@kungfu-tech/buildchain 4.0.8 → 4.0.9-alpha.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (57) hide show
  1. package/AGENTS.md +12 -19
  2. package/CONTRIBUTING.md +6 -9
  3. package/README.md +11 -1
  4. package/architecture/agent-change-map.md +11 -4
  5. package/architecture/build-environments.json +71 -0
  6. package/architecture/build-orchestration.json +18 -0
  7. package/architecture/ci-lane-change-budget.json +51 -2
  8. package/architecture/internal-capabilities.json +17 -4
  9. package/architecture/maintainability-debt.json +37 -126
  10. package/architecture/maintainability-policy.json +19 -210
  11. package/architecture/release-topology.json +9 -7
  12. package/architecture/universal-workflow-bootstrap.json +5 -4
  13. package/architecture/universal-workflow-train-admission.json +2 -2
  14. package/architecture/workflow-taxonomy.json +13 -0
  15. package/bin/buildchain.mjs +1 -1
  16. package/contracts/fixtures/v4-tail-reseal-v1/valid.json +1 -1
  17. package/dist/site/buildchain-contract.json +41 -1131
  18. package/dist/site/buildchain-site.json +48 -153
  19. package/dist/site/capability-registry.json +2 -2
  20. package/dist/site/cli-registry.json +1 -1
  21. package/dist/site/controller-registry.json +30 -868
  22. package/dist/site/kfd-claims.json +148 -396
  23. package/dist/site/kfd-upstream-aggregate.json +1 -1
  24. package/dist/site/manual-registry.json +7 -7
  25. package/dist/site/node-api-registry.json +37 -37
  26. package/dist/site/page-registry.json +36 -141
  27. package/dist/site/public-surface-audit.json +93 -402
  28. package/dist/site/publication-authority-registry.json +22 -1
  29. package/dist/site/publication-registry.json +4 -4
  30. package/dist/site/site-manifest.json +11 -11
  31. package/dist/site/workflow-registry.json +165 -391
  32. package/docs/MAP.md +5 -4
  33. package/docs/cli-reference.md +1 -1
  34. package/docs/getting-started.md +8 -7
  35. package/docs/node-api-reference.md +85 -85
  36. package/docs/release-governance.md +19 -18
  37. package/docs/reusable-build-surface.md +160 -1430
  38. package/docs/runtime-train-validation.md +45 -172
  39. package/docs/workflow-catalog.md +1 -0
  40. package/package.json +1 -1
  41. package/packages/core/build-configuration.js +117 -0
  42. package/packages/core/buildchain-config.js +2 -0
  43. package/packages/core/buildchain-contract.js +14 -44
  44. package/packages/core/buildchain-publication-authority.js +1 -0
  45. package/packages/core/controller-evidence.js +2 -9
  46. package/scripts/buildchain-cli-help.mjs +1 -1
  47. package/scripts/check-floating-consumer-policy-contract.mjs +4 -7
  48. package/scripts/check-inventory.mjs +91 -77
  49. package/scripts/check-maintainability.mjs +23 -8
  50. package/scripts/check-universal-workflow-bootstrap.mjs +12 -2
  51. package/scripts/generate-channel-build-workflow.mjs +50 -410
  52. package/scripts/generate-site-bundle.mjs +2 -1
  53. package/scripts/generate-universal-workflow-facades.mjs +1 -0
  54. package/scripts/init-repo.mjs +25 -26
  55. package/scripts/resolve-build-configuration.mjs +105 -0
  56. package/scripts/universal-workflow-self-dogfood.mjs +8 -1
  57. package/scripts/verify-golden-path.mjs +3 -3
@@ -14,20 +14,20 @@
14
14
  },
15
15
  "runtimeContract": {
16
16
  "contract": "kungfu-buildchain-runtime-contract-world",
17
- "compatibilityDigest": "sha256:a0d4f48bb6236f6932466cfb2802b866035c5be5861a9d41c2975307a640fb18",
17
+ "compatibilityDigest": "sha256:e398528e54509c05569630ffcc98a04d41e831479ab921df65943b49bf077719",
