
382
382
|
{
|
|
383
383
|
"contractVersion": 1,
|
|
@@ -492,7 +492,7 @@
|
|
|
492
492
|
"release-state SHA is recorded as a durable audit entrance"
|
|
493
493
|
],
|
|
494
494
|
"breakingDigest": "sha256:b627e1b2ece9b6049517a942c5139e342e6077cdd3d8962d61cef8481b1f70ad",
|
|
495
|
-
"auditDigest": "sha256:
|
|
495
|
+
"auditDigest": "sha256:842f7f1e60a8de253225ada03cf238948ce527481eb640bc6f14c6cc0ef38880"
|
|
496
496
|
},
|
|
497
497
|
{
|
|
498
498
|
"contractVersion": 1,
|
|
@@ -541,7 +541,7 @@
|
|
|
541
541
|
"prose-only public claims downgrade the release trust passport audit"
|
|
542
542
|
],
|
|
543
543
|
"breakingDigest": "sha256:f0b636eb925ddbf45ff1a8872454ab7b4dd98857cac12bb75217830130e62a16",
|
|
544
|
-
"auditDigest": "sha256:
|
|
544
|
+
"auditDigest": "sha256:842f7f1e60a8de253225ada03cf238948ce527481eb640bc6f14c6cc0ef38880"
|
|
545
545
|
},
|
|
546
546
|
{
|
|
547
547
|
"contractVersion": 1,
|
|
@@ -601,7 +601,7 @@
|
|
|
601
601
|
"README badge block checks and writes are generated from machine-readable repository facts"
|
|
602
602
|
],
|
|
603
603
|
"breakingDigest": "sha256:90a73892b2d6c214048448d5f45df75639bdf7b7e8fefd9c596e04b087407bcc",
|
|
604
|
-
"auditDigest": "sha256:
|
|
604
|
+
"auditDigest": "sha256:abd77ee71465c9da3f0c234aea2aec900d1629bf74c13e954e0ee31dfcf00801"
|
|
605
605
|
},
|
|
606
606
|
{
|
|
607
607
|
"contractVersion": 1,
|
|
@@ -691,7 +691,7 @@
|
|
|
691
691
|
"manual entries carry source file digests so downstream sites and agents can detect stale hand-written documentation"
|
|
692
692
|
],
|
|
693
693
|
"breakingDigest": "sha256:7d0d2819e3a3e72989d9c57b5efe9d0bc0a79bc0f2c82a0c7b9d6c5a211a91f2",
|
|
694
|
-
"auditDigest": "sha256:
|
|
694
|
+
"auditDigest": "sha256:66bd60ea31bd0b103c77149f7242ba670ae8913b6aeae3f032254b598ed02dce"
|
|
695
695
|
},
|
|
696
696
|
{
|
|
697
697
|
"contractVersion": 1,
|
|
@@ -713,7 +713,7 @@
|
|
|
713
713
|
"agents can discover supported Node APIs without importing internal file paths"
|
|
714
714
|
],
|
|
715
715
|
"breakingDigest": "sha256:48f925608d3e2131d90936b07dc2a30341204cae3e6e785c0f77d61ad755c945",
|
|
716
|
-
"auditDigest": "sha256:
|
|
716
|
+
"auditDigest": "sha256:7e1d0269cb7bbdc308595a5ad87cbd7190187ba3363f2dd07bc02ba8d5c7c5da"
|
|
717
717
|
},
|
|
718
718
|
{
|
|
719
719
|
"contractVersion": 1,
|
|
@@ -764,7 +764,7 @@
|
|
|
764
764
|
"controllerDescriptor": {
|
|
765
765
|
"contract": "buildchain.controller-descriptor/v1",
|
|
766
766
|
"digest": "sha256:373723a73d188194d389dee04c394d3b79cb0c016a370f2f5d0f60979a02ed48",
|
|
767
|
-
"registryDigest": "sha256:
|
|
767
|
+
"registryDigest": "sha256:fcd7a66644c922460625b5bce0b3ceaa20bc84e87681bf949e807bd8c358fcf4",
|
|
768
768
|
"inputClassifications": {
|
|
769
769
|
"buildchain-ref": {
|
|
770
770
|
"classification": "included",
|
|
@@ -872,6 +872,9 @@
|
|
|
872
872
|
"buildchain-contract-lock-path",
|
|
873
873
|
"buildchain-ref",
|
|
874
874
|
"buildchain-repository",
|
|
875
|
+
"cache-dependency-lock-root",
|
|
876
|
+
"cache-policy-root",
|
|
877
|
+
"cache-toolchain-root",
|
|
875
878
|
"cargo-registry-index",
|
|
876
879
|
"checkout-cache-fallback",
|
|
877
880
|
