@kungfu-tech/buildchain 4.0.8 → 4.0.9-alpha.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/AGENTS.md +12 -19
- package/CONTRIBUTING.md +6 -9
- package/README.md +11 -1
- package/architecture/agent-change-map.md +11 -4
- package/architecture/build-environments.json +71 -0
- package/architecture/build-orchestration.json +18 -0
- package/architecture/ci-lane-change-budget.json +51 -2
- package/architecture/internal-capabilities.json +17 -4
- package/architecture/maintainability-debt.json +37 -126
- package/architecture/maintainability-policy.json +19 -210
- package/architecture/release-topology.json +9 -7
- package/architecture/universal-workflow-bootstrap.json +5 -4
- package/architecture/universal-workflow-train-admission.json +2 -2
- package/architecture/workflow-taxonomy.json +13 -0
- package/bin/buildchain.mjs +1 -1
- package/contracts/fixtures/v4-tail-reseal-v1/valid.json +1 -1
- package/dist/site/buildchain-contract.json +41 -1131
- package/dist/site/buildchain-site.json +48 -153
- package/dist/site/capability-registry.json +2 -2
- package/dist/site/cli-registry.json +1 -1
- package/dist/site/controller-registry.json +30 -868
- package/dist/site/kfd-claims.json +148 -396
- package/dist/site/kfd-upstream-aggregate.json +1 -1
- package/dist/site/manual-registry.json +7 -7
- package/dist/site/node-api-registry.json +37 -37
- package/dist/site/page-registry.json +36 -141
- package/dist/site/public-surface-audit.json +93 -402
- package/dist/site/publication-authority-registry.json +22 -1
- package/dist/site/publication-registry.json +4 -4
- package/dist/site/site-manifest.json +11 -11
- package/dist/site/workflow-registry.json +165 -391
- package/docs/MAP.md +5 -4
- package/docs/cli-reference.md +1 -1
- package/docs/getting-started.md +8 -7
- package/docs/node-api-reference.md +85 -85
- package/docs/release-governance.md +19 -18
- package/docs/reusable-build-surface.md +160 -1430
- package/docs/runtime-train-validation.md +45 -172
- package/docs/workflow-catalog.md +1 -0
- package/package.json +1 -1
- package/packages/core/build-configuration.js +117 -0
- package/packages/core/buildchain-config.js +2 -0
- package/packages/core/buildchain-contract.js +14 -44
- package/packages/core/buildchain-publication-authority.js +1 -0
- package/packages/core/controller-evidence.js +2 -9
- package/scripts/buildchain-cli-help.mjs +1 -1
- package/scripts/check-floating-consumer-policy-contract.mjs +4 -7
- package/scripts/check-inventory.mjs +91 -77
- package/scripts/check-maintainability.mjs +23 -8
- package/scripts/check-universal-workflow-bootstrap.mjs +12 -2
- package/scripts/generate-channel-build-workflow.mjs +50 -410
- package/scripts/generate-site-bundle.mjs +2 -1
- package/scripts/generate-universal-workflow-facades.mjs +1 -0
- package/scripts/init-repo.mjs +25 -26
- package/scripts/resolve-build-configuration.mjs +105 -0
- package/scripts/universal-workflow-self-dogfood.mjs +8 -1
- package/scripts/verify-golden-path.mjs +3 -3
|
@@ -14,20 +14,20 @@
|
|
|
14
14
|
},
|
|
15
15
|
"runtimeContract": {
|
|
16
16
|
"contract": "kungfu-buildchain-runtime-contract-world",
|
|
17
|
-
"compatibilityDigest": "sha256:
|
|
17
|
+
"compatibilityDigest": "sha256:e398528e54509c05569630ffcc98a04d41e831479ab921df65943b49bf077719",
|
|
18
18
|
"majorLine": "v4"
|
|
19
19
|
},
|
|
20
20
|
"publicSurfaceReverseAudit": {
|
|
21
21
|
"contract": "kungfu-buildchain-public-surface-reverse-audit",
