@ship.zone/ci-spec 2.0.0

package/conformance/runner-jobs/invalid/push-permission-container.json

@@ -0,0 +1,70 @@
+{
+  "spec": "2.0.0",
+  "sourceObjectId": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "workflowDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+  "compiledPlanDigest": "4cf6687f9bf88b6b579333864efbe6b669e836a5817b245e7793456db3bec034",
+  "requirements": {
+    "executionProfile": "oci",
+    "isolation": "container",
+    "labels": ["linux"],
+    "features": ["source.tar-gz"],
+    "limits": {
+      "maximumSourceArchiveBytes": 1048576,
+      "maximumSourceExtractedBytes": 4194304,
+      "maximumSourceEntries": 1000,
+      "maximumArtifactArchiveBytes": 0,
+      "maximumArtifactExtractedBytes": 0,
+      "maximumArtifactEntries": 0,
+      "maximumArtifacts": 0,
+      "maximumCacheArchiveBytes": 0,
+      "maximumCacheExtractedBytes": 0,
+      "maximumCacheEntries": 0,
+      "maximumCaches": 0,
+      "maximumLogChunkBytes": 65536,
+      "maximumTotalLogBytes": 10485760,
+      "maximumWorkspaceBytes": 268435456,
+      "maximumWorkspaceEntries": 100000
+    }
+  },
+  "permissions": {
+    "source": "read",
+    "artifacts": "none",
+    "caches": "none",
+    "images": "push"
+  },
+  "network": {
+    "mode": "none"
+  },
+  "execution": {
+    "profile": "oci",
+    "image": "registry.example/ci@sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+    "workingDirectory": "/workspace"
+  },
+  "steps": [
+    {
+      "name": "Test",
+      "command": ["pnpm", "test"],
+      "environment": {
+        "CI": "true",
+        "SHIPZONE_CI_INPUTS_JSON": "{}",
+        "SHIPZONE_CI_MATRIX_JSON": "{}"
+      }
+    }
+  ],
+  "source": {
+    "format": "tar.gz",
+    "sha256": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+    "sizeBytes": 1024,
+    "extractedSizeBytes": 4096,
+    "entryCount": 4
+  },
+  "secrets": {},
+  "timeoutMs": 60000,
+  "resources": {
+    "memoryBytes": 268435456,
+    "cpus": 1,
+    "pids": 256
+  },
+  "artifacts": [],
+  "caches": []
+}

package/conformance/runner-jobs/invalid/shared-memory-below-minimum.json

@@ -0,0 +1,71 @@
+{
+  "spec": "2.0.0",
+  "sourceObjectId": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "workflowDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+  "compiledPlanDigest": "4fa312f19f3e9f50fe7ce511572568e6dbad3959360a32938b55086ff023b285",
+  "requirements": {
+    "executionProfile": "oci",
+    "isolation": "container",
+    "labels": ["linux"],
+    "features": ["source.tar-gz"],
+    "limits": {
+      "maximumSourceArchiveBytes": 1048576,
+      "maximumSourceExtractedBytes": 4194304,
+      "maximumSourceEntries": 1000,
+      "maximumArtifactArchiveBytes": 0,
+      "maximumArtifactExtractedBytes": 0,
+      "maximumArtifactEntries": 0,
+      "maximumArtifacts": 0,
+      "maximumCacheArchiveBytes": 0,
+      "maximumCacheExtractedBytes": 0,
+      "maximumCacheEntries": 0,
+      "maximumCaches": 0,
+      "maximumLogChunkBytes": 65536,
+      "maximumTotalLogBytes": 10485760,
+      "maximumWorkspaceBytes": 21474836480,
+      "maximumWorkspaceEntries": 100000
+    }
+  },
+  "permissions": {
+    "source": "read",
+    "artifacts": "none",
+    "caches": "none",
+    "images": "none"
+  },
+  "network": {
+    "mode": "none"
+  },
+  "execution": {
+    "profile": "oci",
+    "image": "registry.example/ci@sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+    "workingDirectory": "/workspace"
+  },
+  "steps": [
+    {
+      "name": "Test",
+      "command": ["pnpm", "test"],
+      "environment": {
+        "CI": "true",
+        "SHIPZONE_CI_INPUTS_JSON": "{}",
+        "SHIPZONE_CI_MATRIX_JSON": "{}"
+      }
+    }
+  ],
+  "source": {
+    "format": "tar.gz",
+    "sha256": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+    "sizeBytes": 1024,
+    "extractedSizeBytes": 4096,
+    "entryCount": 4
+  },
+  "secrets": {},
+  "timeoutMs": 60000,
+  "resources": {
+    "memoryBytes": 268435456,
+    "cpus": 1,
+    "pids": 256,
+    "sharedMemoryBytes": 1024
+  },
+  "artifacts": [],
+  "caches": []
+}