18
18
  "majorLine": "v4"
19
19
  },
20
20
  "publicSurfaceReverseAudit": {
21
21
  "contract": "kungfu-buildchain-public-surface-reverse-audit",
22
22
  "path": "dist/site/public-surface-audit.json",
23
23
  "status": "passed",
24
- "sha256": "1ca33908fcf015675120c5fff6518eb0f270f410d2888771912eaf7358be67cd",
24
+ "sha256": "a9b94f9fa34a70d046035f53c5b3fb1f9e98941c1dd59715fa0a88ae0590dc52",
25
25
  "summary": {
26
26
  "cliCommandCount": 117,
27
- "workflowCount": 115,
28
- "actionCount": 8,
27
+ "workflowCount": 116,
28
+ "actionCount": 14,
29
29
  "sitePageCount": 88,
30
- "docCommandRefCount": 1050,
30
+ "docCommandRefCount": 1048,
31
31
  "failureCount": 0
32
32
  },
33
33
  "auditBoundary": {
@@ -246,13 +246,13 @@
246
246
  "contract": "kungfu-buildchain-public-surface-reverse-audit",
247
247
  "path": "dist/site/public-surface-audit.json",
248
248
  "status": "passed",
249
- "sha256": "1ca33908fcf015675120c5fff6518eb0f270f410d2888771912eaf7358be67cd",
249
+ "sha256": "a9b94f9fa34a70d046035f53c5b3fb1f9e98941c1dd59715fa0a88ae0590dc52",
250
250
  "summary": {
251
251
  "cliCommandCount": 117,
252
- "workflowCount": 115,
253
- "actionCount": 8,
252
+ "workflowCount": 116,
253
+ "actionCount": 14,
254
254
  "sitePageCount": 88,
255
- "docCommandRefCount": 1050,
255
+ "docCommandRefCount": 1048,
256
256
  "failureCount": 0
257
257
  },
258
258
  "auditBoundary": {
@@ -4047,102 +4047,9 @@
4047
4047
  "visibility": "public",
4048
4048
  "participantFacing": true,
4049
4049
  "public": true,
4050
- "inputCount": 94,
4050
+ "inputCount": 1,
4051
4051
  "inputs": [
4052
- "artifact-compression-level",
4053
- "artifact-finalization-command",
4054
- "artifact-finalization-on-platform",
4055
- "artifact-name",
4056
- "artifact-name-template",
4057
- "artifact-paths",
4058
- "artifact-relay-s3-bucket",
4059
- "artifact-relay-s3-download-role-arn",
4060
- "artifact-relay-s3-oidc-audience",
4061
- "artifact-relay-s3-prefix",
4062
- "artifact-relay-s3-region",
4063
- "artifact-relay-s3-role-arn",
4064
- "artifact-relay-s3-upload-role-arn",
4065
- "artifact-retention-days",
4066
- "artifact-signing-request-upload-no-proxy",
4067
- "artifact-transfer-mode",
4068
- "aws-codebuild-project",
4069
- "aws-ec2-macos-runner-label",
4070
- "aws-ec2-windows-runner-label",
4071
- "build-command",
4072
- "buildchain-contract-compatibility-policy",
4073
- "buildchain-contract-drift-issue-mode",
4074
- "buildchain-contract-expected-channel",
4075
- "buildchain-contract-expected-major",
4076
- "buildchain-contract-lock-path",
4077
- "buildchain-expected-channel",
4078
- "buildchain-expected-major",
4079
- "buildchain-ref",
4080
- "buildchain-repository",
4081
- "buildchain-visible-workflow",
4082
- "cache-dependency-lock-root",
4083
- "cache-policy-root",
4084
- "cache-toolchain-root",
4085
- "cargo-registry-index",
4086
- "checkout-cache-fallback",
4087
- "checkout-cache-fetch-attempts",
4088
- "checkout-cache-github-timeout-seconds",
4089
- "checkout-cache-mirror-url-template",
4090
- "checkout-cache-mode",
4091
- "checkout-cache-reference-repository-template",
4092
- "checkout-cache-timeout-seconds",
4093
- "checkout-history-mode",
4094
- "compiler-cache-platforms-json",
4095
- "compiler-cache-provider",
4096
- "compiler-cache-required",
4097
- "control-runner-json",
4098
- "credential-island-caller-owned",
4099
- "credential-island-environment",
4100
- "credential-island-macos-app-path",
4101
- "credential-island-macos-platform-id",
4102