|
|
22
22
|
"path": "dist/site/public-surface-audit.json",
|
|
23
23
|
"status": "passed",
|
|
24
|
-
"sha256": "
|
|
24
|
+
"sha256": "a9b94f9fa34a70d046035f53c5b3fb1f9e98941c1dd59715fa0a88ae0590dc52",
|
|
25
25
|
"summary": {
|
|
26
26
|
"cliCommandCount": 117,
|
|
27
|
-
"workflowCount":
|
|
28
|
-
"actionCount":
|
|
27
|
+
"workflowCount": 116,
|
|
28
|
+
"actionCount": 14,
|
|
29
29
|
"sitePageCount": 88,
|
|
30
|
-
"docCommandRefCount":
|
|
30
|
+
"docCommandRefCount": 1048,
|
|
31
31
|
"failureCount": 0
|
|
32
32
|
},
|
|
33
33
|
"auditBoundary": {
|
|
@@ -246,13 +246,13 @@
|
|
|
246
246
|
"contract": "kungfu-buildchain-public-surface-reverse-audit",
|
|
247
247
|
"path": "dist/site/public-surface-audit.json",
|
|
248
248
|
"status": "passed",
|
|
249
|
-
"sha256": "
|
|
249
|
+
"sha256": "a9b94f9fa34a70d046035f53c5b3fb1f9e98941c1dd59715fa0a88ae0590dc52",
|
|
250
250
|
"summary": {
|
|
251
251
|
"cliCommandCount": 117,
|
|
252
|
-
"workflowCount":
|
|
253
|
-
"actionCount":
|
|
252
|
+
"workflowCount": 116,
|
|
253
|
+
"actionCount": 14,
|
|
254
254
|
"sitePageCount": 88,
|
|
255
|
-
"docCommandRefCount":
|
|
255
|
+
"docCommandRefCount": 1048,
|
|
256
256
|
"failureCount": 0
|
|
257
257
|
},
|
|
258
258
|
"auditBoundary": {
|
|
@@ -4047,102 +4047,9 @@
|
|
|
4047
4047
|
"visibility": "public",
|
|
4048
4048
|
"participantFacing": true,
|
|
4049
4049
|
"public": true,
|
|
4050
|
-
"inputCount":
|
|
4050
|
+
"inputCount": 1,
|
|
4051
4051
|
"inputs": [
|
|
4052
|
-
"
|
|
4053
|
-
"artifact-finalization-command",
|
|
4054
|
-
"artifact-finalization-on-platform",
|
|
4055
|
-
"artifact-name",
|
|
4056
|
-
"artifact-name-template",
|
|
4057
|
-
"artifact-paths",
|
|
4058
|
-
"artifact-relay-s3-bucket",
|
|
4059
|
-
"artifact-relay-s3-download-role-arn",
|
|
4060
|
-
"artifact-relay-s3-oidc-audience",
|
|
4061
|
-
"artifact-relay-s3-prefix",
|
|
4062
|
-
"artifact-relay-s3-region",
|
|
4063
|
-
"artifact-relay-s3-role-arn",
|
|
4064
|
-
"artifact-relay-s3-upload-role-arn",
|
|
4065
|
-
"artifact-retention-days",
|
|
4066
|
-
"artifact-signing-request-upload-no-proxy",
|
|
4067
|
-
"artifact-transfer-mode",
|
|
4068
|
-
"aws-codebuild-project",
|
|
4069
|
-
"aws-ec2-macos-runner-label",
|
|
4070
|
-
"aws-ec2-windows-runner-label",
|
|
4071
|
-
"build-command",
|
|
4072
|
-
"buildchain-contract-compatibility-policy",
|
|
4073
|
-
"buildchain-contract-drift-issue-mode",
|
|
4074
|
-
"buildchain-contract-expected-channel",
|
|
4075
|
-
"buildchain-contract-expected-major",
|
|
4076
|
-
"buildchain-contract-lock-path",
|
|
4077
|
-
"buildchain-expected-channel",
|
|
4078
|
-
"buildchain-expected-major",
|
|
4079
|
-
"buildchain-ref",
|
|
4080
|
-
"buildchain-repository",
|
|
4081
|
-
"buildchain-visible-workflow",
|
|
4082
|
-
"cache-dependency-lock-root",
|
|
4083
|
-
"cache-policy-root",
|
|
4084
|
-
"cache-toolchain-root",
|
|
4085
|
-
"cargo-registry-index",
|
|
4086
|
-
"checkout-cache-fallback",
|
|
4087
|
-
"checkout-cache-fetch-attempts",
|
|
4088
|
-
"checkout-cache-github-timeout-seconds",
|
|
4089
|
-
"checkout-cache-mirror-url-template",
|
|
4090
|
-
"checkout-cache-mode",
|
|
4091
|
-
"checkout-cache-reference-repository-template",
|
|
4092
|
-
"checkout-cache-timeout-seconds",
|
|
4093
|
-
"checkout-history-mode",
|
|
4094
|
-
"compiler-cache-platforms-json",
|
|
4095
|
-
"compiler-cache-provider",
|
|
4096
|
-
"compiler-cache-required",
