@ship.zone/ci-spec 2.0.0

package/conformance/archive-cases.json

@@ -0,0 +1,446 @@
+{
+  "spec": "2.0.0",
+  "format": "tar.gz",
+  "encoding": "base64",
+  "maximumPathMetadataBytes": 134217728,
+  "cases": [
+    {
+      "id": "valid-basic",
+      "valid": true,
+      "archiveBase64": "H4sIAAAAAAACA+3RwQ2AMAwDwIzSCagrSjNPyQZpKzE+Ei9APCkIkfvYX8tFxVNnAJBi3BLAOS86MwdyEz2glZqVgDtG7sd9RFHxeahLffX/8fh/AMdEDvZ/d3kWMsYY8z8ryCS5xQAKAAA=",
+      "expectedMetadata": {
+        "sha256": "42424e38de46f7c0a92e382d71b41cf4e996cce94dfc8d7637aba7c0066c2500",
+        "sizeBytes": 107,
+        "extractedSizeBytes": 3,
+        "entryCount": 2
+      },
+      "limits": {
+        "maximumExtractedBytes": 3,
+        "maximumEntries": 2,
+        "maximumPathMetadataBytes": 12
+      },
+      "pathMetadataBytes": 12
+    },
+    {
+      "id": "valid-pax-path-and-safe-symlink",
+      "valid": true,
+      "archiveBase64": "H4sIAAAAAAACA+3Wuw7CIBQG4DP7FLyAeqAXJndH38AcEVsTegnFpI9v6qKpgw7F6/kWSBkIIf9fWuq3hWt25Lalpb31MD1ExDxNLyMijsdh8TofvkuVJxpEAS9w6gJ5QJzikLeH+xKZEqapKluHFT1pBuxndN4sY+/xMP93c621BJFx/qPbUL++9H63PBydfc/9J2rc/1LnIHq+/+hULloK5WroAdfUxbymyi5CH7jl/0LryNiycXFefs/2fzLKv0wxAYGc/+hoZzgEf8ycvLd1+Kz3n0wRMxDq7qfE+WeMsamcAcVtIg0AFAAA",
+      "expectedMetadata": {
+        "sha256": "941f4162232b5af9c20fe15278e320e8fe5429a508de9f79621b38a0c8e13316",
+        "sizeBytes": 237,
+        "extractedSizeBytes": 3,
+        "entryCount": 3
+      },
+      "limits": {
+        "maximumExtractedBytes": 3,
+        "maximumEntries": 3,
+        "maximumPathMetadataBytes": 44
+      },
+      "pathMetadataBytes": 44
+    },
+    {
+      "id": "valid-forward-symlink",
+      "valid": true,
+      "archiveBase64": "H4sIAAAAAAACA0suLSpKzSthoCUwMDAwMDMxAdMGBgboNCbb0MjA0JBBwagksSg9lbZuYygtLkksYjAwoIYnkT03RAA9gphw/Buixb+BiYEpgwJdAnGEx38FwygYBaNgFIyCkQgAOUXOewAKAAA=",
+      "expectedMetadata": {
+        "sha256": "6080b51051a8c719a9fa81ed6b4417a9865fa04df9663ec024ac423fb7e10729",
+        "sizeBytes": 110,
+        "extractedSizeBytes": 1,
+        "entryCount": 2
+      },
+      "limits": {
+        "maximumExtractedBytes": 1,
+        "maximumEntries": 2,
+        "maximumPathMetadataBytes": 134217728
+      },
+      "pathMetadataBytes": 19
+    },
+    {
+      "id": "valid-implicit-parent-and-prefix-neighbor",
+      "valid": true,
+      "archiveBase64": "H4sIAAAAAAACA0tkoD0wMDAwMDMxAdMGBgboNBa2ubGxGYOCAR3cxlBaXJJYxGBgQA1PIntuiIDEJP3kjMyclEEV/4YGpmbGo/E/CkbBKBgFtAQARNKbAQAIAAA=",
+      "expectedMetadata": {
+        "sha256": "5c6da38a7b97d06cbc8696990d92929577a0e54569f0298fa63ba30d2a4d23a0",
+        "sizeBytes": 92,
+        "extractedSizeBytes": 0,
+        "entryCount": 2
+      },
+      "limits": {
+        "maximumExtractedBytes": 1,
+        "maximumEntries": 2,
+        "maximumPathMetadataBytes": 134217728
+      },
+      "pathMetadataBytes": 9
+    },
+    {
+      "id": "reject-duplicate-path",
+      "valid": false,
+      "archiveBase64": "H4sIAAAAAAACAytOzE1loDEwMDAwMDMxAdMGBgboNCbb0MDAxJhBwYCBDqC0uCSxiMHAgBqeRPbcEAHFo/E/ouN/FIyCUTByAQBYB9qkAAgAAA==",
