@metasession.co/devaudit-cli 0.3.12 → 0.3.14

package/sdlc/files/_common/scripts/render-test-cycles.sh

@@ -0,0 +1,227 @@
+#!/usr/bin/env bash
+# render-test-cycles.sh — Render release test cycles as markdown tables.
+#
+# Usage:
+#   bash scripts/render-test-cycles.sh path/to/release-journey.json
+#
+# Supported inputs:
+#   1. First-class cycle payloads with `.cycles[]`
+#   2. Legacy grouped-evidence payloads with one of:
+#        - `.legacyCycles[]`
+#        - `.testCycleGroups[]`
+#        - `.evidenceGroups[]`
+#
+# Output:
+#   Markdown suitable for inclusion under `## Test Cycles` in
+#   `compliance/evidence/REQ-XXX/test-execution-summary.md`.
+
+set -euo pipefail
+
+INPUT_JSON="${1:-}"
+
+if [ -z "$INPUT_JSON" ] || [ ! -f "$INPUT_JSON" ]; then
+  echo "Usage: $0 <release-journey.json>" >&2
+  exit 2
+fi
+
+if ! command -v jq >/dev/null 2>&1; then
+  echo "Error: jq is required." >&2
+  exit 1
+fi
+
+stage_label() {
+  case "$1" in
+    1) printf '1 plan' ;;
+    2) printf '2 implement_test' ;;
+    3) printf '3 compile_evidence' ;;
+    4) printf '4 uat_review' ;;
+    5) printf '5 production' ;;
+    *) printf '%s unknown' "${1:-?}" ;;
+  esac
+}
+
+format_date() {
+  local value="$1"
+  if [ -z "$value" ] || [ "$value" = "null" ]; then
+    printf 'Unknown'
+  else
+    printf '%s' "$value" | sed -E 's/T/ /; s/Z$//; s/[.][0-9]+$//'
+  fi
+}
+
+render_first_class_cycles() {
+  echo "| Source Release | SDLC Stage | Cycle | Kind | Outcome | Workflow / Run | Related Evidence | Incident / Remediation | Date |"
+  echo "| --- | --- | --- | --- | --- | --- | --- | --- | --- |"
+
+  declare -A COUNTS=()
+  local rows
+  rows="$(
+    jq -r '
+      (.cycles // [])
+      | sort_by(.sourceRelease // "", .sdlcStage // 0, .startedAt // "", .completedAt // "", .cycleKind // "")
+      | .[]
+      | {
+          sourceRelease: (.sourceRelease // "Unknown"),
+          stageCode: ((.sdlcStage // 0) | tostring),
+          kind: (.cycleKind // "unknown"),
+          outcome: (.outcome // "unknown"),
+          workflow: (
+            if (.workflowUrl // "") != "" then
+              "[" + ((.workflowName // "Workflow")) + "](" + .workflowUrl + ")"
+            else
+              (.workflowName // "Manual")
+            end
+          ),
+          runMeta: (
+            [
+              (if (.externalRunId // "") != "" then "run " + .externalRunId else empty end),
+              (if (.externalRunAttempt // null) != null then "attempt " + (.externalRunAttempt | tostring) else empty end)
+            ]
+            | map(select(length > 0))
+            | join(", ")
+          ),
+          evidence: (
+            (.relatedEvidence // [])
+            | map(.displayName // .fileName // .name // .evidenceType // empty)
+            | map(select(length > 0))
+            | join(", ")
+          ),
+          incident: (
+            [
+              (.incidentReference // empty),
+              (.remediationReference // empty),
+              (.outcomeReason // empty)
+            ]
+            | map(select(length > 0))
+            | join("; ")
+          ),
+          date: (.completedAt // .startedAt // "")
+        }
+      | @base64
+    ' "$INPUT_JSON"
+  )"
+
+  if [ -z "$rows" ]; then
+    echo "| Unknown | Unknown | None | unknown | unknown | No cycle records returned | None | None | Unknown |"
+    echo
+    echo "**Final assessment:** No first-class cycle records were returned by the portal."