|
|
4097
|
-
"control-runner-json",
|
|
4098
|
-
"credential-island-caller-owned",
|
|
4099
|
-
"credential-island-environment",
|
|
4100
|
-
"credential-island-macos-app-path",
|
|
4101
|
-
"credential-island-macos-platform-id",
|
|
4102
|
-
"expected-artifacts-json",
|
|
4103
|
-
"fail-fast",
|
|
4104
|
-
"gate-profile-aggregate-json",
|
|
4105
|
-
"github-artifact-attestation-platform-id",
|
|
4106
|
-
"github-artifact-attestation-signer-sha",
|
|
4107
|
-
"github-artifact-attestation-subject-path",
|
|
4108
|
-
"install-command",
|
|
4109
|
-
"kfd-agent-hub",
|
|
4110
|
-
"lifecycle-timeout-minutes",
|
|
4111
|
-
"linux-container-image",
|
|
4112
|
-
"linux-container-preset",
|
|
4113
|
-
"node-version",
|
|
4114
|
-
"platforms-json",
|
|
4115
|
-
"pre-upload-transport-smoke-artifact-root",
|
|
4116
|
-
"pre-upload-transport-smoke-scenario-path",
|
|
4117
|
-
"process-sample-interval-ms",
|
|
4118
|
-
"process-summary-path",
|
|
4119
|
-
"publish-anchor-request-json",
|
|
4120
|
-
"publish-channel",
|
|
4121
|
-
"publish-refs-json",
|
|
4122
|
-
"publish-registry",
|
|
4123
|
-
"publish-source-ref",
|
|
4124
|
-
"release-candidate",
|
|
4125
|
-
"release-candidate-family-evidence-json",
|
|
4126
|
-
"requested-parallelism",
|
|
4127
|
-
"require-build",
|
|
4128
|
-
"require-install",
|
|
4129
|
-
"require-trusted-event",
|
|
4130
|
-
"require-verify",
|
|
4131
|
-
"runner-preset",
|
|
4132
|
-
"rust-toolchain",
|
|
4133
|
-
"rustup-dist-server",
|
|
4134
|
-
"rustup-update-root",
|
|
4135
|
-
"sample-process-tree",
|
|
4136
|
-
"self-hosted-offline-fallback",
|
|
4137
|
-
"setup-node",
|
|
4138
|
-
"setup-rust",
|
|
4139
|
-
"shifu-cache-profile-digest",
|
|
4140
|
-
"shifu-cache-profile-ref",
|
|
4141
|
-
"universal-request-json",
|
|
4142
|
-
"untrusted-policy",
|
|
4143
|
-
"verify-command",
|
|
4144
|
-
"verify-substage-evidence-path",
|
|
4145
|
-
"working-directory"
|
|
4052
|
+
"config-path"
|
|
4146
4053
|
],
|
|
4147
4054
|
"reverseAuditSource": ".github/workflows"
|
|
4148
4055
|
},
|
|
@@ -4300,102 +4207,9 @@
|
|
|
4300
4207
|
"visibility": "public",
|
|
4301
4208
|
"participantFacing": true,
|
|
4302
4209
|
"public": true,
|
|
4303
|
-
"inputCount":
|
|
4210
|
+
"inputCount": 1,
|
|
4304
4211
|
"inputs": [
|
|
4305
|
-
"
|
|
4306
|
-
"artifact-finalization-command",
|
|
4307
|
-
"artifact-finalization-on-platform",
|
|
4308
|
-
"artifact-name",
|
|
4309
|
-
"artifact-name-template",
|
|
4310
|
-
"artifact-paths",
|
|
4311
|
-
"artifact-relay-s3-bucket",
|
|
4312
|
-
"artifact-relay-s3-download-role-arn",
|
|
4313
|
-
"artifact-relay-s3-oidc-audience",
|
|
4314
|
-
"artifact-relay-s3-prefix",
|
|
4315
|
-
"artifact-relay-s3-region",
|
|
4316
|
-
"artifact-relay-s3-role-arn",
|
|
4317
|
-
"artifact-relay-s3-upload-role-arn",
|
|
4318
|
-
"artifact-retention-days",
|
|
4319
|
-
"artifact-signing-request-upload-no-proxy",
|
|
4320
|
-
"artifact-transfer-mode",
|
|
4321
|
-
"aws-codebuild-project",
|
|
4322
|
-
"aws-ec2-macos-runner-label",
|
|
4323
|
-
"aws-ec2-windows-runner-label",
|
|
4324
|
-
"build-command",
|
|
4325
|
-
"buildchain-contract-compatibility-policy",
|
|
4326
|
-
"buildchain-contract-drift-issue-mode",
|
|
4327
|
-
"buildchain-contract-expected-channel",
|
|
4328
|
-
"buildchain-contract-expected-major",
|
|
4329
|
-
"buildchain-contract-lock-path",
|
|
4330
|
-
"buildchain-expected-channel",
|
|
4331
|
-