- "expected-artifacts-json",
4103
- "fail-fast",
4104
- "gate-profile-aggregate-json",
4105
- "github-artifact-attestation-platform-id",
4106
- "github-artifact-attestation-signer-sha",
4107
- "github-artifact-attestation-subject-path",
4108
- "install-command",
4109
- "kfd-agent-hub",
4110
- "lifecycle-timeout-minutes",
4111
- "linux-container-image",
4112
- "linux-container-preset",
4113
- "node-version",
4114
- "platforms-json",
4115
- "pre-upload-transport-smoke-artifact-root",
4116
- "pre-upload-transport-smoke-scenario-path",
4117
- "process-sample-interval-ms",
4118
- "process-summary-path",
4119
- "publish-anchor-request-json",
4120
- "publish-channel",
4121
- "publish-refs-json",
4122
- "publish-registry",
4123
- "publish-source-ref",
4124
- "release-candidate",
4125
- "release-candidate-family-evidence-json",
4126
- "requested-parallelism",
4127
- "require-build",
4128
- "require-install",
4129
- "require-trusted-event",
4130
- "require-verify",
4131
- "runner-preset",
4132
- "rust-toolchain",
4133
- "rustup-dist-server",
4134
- "rustup-update-root",
4135
- "sample-process-tree",
4136
- "self-hosted-offline-fallback",
4137
- "setup-node",
4138
- "setup-rust",
4139
- "shifu-cache-profile-digest",
4140
- "shifu-cache-profile-ref",
4141
- "universal-request-json",
4142
- "untrusted-policy",
4143
- "verify-command",
4144
- "verify-substage-evidence-path",
4145
- "working-directory"
4052
+ "config-path"
4146
4053
  ],
4147
4054
  "reverseAuditSource": ".github/workflows"
4148
4055
  },
@@ -4300,102 +4207,9 @@
4300
4207
  "visibility": "public",
4301
4208
  "participantFacing": true,
4302
4209
  "public": true,
4303
- "inputCount": 94,
4210
+ "inputCount": 1,
4304
4211
  "inputs": [
4305
- "artifact-compression-level",
4306
- "artifact-finalization-command",
4307
- "artifact-finalization-on-platform",
4308
- "artifact-name",
4309
- "artifact-name-template",
4310
- "artifact-paths",
4311
- "artifact-relay-s3-bucket",
4312
- "artifact-relay-s3-download-role-arn",
4313
- "artifact-relay-s3-oidc-audience",
4314
- "artifact-relay-s3-prefix",
4315
- "artifact-relay-s3-region",
4316
- "artifact-relay-s3-role-arn",
4317
- "artifact-relay-s3-upload-role-arn",
4318
- "artifact-retention-days",
4319
- "artifact-signing-request-upload-no-proxy",
4320
- "artifact-transfer-mode",
4321
- "aws-codebuild-project",
4322
- "aws-ec2-macos-runner-label",
4323
- "aws-ec2-windows-runner-label",
4324
- "build-command",
4325
- "buildchain-contract-compatibility-policy",
4326
- "buildchain-contract-drift-issue-mode",
4327
- "buildchain-contract-expected-channel",
4328
- "buildchain-contract-expected-major",
4329
- "buildchain-contract-lock-path",
4330
- "buildchain-expected-channel",
4331
- "buildchain-expected-major",
4332
- "buildchain-ref",
4333
- "buildchain-repository",
4334
- "buildchain-visible-workflow",
4335
- "cache-dependency-lock-root",
4336
- "cache-policy-root",
4337
- "cache-toolchain-root",
4338
- "cargo-registry-index",
4339
- "checkout-cache-fallback",
4340
- "checkout-cache-fetch-attempts",
4341
- "checkout-cache-github-timeout-seconds",
4342
- "checkout-cache-mirror-url-template",
4343
- "checkout-cache-mode",
4344
- "checkout-cache-reference-repository-template",
4345
- "checkout-cache-timeout-seconds",
4346
- "checkout-history-mode",
4347
- "compiler-cache-platforms-json",
4348
- "compiler-cache-provider",
4349
- "compiler-cache-required",
4350
- "control-runner-json",
4351
- "credential-island-caller-owned",
4352
- "credential-island-environment",
4353