"checkout-cache-fetch-attempts",
|
|
@@ -923,8 +926,8 @@
|
|
|
923
926
|
],
|
|
924
927
|
"controllerDescriptor": {
|
|
925
928
|
"contract": "buildchain.controller-descriptor/v1",
|
|
926
|
-
"digest": "sha256:
|
|
927
|
-
"registryDigest": "sha256:
|
|
929
|
+
"digest": "sha256:7ab36c233a4a448f3894e19c3e6a3b5f765095d2a8628cbbe421e4b82fe3e4b9",
|
|
930
|
+
"registryDigest": "sha256:fcd7a66644c922460625b5bce0b3ceaa20bc84e87681bf949e807bd8c358fcf4",
|
|
928
931
|
"inputClassifications": {
|
|
929
932
|
"BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN": {
|
|
930
933
|
"classification": "redacted",
|
|
@@ -1030,6 +1033,18 @@
|
|
|
1030
1033
|
"classification": "included",
|
|
1031
1034
|
"source": "workflow-call-input"
|
|
1032
1035
|
},
|
|
1036
|
+
"cache-dependency-lock-root": {
|
|
1037
|
+
"classification": "included",
|
|
1038
|
+
"source": "workflow-call-input"
|
|
1039
|
+
},
|
|
1040
|
+
"cache-policy-root": {
|
|
1041
|
+
"classification": "included",
|
|
1042
|
+
"source": "workflow-call-input"
|
|
1043
|
+
},
|
|
1044
|
+
"cache-toolchain-root": {
|
|
1045
|
+
"classification": "included",
|
|
1046
|
+
"source": "workflow-call-input"
|
|
1047
|
+
},
|
|
1033
1048
|
"cargo-registry-index": {
|
|
1034
1049
|
"classification": "digest-only",
|
|
1035
1050
|
"source": "workflow-call-input"
|
|
@@ -1234,7 +1249,7 @@
|
|
|
1234
1249
|
"missing receipts are non-qualifying and must not be represented as a successful controller run"
|
|
1235
1250
|
],
|
|
1236
1251
|
"breakingDigest": "sha256:30745921541e9b0f70475bb2178c2559f6aef248f6680670ccd44d8c5a69a6b1",
|
|
1237
|
-
"auditDigest": "sha256:
|
|
1252
|
+
"auditDigest": "sha256:4dc9a093dbc5e0010e0845610a05db2cf7fb2c2301c5d780ea437b1f9e91da27"
|
|
1238
1253
|
},
|
|
1239
1254
|
{
|
|
1240
1255
|
"contractVersion": 1,
|
|
@@ -1301,6 +1316,9 @@
|
|
|
1301
1316
|
"buildchain-ref",
|
|
1302
1317
|
"buildchain-repository",
|
|
1303
1318
|
"buildchain-stable-contract-lock-path",
|
|
1319
|
+
"cache-dependency-lock-root",
|
|
1320
|
+
"cache-policy-root",
|
|
1321
|
+
"cache-toolchain-root",
|
|
1304
1322
|
"cargo-registry-index",
|
|
1305
1323
|
"checkout-cache-fallback",
|
|
1306
1324
|
"checkout-cache-fetch-attempts",
|
|
@@ -1352,8 +1370,8 @@
|
|
|
1352
1370
|
],
|
|
1353
1371
|
"controllerDescriptor": {
|
|
1354
1372
|
"contract": "buildchain.controller-descriptor/v1",
|
|
1355
|
-
"digest": "sha256:
|
|
1356
|
-
"registryDigest": "sha256:
|
|
1373
|
+
"digest": "sha256:9e5d5244c54d6613024beb43613afcae8d9cfb5cae7799c7a83a2799034ad64f",
|
|
1374
|
+
"registryDigest": "sha256:fcd7a66644c922460625b5bce0b3ceaa20bc84e87681bf949e807bd8c358fcf4",
|
|
1357
1375
|
"inputClassifications": {
|
|
1358
1376
|
"BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN": {
|
|
1359
1377
|
"classification": "redacted",
|
|
@@ -1471,6 +1489,18 @@
|
|
|
1471
1489
|
"classification": "digest-only",
|
|
1472
1490
|
"source": "workflow-call-input"
|
|
1473
1491
|
},
|
|
1492
|
+
"cache-dependency-lock-root": {
|
|
1493
|
+
"classification": "included",
|
|
1494
|
+
"source": "workflow-call-input"
|
|
1495
|
+
},
|
|
1496
|
+
"cache-policy-root": {
|
|
1497
|
+
"classification": "included",
|