"buildchain-expected-major",
|
|
4332
|
-
"buildchain-ref",
|
|
4333
|
-
"buildchain-repository",
|
|
4334
|
-
"buildchain-visible-workflow",
|
|
4335
|
-
"cache-dependency-lock-root",
|
|
4336
|
-
"cache-policy-root",
|
|
4337
|
-
"cache-toolchain-root",
|
|
4338
|
-
"cargo-registry-index",
|
|
4339
|
-
"checkout-cache-fallback",
|
|
4340
|
-
"checkout-cache-fetch-attempts",
|
|
4341
|
-
"checkout-cache-github-timeout-seconds",
|
|
4342
|
-
"checkout-cache-mirror-url-template",
|
|
4343
|
-
"checkout-cache-mode",
|
|
4344
|
-
"checkout-cache-reference-repository-template",
|
|
4345
|
-
"checkout-cache-timeout-seconds",
|
|
4346
|
-
"checkout-history-mode",
|
|
4347
|
-
"compiler-cache-platforms-json",
|
|
4348
|
-
"compiler-cache-provider",
|
|
4349
|
-
"compiler-cache-required",
|
|
4350
|
-
"control-runner-json",
|
|
4351
|
-
"credential-island-caller-owned",
|
|
4352
|
-
"credential-island-environment",
|
|
4353
|
-
"credential-island-macos-app-path",
|
|
4354
|
-
"credential-island-macos-platform-id",
|
|
4355
|
-
"expected-artifacts-json",
|
|
4356
|
-
"fail-fast",
|
|
4357
|
-
"gate-profile-aggregate-json",
|
|
4358
|
-
"github-artifact-attestation-platform-id",
|
|
4359
|
-
"github-artifact-attestation-signer-sha",
|
|
4360
|
-
"github-artifact-attestation-subject-path",
|
|
4361
|
-
"install-command",
|
|
4362
|
-
"kfd-agent-hub",
|
|
4363
|
-
"lifecycle-timeout-minutes",
|
|
4364
|
-
"linux-container-image",
|
|
4365
|
-
"linux-container-preset",
|
|
4366
|
-
"node-version",
|
|
4367
|
-
"platforms-json",
|
|
4368
|
-
"pre-upload-transport-smoke-artifact-root",
|
|
4369
|
-
"pre-upload-transport-smoke-scenario-path",
|
|
4370
|
-
"process-sample-interval-ms",
|
|
4371
|
-
"process-summary-path",
|
|
4372
|
-
"publish-anchor-request-json",
|
|
4373
|
-
"publish-channel",
|
|
4374
|
-
"publish-refs-json",
|
|
4375
|
-
"publish-registry",
|
|
4376
|
-
"publish-source-ref",
|
|
4377
|
-
"release-candidate",
|
|
4378
|
-
"release-candidate-family-evidence-json",
|
|
4379
|
-
"requested-parallelism",
|
|
4380
|
-
"require-build",
|
|
4381
|
-
"require-install",
|
|
4382
|
-
"require-trusted-event",
|
|
4383
|
-
"require-verify",
|
|
4384
|
-
"runner-preset",
|
|
4385
|
-
"rust-toolchain",
|
|
4386
|
-
"rustup-dist-server",
|
|
4387
|
-
"rustup-update-root",
|
|
4388
|
-
"sample-process-tree",
|
|
4389
|
-
"self-hosted-offline-fallback",
|
|
4390
|
-
"setup-node",
|
|
4391
|
-
"setup-rust",
|
|
4392
|
-
"shifu-cache-profile-digest",
|
|
4393
|
-
"shifu-cache-profile-ref",
|
|
4394
|
-
"universal-request-json",
|
|
4395
|
-
"untrusted-policy",
|
|
4396
|
-
"verify-command",
|
|
4397
|
-
"verify-substage-evidence-path",
|
|
4398
|
-
"working-directory"
|
|
4212
|
+
"config-path"
|
|
4399
4213
|
],
|
|
4400
4214
|
"reverseAuditSource": ".github/workflows"
|
|
4401
4215
|
},
|
|
@@ -5211,105 +5025,9 @@
|
|
|
5211
5025
|
"visibility": "public",
|
|
5212
5026
|
"participantFacing": true,
|
|
5213
5027
|
"public": true,
|
|
5214
|
-
"inputCount":
|
|
5028
|
+
"inputCount": 1,
|
|
5215
5029
|
"inputs": [
|
|
5216
|
-
"
|
|
5217
|
-
"artifact-finalization-command",
|
|
5218
|
-
"artifact-finalization-on-platform",
|
|
5219
|
-
"artifact-name",
|
|
5220
|
-
"artifact-name-template",
|
|
5221
|
-
"artifact-paths",
|
|
5222
|
-
"artifact-relay-s3-bucket",
|
|
5223
|
-
"artifact-relay-s3-download-role-arn",
|
|
5224
|
-
"artifact-relay-s3-oidc-audience",
|
|
5225
|
-