- "credential-island-macos-app-path",
4354
- "credential-island-macos-platform-id",
4355
- "expected-artifacts-json",
4356
- "fail-fast",
4357
- "gate-profile-aggregate-json",
4358
- "github-artifact-attestation-platform-id",
4359
- "github-artifact-attestation-signer-sha",
4360
- "github-artifact-attestation-subject-path",
4361
- "install-command",
4362
- "kfd-agent-hub",
4363
- "lifecycle-timeout-minutes",
4364
- "linux-container-image",
4365
- "linux-container-preset",
4366
- "node-version",
4367
- "platforms-json",
4368
- "pre-upload-transport-smoke-artifact-root",
4369
- "pre-upload-transport-smoke-scenario-path",
4370
- "process-sample-interval-ms",
4371
- "process-summary-path",
4372
- "publish-anchor-request-json",
4373
- "publish-channel",
4374
- "publish-refs-json",
4375
- "publish-registry",
4376
- "publish-source-ref",
4377
- "release-candidate",
4378
- "release-candidate-family-evidence-json",
4379
- "requested-parallelism",
4380
- "require-build",
4381
- "require-install",
4382
- "require-trusted-event",
4383
- "require-verify",
4384
- "runner-preset",
4385
- "rust-toolchain",
4386
- "rustup-dist-server",
4387
- "rustup-update-root",
4388
- "sample-process-tree",
4389
- "self-hosted-offline-fallback",
4390
- "setup-node",
4391
- "setup-rust",
4392
- "shifu-cache-profile-digest",
4393
- "shifu-cache-profile-ref",
4394
- "universal-request-json",
4395
- "untrusted-policy",
4396
- "verify-command",
4397
- "verify-substage-evidence-path",
4398
- "working-directory"
4212
+ "config-path"
4399
4213
  ],
4400
4214
  "reverseAuditSource": ".github/workflows"
4401
4215
  },
@@ -5211,105 +5025,9 @@
5211
5025
  "visibility": "public",
5212
5026
  "participantFacing": true,
5213
5027
  "public": true,
5214
- "inputCount": 97,
5028
+ "inputCount": 1,
5215
5029
  "inputs": [
5216
- "artifact-compression-level",
5217
- "artifact-finalization-command",
5218
- "artifact-finalization-on-platform",
5219
- "artifact-name",
5220
- "artifact-name-template",
5221
- "artifact-paths",
5222
- "artifact-relay-s3-bucket",
5223
- "artifact-relay-s3-download-role-arn",
5224
- "artifact-relay-s3-oidc-audience",
5225
- "artifact-relay-s3-prefix",
5226
- "artifact-relay-s3-region",
5227
- "artifact-relay-s3-role-arn",
5228
- "artifact-relay-s3-upload-role-arn",
5229
- "artifact-retention-days",
5230
- "artifact-signing-request-upload-no-proxy",
5231
- "artifact-transfer-mode",
5232
- "aws-codebuild-project",
5233
- "aws-ec2-macos-runner-label",
5234
- "aws-ec2-windows-runner-label",
5235
- "build-command",
5236
- "buildchain-alpha-contract-lock-path",
5237
- "buildchain-channel",
5238
- "buildchain-contract-compatibility-policy",
5239
- "buildchain-contract-drift-issue-mode",
5240
- "buildchain-contract-expected-channel",
5241
- "buildchain-contract-expected-major",
5242
- "buildchain-contract-lock-path",
5243
- "buildchain-expected-channel",
5244
- "buildchain-expected-major",
5245
- "buildchain-ref",
5246
- "buildchain-repository",
5247
- "buildchain-stable-contract-lock-path",
5248
- "buildchain-visible-workflow",
5249
- "cache-dependency-lock-root",
5250
- "cache-policy-root",
5251
- "cache-toolchain-root",
5252
- "cargo-registry-index",
5253
- "checkout-cache-fallback",
5254
- "checkout-cache-fetch-attempts",
5255
- "checkout-cache-github-timeout-seconds",
5256
- "checkout-cache-mirror-url-template",
5257
- "checkout-cache-mode",
5258
- "checkout-cache-reference-repository-template",
5259
- "checkout-cache-timeout-seconds",
5260
- "checkout-history-mode",
5261