+      "expectedMetadata": {
+        "sha256": "3c6d700492436b573bb1c2b85644116d5d1c2b445a8b44fdb8d06be4fb4bd046",
+        "sizeBytes": 82,
+        "extractedSizeBytes": 0,
+        "entryCount": 2
+      },
+      "limits": {
+        "maximumExtractedBytes": 1,
+        "maximumEntries": 2,
+        "maximumPathMetadataBytes": 134217728
+      }
+    },
+    {
+      "id": "reject-late-directory-ancestor",
+      "valid": false,
+      "archiveBase64": "H4sIAAAAAAACAytILErNK9FPzsjMSWGgETAwMDAwMzEB0wYGBug0JtvQ0MTciEHBgIEOoLS4JLGIwcCAGp5E9twQAQWQ+KepHaTHv4GJuTGDgulo/I+CUTAKRgHNAAAWzookAAgAAA==",
+      "expectedMetadata": {
+        "sha256": "f3e7c64270b942d8d9949020db69c3a923363e38ed6433c349639cb60ac78b27",
+        "sizeBytes": 103,
+        "extractedSizeBytes": 0,
+        "entryCount": 2
+      },
+      "limits": {
+        "maximumExtractedBytes": 1,
+        "maximumEntries": 2,
+        "maximumPathMetadataBytes": 134217728
+      }
+    },
+    {
+      "id": "reject-descendant-below-file",
+      "valid": false,
+      "archiveBase64": "H4sIAAAAAAACAytILErNK2GgKTAwMDAwMzEB0wYGBug0JtvQwMTAnEHBgIEOoLS4JLGIwcCAGp5E9twQAQXg+NdPzsjMSRk88W9oYm40Gv+jYBSMglFASwAAX035gAAIAAA=",
+      "expectedMetadata": {
+        "sha256": "5f55b91b6de66edc30646fa3d43ee6001d084526c0821cb7eaa186ea11ea3342",
+        "sizeBytes": 98,
+        "extractedSizeBytes": 0,
+        "entryCount": 2
+      },
+      "limits": {
+        "maximumExtractedBytes": 1,
+        "maximumEntries": 2,
+        "maximumPathMetadataBytes": 134217728
+      }
+    },
+    {
+      "id": "reject-parent-traversal",
+      "valid": false,
+      "archiveBase64": "H4sIAAAAAAACA9PT008tTk4sSGWgHTAwMDAwMzEB0wYGBug0JtvQwNTckEHBgIEOoLS4JLGIwcCAGp5E9twoGAWjYBQMcgAAkgmgugAGAAA=",
+      "expectedMetadata": {
+        "sha256": "82643e2288f22aac44a090069cb7389425d661e35e92d827cd4b4d2573a3e2f9",
+        "sizeBytes": 80,
+        "extractedSizeBytes": 0,
+        "entryCount": 1
+      },
+      "limits": {
+        "maximumExtractedBytes": 1,
+        "maximumEntries": 1,
+        "maximumPathMetadataBytes": 134217728
+      }
+    },
+    {
+      "id": "reject-absolute-path",
+      "valid": false,
+      "archiveBase64": "H4sIAAAAAAACA9NPLU5OLEhloCUwMDAwMDMxAdMGBgboNCbb0MDE2JRBwYCBDqC0uCSxiMHAgBqeRPbcKBgFo2AUDHIAAHbfR68ABgAA",
+      "expectedMetadata": {
+        "sha256": "5858fcc96e9f1c7778b198fd8a21139e9811977721e41fc95105226972628daf",
+        "sizeBytes": 78,
+        "extractedSizeBytes": 0,
+        "entryCount": 1
+      },
+      "limits": {
+        "maximumExtractedBytes": 1,
+        "maximumEntries": 1,
+        "maximumPathMetadataBytes": 134217728
+      }
+    },
+    {
+      "id": "reject-backslash-path",
+      "valid": false,
+      "archiveBase64": "H4sIAAAAAAACA0vJLIpJLU5OLEhloBkwMDAwMDMxAdMGBgboNCbb0NDI0JBBwYCBDqC0uCSxiMHAgBqeRPbcKBgFo2AUDHIAAG7HFrUABgAA",
+      "expectedMetadata": {
+        "sha256": "17b6a654ed4ccf30b4e1e7398b8147f6befd67079c76f754df1decd8c2301020",