package/conformance/runner-jobs/invalid/timeout-missing.json

@@ -0,0 +1,69 @@
+{
+  "spec": "2.0.0",
+  "sourceObjectId": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "workflowDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+  "compiledPlanDigest": "0de0ef818ccc203a837d734e38279a73ac158898cc6e6a6826b3fa0ef4d0a155",
+  "requirements": {
+    "executionProfile": "oci",
+    "isolation": "container",
+    "labels": ["linux"],
+    "features": ["source.tar-gz"],
+    "limits": {
+      "maximumSourceArchiveBytes": 1048576,
+      "maximumSourceExtractedBytes": 4194304,
+      "maximumSourceEntries": 1000,
+      "maximumArtifactArchiveBytes": 0,
+      "maximumArtifactExtractedBytes": 0,
+      "maximumArtifactEntries": 0,
+      "maximumArtifacts": 0,
+      "maximumCacheArchiveBytes": 0,
+      "maximumCacheExtractedBytes": 0,
+      "maximumCacheEntries": 0,
+      "maximumCaches": 0,
+      "maximumLogChunkBytes": 65536,
+      "maximumTotalLogBytes": 10485760,
+      "maximumWorkspaceBytes": 268435456,
+      "maximumWorkspaceEntries": 100000
+    }
+  },
+  "permissions": {
+    "source": "read",
+    "artifacts": "none",
+    "caches": "none",
+    "images": "none"
+  },
+  "network": {
+    "mode": "none"
+  },
+  "execution": {
+    "profile": "oci",
+    "image": "registry.example/ci@sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+    "workingDirectory": "/workspace"
+  },
+  "steps": [
+    {
+      "name": "Test",
+      "command": ["pnpm", "test"],
+      "environment": {
+        "CI": "true",
+        "SHIPZONE_CI_INPUTS_JSON": "{}",
+        "SHIPZONE_CI_MATRIX_JSON": "{}"
+      }
+    }
+  ],
+  "source": {
+    "format": "tar.gz",
+    "sha256": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+    "sizeBytes": 1024,
+    "extractedSizeBytes": 4096,
+    "entryCount": 4
+  },
+  "secrets": {},
+  "resources": {
+    "memoryBytes": 268435456,
+    "cpus": 1,
+    "pids": 256
+  },
+  "artifacts": [],
+  "caches": []
+}