- "compiler-cache-platforms-json",
5262
- "compiler-cache-provider",
5263
- "compiler-cache-required",
5264
- "control-runner-json",
5265
- "credential-island-caller-owned",
5266
- "credential-island-environment",
5267
- "credential-island-macos-app-path",
5268
- "credential-island-macos-platform-id",
5269
- "expected-artifacts-json",
5270
- "fail-fast",
5271
- "gate-profile-aggregate-json",
5272
- "github-artifact-attestation-platform-id",
5273
- "github-artifact-attestation-signer-sha",
5274
- "github-artifact-attestation-subject-path",
5275
- "install-command",
5276
- "kfd-agent-hub",
5277
- "lifecycle-timeout-minutes",
5278
- "linux-container-image",
5279
- "linux-container-preset",
5280
- "node-version",
5281
- "platforms-json",
5282
- "pre-upload-transport-smoke-artifact-root",
5283
- "pre-upload-transport-smoke-scenario-path",
5284
- "process-sample-interval-ms",
5285
- "process-summary-path",
5286
- "publish-anchor-request-json",
5287
- "publish-channel",
5288
- "publish-refs-json",
5289
- "publish-registry",
5290
- "publish-source-ref",
5291
- "release-candidate",
5292
- "release-candidate-family-evidence-json",
5293
- "requested-parallelism",
5294
- "require-build",
5295
- "require-install",
5296
- "require-trusted-event",
5297
- "require-verify",
5298
- "runner-preset",
5299
- "rust-toolchain",
5300
- "rustup-dist-server",
5301
- "rustup-update-root",
5302
- "sample-process-tree",
5303
- "self-hosted-offline-fallback",
5304
- "setup-node",
5305
- "setup-rust",
5306
- "shifu-cache-profile-digest",
5307
- "shifu-cache-profile-ref",
5308
- "universal-request-json",
5309
- "untrusted-policy",
5310
- "verify-command",
5311
- "verify-substage-evidence-path",
5312
- "working-directory"
5030
+ "config-path"
5313
5031
  ],
5314
5032
  "reverseAuditSource": ".github/workflows"
5315
5033
  },
@@ -5833,105 +5551,9 @@
5833
5551
  "visibility": "public",
5834
5552
  "participantFacing": true,
5835
5553
  "public": true,
5836
- "inputCount": 97,
5554
+ "inputCount": 1,
5837
5555
  "inputs": [
5838
- "artifact-compression-level",
5839
- "artifact-finalization-command",
5840
- "artifact-finalization-on-platform",
5841
- "artifact-name",
5842
- "artifact-name-template",
5843
- "artifact-paths",
5844
- "artifact-relay-s3-bucket",
5845
- "artifact-relay-s3-download-role-arn",
5846
- "artifact-relay-s3-oidc-audience",
5847
- "artifact-relay-s3-prefix",
5848
- "artifact-relay-s3-region",
5849
- "artifact-relay-s3-role-arn",
5850
- "artifact-relay-s3-upload-role-arn",
5851
- "artifact-retention-days",
5852
- "artifact-signing-request-upload-no-proxy",
5853
- "artifact-transfer-mode",
5854
- "aws-codebuild-project",
5855
- "aws-ec2-macos-runner-label",
5856
- "aws-ec2-windows-runner-label",
5857
- "build-command",
5858
- "buildchain-alpha-contract-lock-path",
5859
- "buildchain-channel",
5860
- "buildchain-contract-compatibility-policy",
5861
- "buildchain-contract-drift-issue-mode",
5862
- "buildchain-contract-expected-channel",
5863
- "buildchain-contract-expected-major",
5864
- "buildchain-contract-lock-path",
5865
- "buildchain-expected-channel",
5866
- "buildchain-expected-major",
5867
- "buildchain-ref",
5868
- "buildchain-repository",
5869
- "buildchain-stable-contract-lock-path",
5870
- "buildchain-visible-workflow",
5871
- "cache-dependency-lock-root",
5872
- "cache-policy-root",
5873
- "cache-toolchain-root",
5874
- "cargo-registry-index",
5875
- "checkout-cache-fallback",
5876
- "checkout-cache-fetch-attempts",
5877
- "checkout-cache-github-timeout-seconds",
5878