+        "sizeBytes": 81,
+        "extractedSizeBytes": 0,
+        "entryCount": 1
+      },
+      "limits": {
+        "maximumExtractedBytes": 1,
+        "maximumEntries": 1,
+        "maximumPathMetadataBytes": 134217728
+      }
+    },
+    {
+      "id": "reject-empty-path-segment",
+      "valid": false,
+      "archiveBase64": "H4sIAAAAAAACA0vJLNLXTy1OTixIZaAVMDAwMDAzMQHTBgYG6DQm29DQyNCYQcGAgQ6gtLgksYjBwIAankT23CgYBaNgFAxyAAArduTkAAYAAA==",
+      "expectedMetadata": {
+        "sha256": "a68da1aff6657540237a7fb7b5e9e13f605f61d31bbd138ec15a1b2a80da4219",
+        "sizeBytes": 82,
+        "extractedSizeBytes": 0,
+        "entryCount": 1
+      },
+      "limits": {
+        "maximumExtractedBytes": 1,
+        "maximumEntries": 1,
+        "maximumPathMetadataBytes": 134217728
+      }
+    },
+    {
+      "id": "reject-invalid-utf8-path",
+      "valid": false,
+      "archiveBase64": "H4sIAAAAAAACA/vPQHtgYGBgYGZiAqYNDAzQaSxsc1NzEwYFAzq4jaG0uCSxiMHAgBqeRPbcKBgFo2AUDHIAAF2Gq+UABgAA",
+      "expectedMetadata": {
+        "sha256": "83ca74440cfd6f7ce65deb83ec5c5e5795d216e9434ce312c19846ad14cee68d",
+        "sizeBytes": 72,
+        "extractedSizeBytes": 0,
+        "entryCount": 1
+      },
+      "limits": {
+        "maximumExtractedBytes": 1,
+        "maximumEntries": 1,
+        "maximumPathMetadataBytes": 134217728
+      }
+    },
+    {
+      "id": "reject-hardlink",
+      "valid": false,
+      "archiveBase64": "H4sIAAAAAAACA8vJzMtOTWGgKTAwMDAwMzEB0wYGBug0JtvQ0NTchEHBsCSxKD21hLaOKy0uSSxiMDCghieRPTcKRsEoGAWDHAAAJo48VgAGAAA=",
+      "expectedMetadata": {
+        "sha256": "0097d856f0901673db4db5ce141cae748fd424576af66d71bf151ab3d80c7bcc",
+        "sizeBytes": 83,
+        "extractedSizeBytes": 0,
+        "entryCount": 1
+      },
+      "limits": {
+        "maximumExtractedBytes": 1,
+        "maximumEntries": 1,
+        "maximumPathMetadataBytes": 134217728
+      }
+    },
+    {
+      "id": "reject-symlink-escape",
+      "valid": false,
+      "archiveBase64": "H4sIAAAAAAACA8vJzMtmoDEwMDAwMDMxAdMGBgboNCbb0NDE1JBBwUhPTz+1ODmxIJWGjistLkksYjAwoIYnkT03CkbBKBgFgxwAAPhfxkQABgAA",
+      "expectedMetadata": {
+        "sha256": "e41a6325058b02f3500fd89c7effd715060319a21137aecf2e6470a743081f97",
+        "sizeBytes": 84,
+        "extractedSizeBytes": 0,
+        "entryCount": 1
+      },
+      "limits": {
+        "maximumExtractedBytes": 1,
+        "maximumEntries": 1,
+        "maximumPathMetadataBytes": 134217728
+      }
+    },
+    {
+      "id": "reject-symlink-chain-escape",
+      "valid": false,
+      "archiveBase64": "H4sIAAAAAAACA0vJLNLPz0tloCUwMDAwMDMxAdMGBgboNCbb0NDEyIRBwUhPT7+kPJ+mbmMoLS5JLGIwMKCGJ5E9N0QAzcOXvPg3NjKFxH9qcXJiQepo/I+CUTAKRgG1AQDoBaYjAAgAAA==",
+      "expectedMetadata": {
+        "sha256": "0d269b4775097ad0a14f314859abaa03d8f9d0732b2a8641de72dc7be0ad19a3",
+        "sizeBytes": 106,
+        "extractedSizeBytes": 0,
+        "entryCount": 2
+      },
+      "limits": {
+        "maximumExtractedBytes": 1,
+        "maximumEntries": 2,