+    return 0
+  fi
+
+  while IFS= read -r row_b64; do
+    [ -n "$row_b64" ] || continue
+    local source_release stage_code kind outcome workflow run_meta evidence incident date
+    source_release="$(printf '%s' "$row_b64" | base64 -d | jq -r '.sourceRelease')"
+    stage_code="$(printf '%s' "$row_b64" | base64 -d | jq -r '.stageCode')"
+    kind="$(printf '%s' "$row_b64" | base64 -d | jq -r '.kind')"
+    outcome="$(printf '%s' "$row_b64" | base64 -d | jq -r '.outcome')"
+    workflow="$(printf '%s' "$row_b64" | base64 -d | jq -r '.workflow')"
+    run_meta="$(printf '%s' "$row_b64" | base64 -d | jq -r '.runMeta')"
+    evidence="$(printf '%s' "$row_b64" | base64 -d | jq -r '.evidence')"
+    incident="$(printf '%s' "$row_b64" | base64 -d | jq -r '.incident')"
+    date="$(printf '%s' "$row_b64" | base64 -d | jq -r '.date')"
+    [ -n "$source_release" ] || continue
+    local group_key cycle_ordinal workflow_cell evidence_cell incident_cell
+    group_key="${source_release}|${stage_code}"
+    COUNTS["$group_key"]=$(( ${COUNTS["$group_key"]:-0} + 1 ))
+    cycle_ordinal="#${COUNTS[$group_key]}"
+    workflow_cell="$workflow"
+    if [ -n "$run_meta" ]; then
+      workflow_cell="${workflow_cell} (${run_meta})"
+    fi
+    evidence_cell="${evidence:-None}"
+    incident_cell="${incident:-None}"
+    printf '| %s | %s | %s | %s | %s | %s | %s | %s | %s |\n' \
+      "$source_release" \
+      "$(stage_label "$stage_code")" \
+      "$cycle_ordinal" \
+      "$kind" \
+      "$outcome" \
+      "$workflow_cell" \
+      "$evidence_cell" \
+      "$incident_cell" \
+      "$(format_date "$date")"
+  done <<<"$rows"
+
+  echo
+  echo "**Final assessment:** Stage-scoped cycle numbering is authoritative from first-class portal cycle records."
+}
+
+render_legacy_cycles() {
+  echo "> Legacy portal fallback — first-class cycle records unavailable; grouped by uploaded evidence \`testCycleId\`."
+  echo
+  echo "| Source Release | SDLC Stage | Cycle | Kind | Outcome | Workflow / Run | Related Evidence | Incident / Remediation | Date |"
+  echo "| --- | --- | --- | --- | --- | --- | --- | --- | --- |"
+
+  local rows
+  rows="$(
+    jq -r '
+      (.legacyCycles // .testCycleGroups // .evidenceGroups // [])
+      | .[]
+      | {
+          sourceRelease: (.sourceRelease // "Legacy grouped evidence"),
+          stageLabel: (.sdlcStageLabel // "legacy grouping"),
+          cycleId: (.testCycleId // .cycleId // "unknown"),
+          kind: (.cycleKind // "legacy"),
+          outcome: (.outcome // "unknown"),
+          workflow: (
+            if (.workflowUrl // "") != "" then
+              "[" + ((.workflowName // "Workflow")) + "](" + .workflowUrl + ")"
+            else
+              (.workflowName // "Legacy grouping")
+            end
+          ),
+          evidence: (
+            (.relatedEvidence // .evidence // [])
+            | map(.displayName // .fileName // .name // .evidenceType // .path // empty)
+            | map(select(length > 0))
+            | join(", ")
+          ),
+          incident: (.incidentReference // .notes // "Legacy fallback"),
+          date: (.date // .createdAt // "")
+        }
+      | @base64
+    ' "$INPUT_JSON"
+  )"
+
+  if [ -z "$rows" ]; then
+    echo "| Legacy grouped evidence | legacy grouping | unknown | legacy | unknown | Legacy grouping | None | Legacy fallback | Unknown |"
+    echo
+    echo "**Final assessment:** Legacy fallback used, but no grouped evidence records were returned."