|
1498
|
+
"source": "workflow-call-input"
|
|
1499
|
+
},
|
|
1500
|
+
"cache-toolchain-root": {
|
|
1501
|
+
"classification": "included",
|
|
1502
|
+
"source": "workflow-call-input"
|
|
1503
|
+
},
|
|
1474
1504
|
"cargo-registry-index": {
|
|
1475
1505
|
"classification": "digest-only",
|
|
1476
1506
|
"source": "workflow-call-input"
|
|
@@ -1672,7 +1702,7 @@
|
|
|
1672
1702
|
"missing receipts are non-qualifying and must not be represented as a successful controller run"
|
|
1673
1703
|
],
|
|
1674
1704
|
"breakingDigest": "sha256:d40dd05d7e07473d4b2dc1b62fbb0ed6f06449b4d3a7c44a2e8014313e3c0273",
|
|
1675
|
-
"auditDigest": "sha256:
|
|
1705
|
+
"auditDigest": "sha256:b8122b68422dbf3ac5cf828de1122902655aee5cfe4881a3530799ec00bc59ad"
|
|
1676
1706
|
},
|
|
1677
1707
|
{
|
|
1678
1708
|
"contractVersion": 1,
|
|
@@ -1742,7 +1772,7 @@
|
|
|
1742
1772
|
"controllerDescriptor": {
|
|
1743
1773
|
"contract": "buildchain.controller-descriptor/v1",
|
|
1744
1774
|
"digest": "sha256:8e42956a2c10fa109500e72b97994f06b3d22a19cc63a46f66410b2e81706e9d",
|
|
1745
|
-
"registryDigest": "sha256:
|
|
1775
|
+
"registryDigest": "sha256:fcd7a66644c922460625b5bce0b3ceaa20bc84e87681bf949e807bd8c358fcf4",
|
|
1746
1776
|
"inputClassifications": {
|
|
1747
1777
|
"artifact-name": {
|
|
1748
1778
|
"classification": "included",
|
|
@@ -1959,7 +1989,7 @@
|
|
|
1959
1989
|
"controllerDescriptor": {
|
|
1960
1990
|
"contract": "buildchain.controller-descriptor/v1",
|
|
1961
1991
|
"digest": "sha256:c5274b37f04d0054559fdc8698c51bd0f0d8ae470baf163e9caa7699aa970575",
|
|
1962
|
-
"registryDigest": "sha256:
|
|
1992
|
+
"registryDigest": "sha256:fcd7a66644c922460625b5bce0b3ceaa20bc84e87681bf949e807bd8c358fcf4",
|
|
1963
1993
|
"inputClassifications": {
|
|
1964
1994
|
"artifact-path": {
|
|
1965
1995
|
"classification": "digest-only",
|
|
@@ -2203,7 +2233,7 @@
|
|
|
2203
2233
|
"controllerDescriptor": {
|
|
2204
2234
|
"contract": "buildchain.controller-descriptor/v1",
|
|
2205
2235
|
"digest": "sha256:6b132790b9798e8a5dfbe095701d8e024c160a08bc7c4bd477ee79feef7a9cfd",
|
|
2206
|
-
"registryDigest": "sha256:
|
|
2236
|
+
"registryDigest": "sha256:fcd7a66644c922460625b5bce0b3ceaa20bc84e87681bf949e807bd8c358fcf4",
|
|
2207
2237
|
"inputClassifications": {
|
|
2208
2238
|
"artifact-name": {
|
|
2209
2239
|
"classification": "included",
|
|
@@ -2385,7 +2415,7 @@
|
|
|
2385
2415
|
"controllerDescriptor": {
|
|
2386
2416
|
"contract": "buildchain.controller-descriptor/v1",
|
|
2387
2417
|
"digest": "sha256:6d71409659fbf8543c7e520b0c493d8afe86bdf60286b860bb917f0041ebc173",
|
|
2388
|
-
"registryDigest": "sha256:
|
|
2418
|
+
"registryDigest": "sha256:fcd7a66644c922460625b5bce0b3ceaa20bc84e87681bf949e807bd8c358fcf4",
|
|
2389
2419
|
"inputClassifications": {
|
|
2390
2420
|
"artifact-name": {
|
|
2391
2421
|
"classification": "included",
|
|
@@ -2676,6 +2706,8 @@
|
|
|
2676
2706
|
"release-passport-kfd-3-artifact-verify-command",
|
|
2677
2707
|
"release-passport-kfd-3-artifact-witness-jsons",
|
|
2678
2708
|
"release-passport-kfd-3-prebuild-witness-jsons",
|
|
2709
|
+
"release-passport-kfd-product-gate-jsons",
|
|
2710
|
+
"release-passport-kfd-support-matrix-json",