- "checkout-cache-mirror-url-template",
5879
- "checkout-cache-mode",
5880
- "checkout-cache-reference-repository-template",
5881
- "checkout-cache-timeout-seconds",
5882
- "checkout-history-mode",
5883
- "compiler-cache-platforms-json",
5884
- "compiler-cache-provider",
5885
- "compiler-cache-required",
5886
- "control-runner-json",
5887
- "credential-island-caller-owned",
5888
- "credential-island-environment",
5889
- "credential-island-macos-app-path",
5890
- "credential-island-macos-platform-id",
5891
- "expected-artifacts-json",
5892
- "fail-fast",
5893
- "gate-profile-aggregate-json",
5894
- "github-artifact-attestation-platform-id",
5895
- "github-artifact-attestation-signer-sha",
5896
- "github-artifact-attestation-subject-path",
5897
- "install-command",
5898
- "kfd-agent-hub",
5899
- "lifecycle-timeout-minutes",
5900
- "linux-container-image",
5901
- "linux-container-preset",
5902
- "node-version",
5903
- "platforms-json",
5904
- "pre-upload-transport-smoke-artifact-root",
5905
- "pre-upload-transport-smoke-scenario-path",
5906
- "process-sample-interval-ms",
5907
- "process-summary-path",
5908
- "publish-anchor-request-json",
5909
- "publish-channel",
5910
- "publish-refs-json",
5911
- "publish-registry",
5912
- "publish-source-ref",
5913
- "release-candidate",
5914
- "release-candidate-family-evidence-json",
5915
- "requested-parallelism",
5916
- "require-build",
5917
- "require-install",
5918
- "require-trusted-event",
5919
- "require-verify",
5920
- "runner-preset",
5921
- "rust-toolchain",
5922
- "rustup-dist-server",
5923
- "rustup-update-root",
5924
- "sample-process-tree",
5925
- "self-hosted-offline-fallback",
5926
- "setup-node",
5927
- "setup-rust",
5928
- "shifu-cache-profile-digest",
5929
- "shifu-cache-profile-ref",
5930
- "universal-request-json",
5931
- "untrusted-policy",
5932
- "verify-command",
5933
- "verify-substage-evidence-path",
5934
- "working-directory"
5556
+ "config-path"
5935
5557
  ],
5936
5558
  "reverseAuditSource": ".github/workflows"
5937
5559
  },
@@ -7276,6 +6898,20 @@
7276
6898
  "inputs": [],
7277
6899
  "reverseAuditSource": ".github/workflows"
7278
6900
  },
6901
+ {
6902
+ "id": "workflow:self-build-stable-dogfood",
6903
+ "name": "workflow:self-build-stable-dogfood",
6904
+ "kind": "workflow",
6905
+ "sourcePath": ".github/workflows/self-build-stable-dogfood.yml",
6906
+ "evidencePath": ".github/workflows/self-build-stable-dogfood.yml",
6907
+ "availability": "shipped",
6908
+ "visibility": "public",
6909
+ "participantFacing": true,
6910
+ "public": true,
6911
+ "inputCount": 0,
6912
+ "inputs": [],
6913
+ "reverseAuditSource": ".github/workflows"
6914
+ },
7279
6915
  {
7280
6916
  "id": "workflow:self-build-verify",
7281
6917
  "name": "workflow:self-build-verify",
@@ -7646,6 +7282,122 @@
7646
7282
  ],
7647
7283
  "reverseAuditSource": ".github/workflows"
7648
7284
  },
7285
+ {
7286
+ "id": "action:build-agent-hub-evidence",
7287
+ "name": "action:build-agent-hub-evidence",
7288
+ "kind": "action",
7289
+ "sourcePath": "actions/build-agent-hub-evidence/action.yml",
7290
+ "evidencePath": "actions/build-agent-hub-evidence/action.yml",
7291
+ "availability": "shipped",
7292
+ "visibility": "public",
7293
+ "participantFacing": true,
7294
+ "public": true,
7295
+ "inputCount": 3,
7296
+ "inputs": [
7297
+ "plan-json",
7298
+ "platform-json",
7299
+ "source-json"
7300
+ ],
7301
+ "reverseAuditSource": "actions/*/action.yml"
7302
+ },
7303
+ {
7304
+ "id": "action:build-artifact-transfer",
7305