"artifact-relay-s3-prefix",
|
|
5226
|
-
"artifact-relay-s3-region",
|
|
5227
|
-
"artifact-relay-s3-role-arn",
|
|
5228
|
-
"artifact-relay-s3-upload-role-arn",
|
|
5229
|
-
"artifact-retention-days",
|
|
5230
|
-
"artifact-signing-request-upload-no-proxy",
|
|
5231
|
-
"artifact-transfer-mode",
|
|
5232
|
-
"aws-codebuild-project",
|
|
5233
|
-
"aws-ec2-macos-runner-label",
|
|
5234
|
-
"aws-ec2-windows-runner-label",
|
|
5235
|
-
"build-command",
|
|
5236
|
-
"buildchain-alpha-contract-lock-path",
|
|
5237
|
-
"buildchain-channel",
|
|
5238
|
-
"buildchain-contract-compatibility-policy",
|
|
5239
|
-
"buildchain-contract-drift-issue-mode",
|
|
5240
|
-
"buildchain-contract-expected-channel",
|
|
5241
|
-
"buildchain-contract-expected-major",
|
|
5242
|
-
"buildchain-contract-lock-path",
|
|
5243
|
-
"buildchain-expected-channel",
|
|
5244
|
-
"buildchain-expected-major",
|
|
5245
|
-
"buildchain-ref",
|
|
5246
|
-
"buildchain-repository",
|
|
5247
|
-
"buildchain-stable-contract-lock-path",
|
|
5248
|
-
"buildchain-visible-workflow",
|
|
5249
|
-
"cache-dependency-lock-root",
|
|
5250
|
-
"cache-policy-root",
|
|
5251
|
-
"cache-toolchain-root",
|
|
5252
|
-
"cargo-registry-index",
|
|
5253
|
-
"checkout-cache-fallback",
|
|
5254
|
-
"checkout-cache-fetch-attempts",
|
|
5255
|
-
"checkout-cache-github-timeout-seconds",
|
|
5256
|
-
"checkout-cache-mirror-url-template",
|
|
5257
|
-
"checkout-cache-mode",
|
|
5258
|
-
"checkout-cache-reference-repository-template",
|
|
5259
|
-
"checkout-cache-timeout-seconds",
|
|
5260
|
-
"checkout-history-mode",
|
|
5261
|
-
"compiler-cache-platforms-json",
|
|
5262
|
-
"compiler-cache-provider",
|
|
5263
|
-
"compiler-cache-required",
|
|
5264
|
-
"control-runner-json",
|
|
5265
|
-
"credential-island-caller-owned",
|
|
5266
|
-
"credential-island-environment",
|
|
5267
|
-
"credential-island-macos-app-path",
|
|
5268
|
-
"credential-island-macos-platform-id",
|
|
5269
|
-
"expected-artifacts-json",
|
|
5270
|
-
"fail-fast",
|
|
5271
|
-
"gate-profile-aggregate-json",
|
|
5272
|
-
"github-artifact-attestation-platform-id",
|
|
5273
|
-
"github-artifact-attestation-signer-sha",
|
|
5274
|
-
"github-artifact-attestation-subject-path",
|
|
5275
|
-
"install-command",
|
|
5276
|
-
"kfd-agent-hub",
|
|
5277
|
-
"lifecycle-timeout-minutes",
|
|
5278
|
-
"linux-container-image",
|
|
5279
|
-
"linux-container-preset",
|
|
5280
|
-
"node-version",
|
|
5281
|
-
"platforms-json",
|
|
5282
|
-
"pre-upload-transport-smoke-artifact-root",
|
|
5283
|
-
"pre-upload-transport-smoke-scenario-path",
|
|
5284
|
-
"process-sample-interval-ms",
|
|
5285
|
-
"process-summary-path",
|
|
5286
|
-
"publish-anchor-request-json",
|
|
5287
|
-
"publish-channel",
|
|
5288
|
-
"publish-refs-json",
|
|
5289
|
-
"publish-registry",
|
|
5290
|
-
"publish-source-ref",
|
|
5291
|
-
"release-candidate",
|
|
5292
|
-
"release-candidate-family-evidence-json",
|
|
5293
|
-
"requested-parallelism",
|
|
5294
|
-
"require-build",
|
|
5295
|
-
"require-install",
|
|
5296
|
-
"require-trusted-event",
|
|
5297
|
-
"require-verify",
|
|
5298
|
-
"runner-preset",
|
|
5299
|
-
"rust-toolchain",
|
|
5300
|
-
"rustup-dist-server",
|
|
5301
|
-
"rustup-update-root",
|
|
5302
|
-
"sample-process-tree",
|
|
5303
|
-
"self-hosted-offline-fallback",
|
|
5304
|
-
"setup-node",
|
|
5305
|
-
"setup-rust",
|
|
5306
|
-
"shifu-cache-profile-digest",
|
|
5307
|
-
"shifu-cache-profile-ref",