+    return 0
+  fi
+
+  while IFS= read -r row_b64; do
+    [ -n "$row_b64" ] || continue
+    local source_release stage_label_value cycle_id kind outcome workflow evidence incident date
+    source_release="$(printf '%s' "$row_b64" | base64 -d | jq -r '.sourceRelease')"
+    stage_label_value="$(printf '%s' "$row_b64" | base64 -d | jq -r '.stageLabel')"
+    cycle_id="$(printf '%s' "$row_b64" | base64 -d | jq -r '.cycleId')"
+    kind="$(printf '%s' "$row_b64" | base64 -d | jq -r '.kind')"
+    outcome="$(printf '%s' "$row_b64" | base64 -d | jq -r '.outcome')"
+    workflow="$(printf '%s' "$row_b64" | base64 -d | jq -r '.workflow')"
+    evidence="$(printf '%s' "$row_b64" | base64 -d | jq -r '.evidence')"
+    incident="$(printf '%s' "$row_b64" | base64 -d | jq -r '.incident')"
+    date="$(printf '%s' "$row_b64" | base64 -d | jq -r '.date')"
+    [ -n "$cycle_id" ] || continue
+    printf '| %s | %s | %s | %s | %s | %s | %s | %s | %s |\n' \
+      "$source_release" \
+      "$stage_label_value" \
+      "$cycle_id" \
+      "$kind" \
+      "$outcome" \
+      "$workflow" \
+      "${evidence:-None}" \
+      "${incident:-Legacy fallback}" \
+      "$(format_date "$date")"
+  done <<<"$rows"
+
+  echo
+  echo "**Final assessment:** Legacy grouping was used because the portal did not expose first-class cycle records."
+}
+
+if jq -e '((.cycles // []) | length) > 0' "$INPUT_JSON" >/dev/null 2>&1; then
+  render_first_class_cycles
+else
+  render_legacy_cycles
+fi

package/sdlc/files/_common/scripts/render-test-cycles.test.sh

@@ -0,0 +1,107 @@
+#!/usr/bin/env bash
+# render-test-cycles.test.sh — Tests for render-test-cycles.sh.
+
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+HELPER="$SCRIPT_DIR/render-test-cycles.sh"
+[ -x "$HELPER" ] || chmod +x "$HELPER"
+
+PASS=0
+FAIL=0
+WORK="$(mktemp -d)"
+trap 'rm -rf "$WORK"' EXIT
+
+assert_contains() {
+  local desc="$1"
+  local needle="$2"
+  local haystack="$3"
+  if printf '%s' "$haystack" | grep -Fq "$needle"; then
+    echo "  PASS: $desc"
+    PASS=$((PASS + 1))
+  else
+    echo "  FAIL: $desc"
+    echo "    missing: $needle"
+    echo "$haystack" | sed 's/^/    /'
+    FAIL=$((FAIL + 1))
+  fi
+}
+
+echo "=== render-test-cycles.sh tests ==="
+
+cat > "$WORK/first-class.json" <<'EOF'
+{
+  "cycles": [
+    {
+      "sourceRelease": "REQ-091",
+      "sdlcStage": 2,
+      "cycleKind": "quality_gate",
+      "outcome": "failed",
+      "workflowName": "Quality Gates",
+      "workflowUrl": "https://github.com/example/repo/actions/runs/100",
+      "externalRunId": "100",
+      "externalRunAttempt": 1,
+      "relatedEvidence": [{ "displayName": "quality-gates.json" }],
+      "incidentReference": "#501",
+      "startedAt": "2026-07-15T08:00:00Z",
+      "completedAt": "2026-07-15T08:05:00Z"
+    },
+    {
+      "sourceRelease": "REQ-091",
+      "sdlcStage": 2,
+      "cycleKind": "quality_gate",
+      "outcome": "passed",
+      "workflowName": "Quality Gates",
+      "workflowUrl": "https://github.com/example/repo/actions/runs/101",
+      "externalRunId": "101",
+      "externalRunAttempt": 2,