+ "name": "action:build-artifact-transfer",
7306
+ "kind": "action",
7307
+ "sourcePath": "actions/build-artifact-transfer/action.yml",
7308
+ "evidencePath": "actions/build-artifact-transfer/action.yml",
7309
+ "availability": "shipped",
7310
+ "visibility": "public",
7311
+ "participantFacing": true,
7312
+ "public": true,
7313
+ "inputCount": 7,
7314
+ "inputs": [
7315
+ "artifact-name",
7316
+ "plan-json",
7317
+ "platform-json",
7318
+ "relay-role",
7319
+ "relay-upload-role",
7320
+ "source-json",
7321
+ "transfer-json"
7322
+ ],
7323
+ "reverseAuditSource": "actions/*/action.yml"
7324
+ },
7325
+ {
7326
+ "id": "action:build-attestation-policy",
7327
+ "name": "action:build-attestation-policy",
7328
+ "kind": "action",
7329
+ "sourcePath": "actions/build-attestation-policy/action.yml",
7330
+ "evidencePath": "actions/build-attestation-policy/action.yml",
7331
+ "availability": "shipped",
7332
+ "visibility": "public",
7333
+ "participantFacing": true,
7334
+ "public": true,
7335
+ "inputCount": 3,
7336
+ "inputs": [
7337
+ "plan-json",
7338
+ "platform-json",
7339
+ "source-json"
7340
+ ],
7341
+ "reverseAuditSource": "actions/*/action.yml"
7342
+ },
7343
+ {
7344
+ "id": "action:build-lifecycle-stage",
7345
+ "name": "action:build-lifecycle-stage",
7346
+ "kind": "action",
7347
+ "sourcePath": "actions/build-lifecycle-stage/action.yml",
7348
+ "evidencePath": "actions/build-lifecycle-stage/action.yml",
7349
+ "availability": "shipped",
7350
+ "visibility": "public",
7351
+ "participantFacing": true,
7352
+ "public": true,
7353
+ "inputCount": 5,
7354
+ "inputs": [
7355
+ "artifact-name",
7356
+ "plan-json",
7357
+ "platform-json",
7358
+ "source-json",
7359
+ "stage"
7360
+ ],
7361
+ "reverseAuditSource": "actions/*/action.yml"
7362
+ },
7363
+ {
7364
+ "id": "action:build-signing-request",
7365
+ "name": "action:build-signing-request",
7366
+ "kind": "action",
7367
+ "sourcePath": "actions/build-signing-request/action.yml",
7368
+ "evidencePath": "actions/build-signing-request/action.yml",
7369
+ "availability": "shipped",
7370
+ "visibility": "public",
7371
+ "participantFacing": true,
7372
+ "public": true,
7373
+ "inputCount": 4,
7374
+ "inputs": [
7375
+ "artifact-name",
7376
+ "plan-json",
7377
+ "platform-json",
7378
+ "source-json"
7379
+ ],
7380
+ "reverseAuditSource": "actions/*/action.yml"
7381
+ },
7382
+ {
7383
+ "id": "action:build-verification-evidence",
7384
+ "name": "action:build-verification-evidence",
7385
+ "kind": "action",
7386
+ "sourcePath": "actions/build-verification-evidence/action.yml",
7387
+ "evidencePath": "actions/build-verification-evidence/action.yml",
7388
+ "availability": "shipped",
7389
+ "visibility": "public",
7390
+ "participantFacing": true,
7391
+ "public": true,
7392
+ "inputCount": 4,
7393
+ "inputs": [
7394
+ "plan-json",
7395
+ "platform-json",
7396
+ "source-json",
7397
+ "verify-outcome"
7398
+ ],
7399
+ "reverseAuditSource": "actions/*/action.yml"
7400
+ },
7649
7401
  {
7650
7402
  "id": "action:github-artifact-attestation",
7651
7403
  "name": "action:github-artifact-attestation",
@@ -9228,6 +8980,6 @@
9228
8980
  }
9229
8981
  }
9230
8982
  ],
9231
- "publicSurfaceCount": 532
8983
+ "publicSurfaceCount": 539
9232
8984
  }
9233
8985
  }
@@ -4,7 +4,7 @@
4
4
  "product": {
5
5
  "id": "kungfu-tech-buildchain",
6
6
  "name": "@kungfu-tech/buildchain",
7
- "version": "4.0.8",
7
+ "version": "4.0.9-alpha.1",
8
8
  "repository": "https://github.com/kungfu-systems/buildchain"
9
9
  },
10
10
  "source": {