package/conformance/runner-jobs/invalid/vm-without-microvm.json

@@ -0,0 +1,82 @@
+{
+  "spec": "2.0.0",
+  "sourceObjectId": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "workflowDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+  "compiledPlanDigest": "2dd170d2f7d96ebc93a0790ca744130fa67c8d500b44de8ad67b4835933bc576",
+  "requirements": {
+    "executionProfile": "vm",
+    "isolation": "container",
+    "labels": ["linux"],
+    "features": ["source.tar-gz"],
+    "limits": {
+      "maximumSourceArchiveBytes": 1048576,
+      "maximumSourceExtractedBytes": 4194304,
+      "maximumSourceEntries": 1000,
+      "maximumArtifactArchiveBytes": 0,
+      "maximumArtifactExtractedBytes": 0,
+      "maximumArtifactEntries": 0,
+      "maximumArtifacts": 0,
+      "maximumCacheArchiveBytes": 0,
+      "maximumCacheExtractedBytes": 0,
+      "maximumCacheEntries": 0,
+      "maximumCaches": 0,
+      "maximumLogChunkBytes": 65536,
+      "maximumTotalLogBytes": 10485760,
+      "maximumWorkspaceBytes": 21474836480,
+      "maximumWorkspaceEntries": 100000
+    },
+    "platform": "linux/amd64"
+  },
+  "permissions": {
+    "source": "read",
+    "artifacts": "none",
+    "caches": "none",
+    "images": "none"
+  },
+  "network": {
+    "mode": "egress",
+    "allow": [
+      {
+        "host": "registry-1.docker.io",
+        "ports": [443]
+      },
+      {
+        "host": "auth.docker.io",
+        "ports": [443]
+      }
+    ]
+  },
+  "execution": {
+    "profile": "vm",
+    "image": "registry.example/ci@sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+    "workingDirectory": "/workspace"
+  },
+  "steps": [
+    {
+      "name": "Test with a container engine",
+      "command": ["/usr/local/bin/with-dockerd", "pnpm", "test"],
+      "environment": {
+        "CI": "true",
+        "SHIPZONE_CI_INPUTS_JSON": "{}",
+        "SHIPZONE_CI_MATRIX_JSON": "{}"
+      }
+    }
+  ],
+  "source": {
+    "format": "tar.gz",
+    "sha256": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+    "sizeBytes": 1024,
+    "extractedSizeBytes": 4096,
+    "entryCount": 4
+  },
+  "secrets": {},
+  "timeoutMs": 60000,
+  "resources": {
+    "memoryBytes": 268435456,
+    "cpus": 1,
+    "pids": 256,
+    "sharedMemoryBytes": 134217728
+  },
+  "artifacts": [],
+  "caches": []
+}

package/conformance/runner-jobs/valid/candidate-test.json

@@ -0,0 +1,72 @@
+{
+  "spec": "2.0.0",
+  "sourceObjectId": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "workflowDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+  "compiledPlanDigest": "cf4576a479ed8acc3d7635cf732de643df8edd0f48320a41e869712e8f72a1f5",
+  "requirements": {
+    "executionProfile": "oci",
+    "isolation": "container",
+    "labels": ["linux"],
+    "features": ["source.tar-gz"],
+    "limits": {
+      "maximumSourceArchiveBytes": 1048576,
+      "maximumSourceExtractedBytes": 4194304,
+      "maximumSourceEntries": 1000,
+      "maximumArtifactArchiveBytes": 0,
+      "maximumArtifactExtractedBytes": 0,
+      "maximumArtifactEntries": 0,
+      "maximumArtifacts": 0,
+      "maximumCacheArchiveBytes": 0,
+      "maximumCacheExtractedBytes": 0,
+      "maximumCacheEntries": 0,
+      "maximumCaches": 0,
+      "maximumLogChunkBytes": 65536,
+      "maximumTotalLogBytes": 10485760,
+      "maximumWorkspaceBytes": 268435456,
+      "maximumWorkspaceEntries": 100000
+    },
+    "platform": "linux/amd64"
+  },
+  "permissions": {
+    "source": "read",
+    "artifacts": "none",
+    "caches": "none",
+    "images": "none"
+  },
+  "network": {
+    "mode": "none"
+  },
+  "execution": {
+    "profile": "oci",
+    "image": {
+      "candidate": "image"
+    },
+    "workingDirectory": "/workspace"
+  },
+  "steps": [
+    {
+      "name": "Candidate smoke test",
+      "command": ["/usr/local/bin/app", "--self-test"],
+      "environment": {
+        "SHIPZONE_CI_INPUTS_JSON": "{}",
+        "SHIPZONE_CI_MATRIX_JSON": "{}"
+      }
+    }
+  ],
+  "source": {
+    "format": "tar.gz",
+    "sha256": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+    "sizeBytes": 1024,
+    "extractedSizeBytes": 4096,
+    "entryCount": 4
+  },
+  "secrets": {},
+  "timeoutMs": 60000,
+  "resources": {
+    "memoryBytes": 268435456,
+    "cpus": 1,
+    "pids": 256
+  },
+  "artifacts": [],
+  "caches": []
+}