|
|
5308
|
-
"universal-request-json",
|
|
5309
|
-
"untrusted-policy",
|
|
5310
|
-
"verify-command",
|
|
5311
|
-
"verify-substage-evidence-path",
|
|
5312
|
-
"working-directory"
|
|
5030
|
+
"config-path"
|
|
5313
5031
|
],
|
|
5314
5032
|
"reverseAuditSource": ".github/workflows"
|
|
5315
5033
|
},
|
|
@@ -5833,105 +5551,9 @@
|
|
|
5833
5551
|
"visibility": "public",
|
|
5834
5552
|
"participantFacing": true,
|
|
5835
5553
|
"public": true,
|
|
5836
|
-
"inputCount":
|
|
5554
|
+
"inputCount": 1,
|
|
5837
5555
|
"inputs": [
|
|
5838
|
-
"
|
|
5839
|
-
"artifact-finalization-command",
|
|
5840
|
-
"artifact-finalization-on-platform",
|
|
5841
|
-
"artifact-name",
|
|
5842
|
-
"artifact-name-template",
|
|
5843
|
-
"artifact-paths",
|
|
5844
|
-
"artifact-relay-s3-bucket",
|
|
5845
|
-
"artifact-relay-s3-download-role-arn",
|
|
5846
|
-
"artifact-relay-s3-oidc-audience",
|
|
5847
|
-
"artifact-relay-s3-prefix",
|
|
5848
|
-
"artifact-relay-s3-region",
|
|
5849
|
-
"artifact-relay-s3-role-arn",
|
|
5850
|
-
"artifact-relay-s3-upload-role-arn",
|
|
5851
|
-
"artifact-retention-days",
|
|
5852
|
-
"artifact-signing-request-upload-no-proxy",
|
|
5853
|
-
"artifact-transfer-mode",
|
|
5854
|
-
"aws-codebuild-project",
|
|
5855
|
-
"aws-ec2-macos-runner-label",
|
|
5856
|
-
"aws-ec2-windows-runner-label",
|
|
5857
|
-
"build-command",
|
|
5858
|
-
"buildchain-alpha-contract-lock-path",
|
|
5859
|
-
"buildchain-channel",
|
|
5860
|
-
"buildchain-contract-compatibility-policy",
|
|
5861
|
-
"buildchain-contract-drift-issue-mode",
|
|
5862
|
-
"buildchain-contract-expected-channel",
|
|
5863
|
-
"buildchain-contract-expected-major",
|
|
5864
|
-
"buildchain-contract-lock-path",
|
|
5865
|
-
"buildchain-expected-channel",
|
|
5866
|
-
"buildchain-expected-major",
|
|
5867
|
-
"buildchain-ref",
|
|
5868
|
-
"buildchain-repository",
|
|
5869
|
-
"buildchain-stable-contract-lock-path",
|
|
5870
|
-
"buildchain-visible-workflow",
|
|
5871
|
-
"cache-dependency-lock-root",
|
|
5872
|
-
"cache-policy-root",
|
|
5873
|
-
"cache-toolchain-root",
|
|
5874
|
-
"cargo-registry-index",
|
|
5875
|
-
"checkout-cache-fallback",
|
|
5876
|
-
"checkout-cache-fetch-attempts",
|
|
5877
|
-
"checkout-cache-github-timeout-seconds",
|
|
5878
|
-
"checkout-cache-mirror-url-template",
|
|
5879
|
-
"checkout-cache-mode",
|
|
5880
|
-
"checkout-cache-reference-repository-template",
|
|
5881
|
-
"checkout-cache-timeout-seconds",
|
|
5882
|
-
"checkout-history-mode",
|
|
5883
|
-
"compiler-cache-platforms-json",
|
|
5884
|
-
"compiler-cache-provider",
|
|
5885
|
-
"compiler-cache-required",
|
|
5886
|
-
"control-runner-json",
|
|
5887
|
-
"credential-island-caller-owned",
|
|
5888
|
-
"credential-island-environment",
|
|
5889
|
-
"credential-island-macos-app-path",
|
|
5890
|
-
"credential-island-macos-platform-id",
|
|
5891
|
-
"expected-artifacts-json",
|
|
5892
|
-
"fail-fast",
|
|
5893
|
-
"gate-profile-aggregate-json",
|
|
5894
|
-
"github-artifact-attestation-platform-id",
|
|
5895
|
-
"github-artifact-attestation-signer-sha",
|
|
5896
|
-
"github-artifact-attestation-subject-path",
|
|
5897
|
-
"install-command",
|
|
5898
|
-
"kfd-agent-hub",
|
|
5899
|
-
"lifecycle-timeout-minutes",
|
|
5900
|
-
"linux-container-image",
|
|
5901
|
-
"linux-container-preset",
|
|
5902
|
-
"node-version",
|
|
5903
|
-
"platforms-json",
|
|
5904
|
-
"pre-upload-transport-smoke-artifact-root",
|
|