+      "relatedEvidence": [{ "displayName": "quality-gates-rerun.json" }],
+      "remediationReference": "PR #507",
+      "startedAt": "2026-07-15T09:00:00Z",
+      "completedAt": "2026-07-15T09:07:00Z"
+    },
+    {
+      "sourceRelease": "REQ-090",
+      "sdlcStage": 4,
+      "cycleKind": "uat",
+      "outcome": "passed",
+      "workflowName": "UAT Review",
+      "workflowUrl": "https://portal.example/releases/req-090",
+      "relatedEvidence": [{ "displayName": "uat-checklist.md" }],
+      "startedAt": "2026-07-15T10:00:00Z",
+      "completedAt": "2026-07-15T10:12:00Z"
+    }
+  ]
+}
+EOF
+
+OUTPUT="$(bash "$HELPER" "$WORK/first-class.json")"
+assert_contains "first-class heading rendered" "| Source Release | SDLC Stage | Cycle | Kind | Outcome | Workflow / Run | Related Evidence | Incident / Remediation | Date |" "$OUTPUT"
+assert_contains "stage label rendered" "| REQ-091 | 2 implement_test | #1 | quality_gate | failed | [Quality Gates](https://github.com/example/repo/actions/runs/100) (run 100, attempt 1) | quality-gates.json | #501 | 2026-07-15 08:05:00 |" "$OUTPUT"
+assert_contains "ordinal increments within source release + stage" "| REQ-091 | 2 implement_test | #2 | quality_gate | passed | [Quality Gates](https://github.com/example/repo/actions/runs/101) (run 101, attempt 2) | quality-gates-rerun.json | PR #507 | 2026-07-15 09:07:00 |" "$OUTPUT"
+assert_contains "different release/stage restarts numbering" "| REQ-090 | 4 uat_review | #1 | uat | passed | [UAT Review](https://portal.example/releases/req-090) | uat-checklist.md | None | 2026-07-15 10:12:00 |" "$OUTPUT"
+assert_contains "first-class final assessment rendered" "Stage-scoped cycle numbering is authoritative from first-class portal cycle records." "$OUTPUT"
+
+cat > "$WORK/legacy.json" <<'EOF'
+{
+  "legacyCycles": [
+    {
+      "testCycleId": "287654321",
+      "workflowName": "Legacy E2E",
+      "workflowUrl": "https://github.com/example/repo/actions/runs/287654321",
+      "relatedEvidence": [{ "fileName": "e2e-results.json" }, { "fileName": "screenshot.png" }],
+      "notes": "grouped from uploaded evidence only",
+      "date": "2026-07-14T18:30:00Z"
+    }
+  ]
+}
+EOF
+
+OUTPUT="$(bash "$HELPER" "$WORK/legacy.json")"
+assert_contains "legacy fallback note rendered" "Legacy portal fallback — first-class cycle records unavailable; grouped by uploaded evidence" "$OUTPUT"
+assert_contains "legacy row rendered" "| Legacy grouped evidence | legacy grouping | 287654321 | legacy | unknown | [Legacy E2E](https://github.com/example/repo/actions/runs/287654321) | e2e-results.json, screenshot.png | grouped from uploaded evidence only | 2026-07-14 18:30:00 |" "$OUTPUT"
+assert_contains "legacy final assessment rendered" "Legacy grouping was used because the portal did not expose first-class cycle records." "$OUTPUT"
+
+echo
+echo "=== render-test-cycles.test.sh: $PASS passed, $FAIL failed ==="
+[ "$FAIL" -eq 0 ]

package/sdlc/files/_common/scripts/report-release-check.sh

@@ -0,0 +1,86 @@
+#!/usr/bin/env bash
+# Records authoritative required-check state independently of evidence upload.