|
|
2679
2711
|
"release-passport-output-dir",
|
|
2680
2712
|
"release-passport-platform-manifest-paths",
|
|
2681
2713
|
"release-passport-product-name",
|
|
@@ -2689,8 +2721,8 @@
|
|
|
2689
2721
|
],
|
|
2690
2722
|
"controllerDescriptor": {
|
|
2691
2723
|
"contract": "buildchain.controller-descriptor/v1",
|
|
2692
|
-
"digest": "sha256:
|
|
2693
|
-
"registryDigest": "sha256:
|
|
2724
|
+
"digest": "sha256:4bd94f0bb1790c87af758b71aa592a3e22fdcd84a9851931d252e3f60cba8d40",
|
|
2725
|
+
"registryDigest": "sha256:fcd7a66644c922460625b5bce0b3ceaa20bc84e87681bf949e807bd8c358fcf4",
|
|
2694
2726
|
"inputClassifications": {
|
|
2695
2727
|
"BUILDCHAIN_ISSUE_APP_ID": {
|
|
2696
2728
|
"classification": "redacted",
|
|
@@ -3024,6 +3056,14 @@
|
|
|
3024
3056
|
"classification": "digest-only",
|
|
3025
3057
|
"source": "workflow-call-input"
|
|
3026
3058
|
},
|
|
3059
|
+
"release-passport-kfd-product-gate-jsons": {
|
|
3060
|
+
"classification": "digest-only",
|
|
3061
|
+
"source": "workflow-call-input"
|
|
3062
|
+
},
|
|
3063
|
+
"release-passport-kfd-support-matrix-json": {
|
|
3064
|
+
"classification": "digest-only",
|
|
3065
|
+
"source": "workflow-call-input"
|
|
3066
|
+
},
|
|
3027
3067
|
"release-passport-output-dir": {
|
|
3028
3068
|
"classification": "included",
|
|
3029
3069
|
"source": "workflow-call-input"
|
|
@@ -3073,7 +3113,7 @@
|
|
|
3073
3113
|
"missing receipts are non-qualifying and must not be represented as a successful controller run"
|
|
3074
3114
|
],
|
|
3075
3115
|
"breakingDigest": "sha256:015d8de793adbd4c539416be7d7512e18cc92097e629b0203fa06d2c183e98bd",
|
|
3076
|
-
"auditDigest": "sha256:
|
|
3116
|
+
"auditDigest": "sha256:126ee323c031e318ca5d3623a834d5a39263e7b38e1ef349a239084ae1aff116"
|
|
3077
3117
|
},
|
|
3078
3118
|
{
|
|
3079
3119
|
"contractVersion": 1,
|
|
@@ -3134,7 +3174,7 @@
|
|
|
3134
3174
|
"controllerDescriptor": {
|
|
3135
3175
|
"contract": "buildchain.controller-descriptor/v1",
|
|
3136
3176
|
"digest": "sha256:f97656a8df0758c8e404d5b7c387529256a1ec45d1748f8efb6847a3256b1216",
|
|
3137
|
-
"registryDigest": "sha256:
|
|
3177
|
+
"registryDigest": "sha256:fcd7a66644c922460625b5bce0b3ceaa20bc84e87681bf949e807bd8c358fcf4",
|
|
3138
3178
|
"inputClassifications": {
|
|
3139
3179
|
"buildchain-ref": {
|
|
3140
3180
|
"classification": "included",
|
|
@@ -3257,7 +3297,7 @@
|
|
|
3257
3297
|
"controllerDescriptor": {
|
|
3258
3298
|
"contract": "buildchain.controller-descriptor/v1",
|
|
3259
3299
|
"digest": "sha256:b6f53563c0adc859bc586c05fce560a5094d7d9666438d63c5fd3e1fc4774555",
|
|
3260
|
-
"registryDigest": "sha256:
|
|
3300
|
+
"registryDigest": "sha256:fcd7a66644c922460625b5bce0b3ceaa20bc84e87681bf949e807bd8c358fcf4",
|
|
3261
3301
|
"inputClassifications": {}
|
|
3262
3302
|
},
|
|
3263
3303
|
"guarantees": [
|
|
@@ -3271,5 +3311,5 @@
|
|
|
3271
3311
|
}
|
|
3272
3312
|
],
|
|
3273
3313
|
"compatibilityDigest": "sha256:008b1c5a90a787cf30106829ac7aca68ab501f6d9c375e415d9c5c6b89039f46",
|
|
3274
|
-
"contractDigest": "sha256:
|
|
3314
|
+
"contractDigest": "sha256:b267a2e659ab75433deca4d8f257cee075ca764497132be34c6d2c2f0a0a47c3"
|
|
3275
3315
|
}
|