5905
|
-
"pre-upload-transport-smoke-scenario-path",
|
|
5906
|
-
"process-sample-interval-ms",
|
|
5907
|
-
"process-summary-path",
|
|
5908
|
-
"publish-anchor-request-json",
|
|
5909
|
-
"publish-channel",
|
|
5910
|
-
"publish-refs-json",
|
|
5911
|
-
"publish-registry",
|
|
5912
|
-
"publish-source-ref",
|
|
5913
|
-
"release-candidate",
|
|
5914
|
-
"release-candidate-family-evidence-json",
|
|
5915
|
-
"requested-parallelism",
|
|
5916
|
-
"require-build",
|
|
5917
|
-
"require-install",
|
|
5918
|
-
"require-trusted-event",
|
|
5919
|
-
"require-verify",
|
|
5920
|
-
"runner-preset",
|
|
5921
|
-
"rust-toolchain",
|
|
5922
|
-
"rustup-dist-server",
|
|
5923
|
-
"rustup-update-root",
|
|
5924
|
-
"sample-process-tree",
|
|
5925
|
-
"self-hosted-offline-fallback",
|
|
5926
|
-
"setup-node",
|
|
5927
|
-
"setup-rust",
|
|
5928
|
-
"shifu-cache-profile-digest",
|
|
5929
|
-
"shifu-cache-profile-ref",
|
|
5930
|
-
"universal-request-json",
|
|
5931
|
-
"untrusted-policy",
|
|
5932
|
-
"verify-command",
|
|
5933
|
-
"verify-substage-evidence-path",
|
|
5934
|
-
"working-directory"
|
|
5556
|
+
"config-path"
|
|
5935
5557
|
],
|
|
5936
5558
|
"reverseAuditSource": ".github/workflows"
|
|
5937
5559
|
},
|
|
@@ -7276,6 +6898,20 @@
|
|
|
7276
6898
|
"inputs": [],
|
|
7277
6899
|
"reverseAuditSource": ".github/workflows"
|
|
7278
6900
|
},
|
|
6901
|
+
{
|
|
6902
|
+
"id": "workflow:self-build-stable-dogfood",
|
|
6903
|
+
"name": "workflow:self-build-stable-dogfood",
|
|
6904
|
+
"kind": "workflow",
|
|
6905
|
+
"sourcePath": ".github/workflows/self-build-stable-dogfood.yml",
|
|
6906
|
+
"evidencePath": ".github/workflows/self-build-stable-dogfood.yml",
|
|
6907
|
+
"availability": "shipped",
|
|
6908
|
+
"visibility": "public",
|
|
6909
|
+
"participantFacing": true,
|
|
6910
|
+
"public": true,
|
|
6911
|
+
"inputCount": 0,
|
|
6912
|
+
"inputs": [],
|
|
6913
|
+
"reverseAuditSource": ".github/workflows"
|
|
6914
|
+
},
|
|
7279
6915
|
{
|
|
7280
6916
|
"id": "workflow:self-build-verify",
|
|
7281
6917
|
"name": "workflow:self-build-verify",
|
|
@@ -7646,6 +7282,122 @@
|
|
|
7646
7282
|
],
|
|
7647
7283
|
"reverseAuditSource": ".github/workflows"
|
|
7648
7284
|
},
|
|
7285
|
+
{
|
|
7286
|
+
"id": "action:build-agent-hub-evidence",
|
|
7287
|
+
"name": "action:build-agent-hub-evidence",
|
|
7288
|
+
"kind": "action",
|
|
7289
|
+
"sourcePath": "actions/build-agent-hub-evidence/action.yml",
|
|
7290
|
+
"evidencePath": "actions/build-agent-hub-evidence/action.yml",
|
|
7291
|
+
"availability": "shipped",
|
|
7292
|
+
"visibility": "public",
|
|
7293
|
+
"participantFacing": true,
|
|
7294
|
+
"public": true,
|
|
7295
|
+
"inputCount": 3,
|
|
7296
|
+
"inputs": [
|
|
7297
|
+
"plan-json",
|
|
7298
|
+
"platform-json",
|
|
7299
|
+
"source-json"
|
|
7300
|
+
],
|
|
7301
|
+
"reverseAuditSource": "actions/*/action.yml"
|
|
7302
|
+
},
|
|
7303
|
+
{
|
|
7304
|
+
"id": "action:build-artifact-transfer",
|
|
7305
|
+
"name": "action:build-artifact-transfer",
|
|
7306
|
+
"kind": "action",
|
|
7307
|
+
"sourcePath": "actions/build-artifact-transfer/action.yml",
|
|
7308
|
+
"evidencePath": "actions/build-artifact-transfer/action.yml",
|
|
7309
|
+
"availability": "shipped",
|
|
7310
|
+
"visibility": "public",
|
|
7311
|
+
"participantFacing": true,
|
|
7312
|
+
"public": true,
|
|
7313
|
+
"inputCount": 7,
|
|
7314
|
+
"inputs": [
|
|
7315
|
+
"artifact-name",
|