+set -euo pipefail
+
+PROJECT_SLUG="" RELEASE_VERSION="" CHECK_KEY="" LABEL="" PROVIDER="github_actions"
+STATUS="" REQUIRED="true" EXTERNAL_RUN_ID="" EXTERNAL_URL="" COMMIT_SHA="" BRANCH=""
+STARTED_AT="" COMPLETED_AT="" DETAILS_JSON='{}'
+
+while [ "$#" -gt 0 ]; do
+  case "$1" in
+    --project-slug) PROJECT_SLUG="$2"; shift 2 ;;
+    --release) RELEASE_VERSION="$2"; shift 2 ;;
+    --check-key) CHECK_KEY="$2"; shift 2 ;;
+    --label) LABEL="$2"; shift 2 ;;
+    --provider) PROVIDER="$2"; shift 2 ;;
+    --status) STATUS="$2"; shift 2 ;;
+    --required) REQUIRED="$2"; shift 2 ;;
+    --external-run-id) EXTERNAL_RUN_ID="$2"; shift 2 ;;
+    --external-url) EXTERNAL_URL="$2"; shift 2 ;;
+    --commit-sha) COMMIT_SHA="$2"; shift 2 ;;
+    --branch) BRANCH="$2"; shift 2 ;;
+    --started-at) STARTED_AT="$2"; shift 2 ;;
+    --completed-at) COMPLETED_AT="$2"; shift 2 ;;
+    --details-json) DETAILS_JSON="$2"; shift 2 ;;
+    *) echo "Unknown option: $1" >&2; exit 1 ;;
+  esac
+done
+
+for value in PROJECT_SLUG RELEASE_VERSION CHECK_KEY LABEL STATUS; do
+  if [ -z "${!value}" ]; then echo "Error: ${value} is required" >&2; exit 1; fi
+done
+case "$STATUS" in
+  queued|running|successful|failed|cancelled|timed_out|skipped|action_required|unknown) ;;
+  *) echo "Error: invalid check status '$STATUS'" >&2; exit 1 ;;
+esac
+jq -e 'type == "object"' >/dev/null <<<"$DETAILS_JSON" || {
+  echo "Error: --details-json must be a JSON object" >&2; exit 1;
+}
+
+BASE="${DEVAUDIT_BASE_URL%/}"
+if [ -z "$BASE" ] || [ -z "${DEVAUDIT_API_KEY:-}" ]; then
+  echo "::warning::Release check reporting skipped: DevAudit URL/API key missing" >&2
+  exit 0
+fi
+ENCODED_SLUG=$(jq -rn --arg v "$PROJECT_SLUG" '$v|@uri')
+ENCODED_VERSION=$(jq -rn --arg v "$RELEASE_VERSION" '$v|@uri')
+RESOLVE=$(curl -fsS \
+  -H "Authorization: Bearer ${DEVAUDIT_API_KEY}" \
+  "${BASE}/api/ci/releases/resolve?projectSlug=${ENCODED_SLUG}&versionPrefix=${ENCODED_VERSION}" || true)
+RELEASE_ID=$(jq -r --arg version "$RELEASE_VERSION" \
+  'if .latest.version == $version then .latest.id // empty else empty end' <<<"$RESOLVE" 2>/dev/null || true)
+if [ -z "$RELEASE_ID" ]; then
+  echo "::warning::Release check reporting skipped: exact release ${RELEASE_VERSION} not found" >&2
+  exit 0
+fi
+
+PAYLOAD=$(jq -n \
+  --arg checkKey "$CHECK_KEY" --arg displayLabel "$LABEL" --arg provider "$PROVIDER" \
+  --arg status "$STATUS" --argjson required "$REQUIRED" \
+  --arg externalRunId "$EXTERNAL_RUN_ID" --arg externalUrl "$EXTERNAL_URL" \
+  --arg commitSha "$COMMIT_SHA" --arg branch "$BRANCH" \
+  --arg startedAt "$STARTED_AT" --arg completedAt "$COMPLETED_AT" \
+  --argjson details "$DETAILS_JSON" \
+  '{checkKey:$checkKey,label:$displayLabel,provider:$provider,status:$status,required:$required,
+    externalRunId:(if $externalRunId=="" then null else $externalRunId end),
+    externalUrl:(if $externalUrl=="" then null else $externalUrl end),
+    commitSha:(if $commitSha=="" then null else $commitSha end),
+    branch:(if $branch=="" then null else $branch end),
+    startedAt:(if $startedAt=="" then null else $startedAt end),
+    completedAt:(if $completedAt=="" then null else $completedAt end),details:$details}')
+
+RESPONSE_FILE=$(mktemp)
+trap 'rm -f "$RESPONSE_FILE"' EXIT
+HTTP_CODE=$(curl -sS -o "$RESPONSE_FILE" -w '%{http_code}' \
+  -X POST "${BASE}/api/ci/releases/${RELEASE_ID}/checks" \
+  -H "Authorization: Bearer ${DEVAUDIT_API_KEY}" -H 'Content-Type: application/json' \
+  -d "$PAYLOAD")
+if [ "$HTTP_CODE" = "404" ]; then
+  echo "::warning::Portal does not support first-class release checks yet" >&2
+  exit 0
+fi
+if [ "$HTTP_CODE" -lt 200 ] || [ "$HTTP_CODE" -ge 300 ]; then
+  cat "$RESPONSE_FILE" >&2 || true
+  echo "Error: release check API returned HTTP ${HTTP_CODE}" >&2
+  exit 1
+fi

package/sdlc/files/_common/scripts/report-release-check.test.sh

@@ -0,0 +1,97 @@
+#!/usr/bin/env bash
+# Focused regression tests for authoritative release-check reporting.