package/conformance/runner-jobs/valid/egress.json

@@ -0,0 +1,80 @@
+{
+  "spec": "2.0.0",
+  "sourceObjectId": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "workflowDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+  "compiledPlanDigest": "803afd911881e421960163bbb86c93cdea30f4aa218895f03383a086c0733acf",
+  "requirements": {
+    "executionProfile": "oci",
+    "isolation": "container",
+    "labels": ["linux"],
+    "features": ["source.tar-gz"],
+    "limits": {
+      "maximumSourceArchiveBytes": 1048576,
+      "maximumSourceExtractedBytes": 4194304,
+      "maximumSourceEntries": 1000,
+      "maximumArtifactArchiveBytes": 0,
+      "maximumArtifactExtractedBytes": 0,
+      "maximumArtifactEntries": 0,
+      "maximumArtifacts": 0,
+      "maximumCacheArchiveBytes": 0,
+      "maximumCacheExtractedBytes": 0,
+      "maximumCacheEntries": 0,
+      "maximumCaches": 0,
+      "maximumLogChunkBytes": 65536,
+      "maximumTotalLogBytes": 10485760,
+      "maximumWorkspaceBytes": 268435456,
+      "maximumWorkspaceEntries": 100000
+    }
+  },
+  "permissions": {
+    "source": "read",
+    "artifacts": "none",
+    "caches": "none",
+    "images": "none"
+  },
+  "network": {
+    "mode": "egress",
+    "allow": [
+      {
+        "host": "registry.npmjs.org",
+        "ports": [443]
+      },
+      {
+        "host": "*.githubusercontent.com",
+        "ports": [443]
+      }
+    ]
+  },
+  "execution": {
+    "profile": "oci",
+    "image": "registry.example/ci@sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+    "workingDirectory": "/workspace"
+  },
+  "steps": [
+    {
+      "name": "Install",
+      "command": ["pnpm", "install", "--frozen-lockfile"],
+      "environment": {
+        "CI": "true",
+        "SHIPZONE_CI_INPUTS_JSON": "{}",
+        "SHIPZONE_CI_MATRIX_JSON": "{}"
+      }
+    }
+  ],
+  "source": {
+    "format": "tar.gz",
+    "sha256": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+    "sizeBytes": 1024,
+    "extractedSizeBytes": 4096,
+    "entryCount": 4
+  },
+  "secrets": {},
+  "timeoutMs": 60000,
+  "resources": {
+    "memoryBytes": 268435456,
+    "cpus": 1,
+    "pids": 256
+  },
+  "artifacts": [],
+  "caches": []
+}