|
7316
|
+
"plan-json",
|
|
7317
|
+
"platform-json",
|
|
7318
|
+
"relay-role",
|
|
7319
|
+
"relay-upload-role",
|
|
7320
|
+
"source-json",
|
|
7321
|
+
"transfer-json"
|
|
7322
|
+
],
|
|
7323
|
+
"reverseAuditSource": "actions/*/action.yml"
|
|
7324
|
+
},
|
|
7325
|
+
{
|
|
7326
|
+
"id": "action:build-attestation-policy",
|
|
7327
|
+
"name": "action:build-attestation-policy",
|
|
7328
|
+
"kind": "action",
|
|
7329
|
+
"sourcePath": "actions/build-attestation-policy/action.yml",
|
|
7330
|
+
"evidencePath": "actions/build-attestation-policy/action.yml",
|
|
7331
|
+
"availability": "shipped",
|
|
7332
|
+
"visibility": "public",
|
|
7333
|
+
"participantFacing": true,
|
|
7334
|
+
"public": true,
|
|
7335
|
+
"inputCount": 3,
|
|
7336
|
+
"inputs": [
|
|
7337
|
+
"plan-json",
|
|
7338
|
+
"platform-json",
|
|
7339
|
+
"source-json"
|
|
7340
|
+
],
|
|
7341
|
+
"reverseAuditSource": "actions/*/action.yml"
|
|
7342
|
+
},
|
|
7343
|
+
{
|
|
7344
|
+
"id": "action:build-lifecycle-stage",
|
|
7345
|
+
"name": "action:build-lifecycle-stage",
|
|
7346
|
+
"kind": "action",
|
|
7347
|
+
"sourcePath": "actions/build-lifecycle-stage/action.yml",
|
|
7348
|
+
"evidencePath": "actions/build-lifecycle-stage/action.yml",
|
|
7349
|
+
"availability": "shipped",
|
|
7350
|
+
"visibility": "public",
|
|
7351
|
+
"participantFacing": true,
|
|
7352
|
+
"public": true,
|
|
7353
|
+
"inputCount": 5,
|
|
7354
|
+
"inputs": [
|
|
7355
|
+
"artifact-name",
|
|
7356
|
+
"plan-json",
|
|
7357
|
+
"platform-json",
|
|
7358
|
+
"source-json",
|
|
7359
|
+
"stage"
|
|
7360
|
+
],
|
|
7361
|
+
"reverseAuditSource": "actions/*/action.yml"
|
|
7362
|
+
},
|
|
7363
|
+
{
|
|
7364
|
+
"id": "action:build-signing-request",
|
|
7365
|
+
"name": "action:build-signing-request",
|
|
7366
|
+
"kind": "action",
|
|
7367
|
+
"sourcePath": "actions/build-signing-request/action.yml",
|
|
7368
|
+
"evidencePath": "actions/build-signing-request/action.yml",
|
|
7369
|
+
"availability": "shipped",
|
|
7370
|
+
"visibility": "public",
|
|
7371
|
+
"participantFacing": true,
|
|
7372
|
+
"public": true,
|
|
7373
|
+
"inputCount": 4,
|
|
7374
|
+
"inputs": [
|
|
7375
|
+
"artifact-name",
|
|
7376
|
+
"plan-json",
|
|
7377
|
+
"platform-json",
|
|
7378
|
+
"source-json"
|
|
7379
|
+
],
|
|
7380
|
+
"reverseAuditSource": "actions/*/action.yml"
|
|
7381
|
+
},
|
|
7382
|
+
{
|
|
7383
|
+
"id": "action:build-verification-evidence",
|
|
7384
|
+
"name": "action:build-verification-evidence",
|
|
7385
|
+
"kind": "action",
|
|
7386
|
+
"sourcePath": "actions/build-verification-evidence/action.yml",
|
|
7387
|
+
"evidencePath": "actions/build-verification-evidence/action.yml",
|
|
7388
|
+
"availability": "shipped",
|
|
7389
|
+
"visibility": "public",
|
|
7390
|
+
"participantFacing": true,
|
|
7391
|
+
"public": true,
|
|
7392
|
+
"inputCount": 4,
|
|
7393
|
+
"inputs": [
|
|
7394
|
+
"plan-json",
|
|
7395
|
+
"platform-json",
|
|
7396
|
+
"source-json",
|
|
7397
|
+
"verify-outcome"
|
|
7398
|
+
],
|
|
7399
|
+
"reverseAuditSource": "actions/*/action.yml"
|
|
7400
|
+
},
|
|
7649
7401
|
{
|
|
7650
7402
|
"id": "action:github-artifact-attestation",
|
|
7651
7403
|
"name": "action:github-artifact-attestation",
|
|
@@ -9228,6 +8980,6 @@
|
|
|
9228
8980
|
}
|
|
9229
8981
|
}
|
|
9230
8982
|
],
|
|
9231
|
-
"publicSurfaceCount":
|
|
8983
|
+
"publicSurfaceCount": 539
|
|
9232
8984
|
}
|
|
9233
8985
|
}
|