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+HELPER="$SCRIPT_DIR/report-release-check.sh"
+PASS=0
+FAIL=0
+
+ok() { echo "  PASS: $1"; PASS=$((PASS + 1)); }
+no() { echo "  FAIL: $1"; FAIL=$((FAIL + 1)); }
+
+make_fixture() {
+  local dir="$1"
+  mkdir -p "$dir/bin"
+  cat > "$dir/bin/curl" <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+URL=""
+OUT=""
+BODY=""
+ARGS=("$@")
+for ((i=0; i<${#ARGS[@]}; i++)); do
+  case "${ARGS[$i]}" in
+    -o) OUT="${ARGS[$((i+1))]}" ;;
+    -d) BODY="${ARGS[$((i+1))]}" ;;
+    http://*|https://*) URL="${ARGS[$i]}" ;;
+  esac
+done
+printf 'URL:%s\nBODY:%s\n' "$URL" "$BODY" >> "${CHECK_TEST_LOG:?}"
+if [[ "$URL" == *'/api/ci/releases/resolve'* ]]; then
+  printf '%s' "${RESOLVE_BODY:-{}}"
+  exit 0
+fi
+if [ -n "$OUT" ]; then printf '%s' "${CHECK_BODY:-{}}" > "$OUT"; fi
+printf '%s' "${CHECK_STATUS:-200}"
+EOF
+  chmod +x "$dir/bin/curl"
+}
+
+run_helper() {
+  PATH="$1/bin:$PATH" \
+  CHECK_TEST_LOG="$1/curl.log" \
+  DEVAUDIT_BASE_URL="https://devaudit.example.test" \
+  DEVAUDIT_API_KEY="mc_test_dummy" \
+  "$HELPER" "${@:2}"
+}
+
+base_args=(
+  --project-slug fixture-app
+  --release REQ-100
+  --check-key quality-gates
+  --label "Quality Gates"
+  --status failed
+  --external-run-id 123
+  --commit-sha abc123
+  --details-json '{"artifactUpload":"successful"}'
+)
+
+echo "=== report-release-check.sh tests ==="
+
+dir=$(mktemp -d)
+make_fixture "$dir"
+RESOLVE_BODY='{"latest":{"id":"release-1","version":"REQ-100"}}' \
+  CHECK_STATUS=201 run_helper "$dir" "${base_args[@]}"
+if grep -q '/api/ci/releases/release-1/checks' "$dir/curl.log"; then ok "posts to exact release"; else no "missing check endpoint"; fi
+if grep -q 'status.*failed' "$dir/curl.log" && grep -q 'artifactUpload.*successful' "$dir/curl.log"; then
+  ok "keeps execution outcome separate from upload detail"
+else
+  no "incorrect check payload"
+fi
+rm -rf "$dir"
+
+dir=$(mktemp -d)
+make_fixture "$dir"
+RESOLVE_BODY='{"latest":{"id":"release-1","version":"REQ-100"}}' \
+  CHECK_STATUS=404 run_helper "$dir" "${base_args[@]}" >/dev/null 2>&1 && ok "tolerates older portal" || no "404 should be tolerant"
+rm -rf "$dir"
+
+dir=$(mktemp -d)
+make_fixture "$dir"
+if RESOLVE_BODY='{"latest":{"id":"release-1","version":"REQ-100"}}' \
+  CHECK_STATUS=500 CHECK_BODY='{"error":"failed"}' run_helper "$dir" "${base_args[@]}" >/dev/null 2>&1; then
+  no "500 should fail"
+else
+  ok "fails on portal error"
+fi
+rm -rf "$dir"
+
+if "$HELPER" "${base_args[@]/failed/not-a-status}" >/dev/null 2>&1; then
+  no "invalid status should fail"
+else
+  ok "rejects invalid status"
+fi
+
+echo "=== report-release-check.sh: $PASS passed, $FAIL failed ==="
+[ "$FAIL" -eq 0 ]