package/conformance/runner-jobs/valid/image-build.json

@@ -0,0 +1,100 @@
+{
+  "spec": "2.0.0",
+  "sourceObjectId": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "workflowDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+  "compiledPlanDigest": "e9465908999d42aa96d23ee7965d0da732a2a4bbd99b16748cad10ef328a1abd",
+  "requirements": {
+    "executionProfile": "oci-image",
+    "isolation": "microvm",
+    "platform": "linux/arm64",
+    "labels": ["builder"],
+    "features": ["source.tar-gz", "caches"],
+    "limits": {
+      "maximumSourceArchiveBytes": 1048576,
+      "maximumSourceExtractedBytes": 4194304,
+      "maximumSourceEntries": 1000,
+      "maximumArtifactArchiveBytes": 0,
+      "maximumArtifactExtractedBytes": 0,
+      "maximumArtifactEntries": 0,
+      "maximumArtifacts": 0,
+      "maximumCacheArchiveBytes": 4294967296,
+      "maximumCacheExtractedBytes": 17179869184,
+      "maximumCacheEntries": 1000000,
+      "maximumCaches": 1,
+      "maximumLogChunkBytes": 65536,
+      "maximumTotalLogBytes": 10485760,
+      "maximumWorkspaceBytes": 21474836480,
+      "maximumWorkspaceEntries": 100000
+    }
+  },
+  "permissions": {
+    "source": "read",
+    "artifacts": "none",
+    "caches": "read-write",
+    "images": "push"
+  },
+  "network": {
+    "mode": "egress",
+    "allow": [
+      {
+        "host": "registry.npmjs.org",
+        "ports": [443]
+      }
+    ]
+  },
+  "build": {
+    "context": ".",
+    "dockerfile": "Dockerfile",
+    "target": "production",
+    "buildArgs": {
+      "NODE_ENV": "production"
+    },
+    "secrets": [
+      {
+        "id": "npmrc",
+        "environment": "NPM_TOKEN"
+      }
+    ],
+    "labels": {
+      "org.opencontainers.image.revision": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+      "org.opencontainers.image.source": "https://code.foss.global/example/app",
+      "org.opencontainers.image.title": "app"
+    },
+    "baseImages": [
+      {
+        "name": "base",
+        "image": {
+          "candidate": "base-image"
+        }
+      }
+    ]
+  },
+  "source": {
+    "format": "tar.gz",
+    "sha256": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+    "sizeBytes": 1024,
+    "extractedSizeBytes": 4096,
+    "entryCount": 4
+  },
+  "secrets": {
+    "NPM_TOKEN": "resolved-secret-value"
+  },
+  "timeoutMs": 3600000,
+  "resources": {
+    "memoryBytes": 8589934592,
+    "cpus": 4,
+    "pids": 4096
+  },
+  "artifacts": [],
+  "caches": [
+    {
+      "name": "buildkit",
+      "key": "buildkit-linux-arm64",
+      "access": "read-write",
+      "maximumBytes": 4294967296,
+      "maximumExtractedBytes": 17179869184,
+      "maximumEntries": 1000000,
+      "retentionDays": 14
+    }
+  ]
+}

package/conformance/runner-jobs/valid/minimal.json

@@ -0,0 +1,70 @@
+{
+  "spec": "2.0.0",
+  "sourceObjectId": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "workflowDigest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+  "compiledPlanDigest": "510cbf54d5dbed5636d03249a9c7cb9c69ab1697ff7df505c372a72a6259636d",
+  "requirements": {
+    "executionProfile": "oci",
+    "isolation": "container",
+    "labels": ["linux"],
+    "features": ["source.tar-gz"],
+    "limits": {
+      "maximumSourceArchiveBytes": 1048576,
+      "maximumSourceExtractedBytes": 4194304,
+      "maximumSourceEntries": 1000,
+      "maximumArtifactArchiveBytes": 0,
+      "maximumArtifactExtractedBytes": 0,
+      "maximumArtifactEntries": 0,
+      "maximumArtifacts": 0,
+      "maximumCacheArchiveBytes": 0,
+      "maximumCacheExtractedBytes": 0,
+      "maximumCacheEntries": 0,
+      "maximumCaches": 0,
+      "maximumLogChunkBytes": 65536,
+      "maximumTotalLogBytes": 10485760,
+      "maximumWorkspaceBytes": 268435456,
+      "maximumWorkspaceEntries": 100000
+    }
+  },
+  "permissions": {
+    "source": "read",
+    "artifacts": "none",
+    "caches": "none",
+    "images": "none"
+  },
+  "network": {
+    "mode": "none"
+  },
+  "execution": {
+    "profile": "oci",
+    "image": "registry.example/ci@sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+    "workingDirectory": "/workspace"
+  },
+  "steps": [
+    {
+      "name": "Test",
+      "command": ["pnpm", "test"],
+      "environment": {
+        "CI": "true",
+        "SHIPZONE_CI_INPUTS_JSON": "{}",
+        "SHIPZONE_CI_MATRIX_JSON": "{}"
+      }
+    }
+  ],
+  "source": {
+    "format": "tar.gz",
+    "sha256": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+    "sizeBytes": 1024,
+    "extractedSizeBytes": 4096,
+    "entryCount": 4
+  },
+  "secrets": {},
+  "timeoutMs": 60000,
+  "resources": {
+    "memoryBytes": 268435456,
+    "cpus": 1,
+    "pids": 256
+  },
+  "artifacts": [],
+  "caches": []
+}