+        "maximumPathMetadataBytes": 134217728
+      }
+    },
+    {
+      "id": "reject-symlink-cycle",
+      "valid": false,
+      "archiveBase64": "H4sIAAAAAAACA8vPS2WgNTAwMDAwMzEB0wYGBug0JtvQwMTYmEHBqKQ8n+aOKy0uSSxiMDCghieRPTdEAD2CmOz4z6dD4hzh8T8KRsEoGLkAAMD/Ay8ACAAA",
+      "expectedMetadata": {
+        "sha256": "9c75551248a61d4acbabdf20440ab344298a8563aea7cede3f615eb9b09b6fb5",
+        "sizeBytes": 90,
+        "extractedSizeBytes": 0,
+        "entryCount": 2
+      },
+      "limits": {
+        "maximumExtractedBytes": 1,
+        "maximumEntries": 2,
+        "maximumPathMetadataBytes": 134217728
+      }
+    },
+    {
+      "id": "reject-bad-checksum",
+      "valid": false,
+      "archiveBase64": "H4sIAAAAAAACA+3RwQ2AMAwDwIzSCagrQjNP6QZpKzE+Ei9APCkIkfvYX8uq2VNnABCZtwRwzosuIoHcRA9opSYl4I6R+3EfUTT7NNSlvvr/ePw/QDiSg/3fXZozGWOM+Z8V6UIZxgAKAAA=",
+      "expectedMetadata": {
+        "sha256": "804a0fd6b7af9017cf9912d93a8830822a20331e84ca966b8169d7fd0255238a",
+        "sizeBytes": 107,
+        "extractedSizeBytes": 3,
+        "entryCount": 2
+      },
+      "limits": {
+        "maximumExtractedBytes": 3,
+        "maximumEntries": 2,
+        "maximumPathMetadataBytes": 134217728
+      }
+    },
+    {
+      "id": "reject-nonzero-entry-padding",
+      "valid": false,
+      "archiveBase64": "H4sIAAAAAAACA+3PsQmAMABE0XMTR/jBkH1SKAhWGsHxA1bBWgXxXvOvvWleRj0MIMV4FrgWCM1GBBiSevSCfSt5Fdxxsj33EUcnMzP7oQrFu3EEAAgAAA==",
+      "expectedMetadata": {
+        "sha256": "38dee6a03dd280fc8edfa8992055696da18c6a6d4b855dcf52f8347c6f4617f1",
+        "sizeBytes": 88,
+        "extractedSizeBytes": 1,
+        "entryCount": 1
+      },
+      "limits": {
+        "maximumExtractedBytes": 1,
+        "maximumEntries": 1,
+        "maximumPathMetadataBytes": 134217728
+      }
+    },
+    {
+      "id": "reject-invalid-terminator",
+      "valid": false,
+      "archiveBase64": "H4sIAAAAAAACA0vLzElloDEwMDAwMDMxAdMGBgboNCbb0MDA2JRBwYCBDqC0uCSxiMHAgBqeRPbcKBgFQwAwjgbBiAYA3VE6iwAGAAA=",
+      "expectedMetadata": {
+        "sha256": "0fc52d6dd15f8df1c3e4e98cce131f91102888bacf9d9b8ed4bc2f160625ca28",
+        "sizeBytes": 77,
+        "extractedSizeBytes": 0,
+        "entryCount": 1
+      },
+      "limits": {
+        "maximumExtractedBytes": 1,
+        "maximumEntries": 1,
+        "maximumPathMetadataBytes": 134217728
+      }
+    },
+    {
+      "id": "reject-decompressed-trailing-data",
+      "valid": false,
+      "archiveBase64": "H4sIAAAAAAACA+3RwQ2AMAwDwLBJJ6CuKM08oRukRWJ8JF6AeFIQIvexv5aLZk+NAUCKcUsA57zozBzIjfSAuVRRAu4YuR/3EUWzl74u9dX/h+P/ARwTOdj/zcmUyRhjzP90K70sfzABCgAA",
+      "expectedMetadata": {
+        "sha256": "fd581cf2ad2a0307922c348afe6253e6574aebe1ca8a8ece70f141acbda0c54e",
+        "sizeBytes": 108,
+        "extractedSizeBytes": 3,
+        "entryCount": 2
+      },
+      "limits": {
+        "maximumExtractedBytes": 3,
+        "maximumEntries": 2,
+        "maximumPathMetadataBytes": 134217728
+      }
+    },
+    {
+      "id": "reject-compressed-trailing-data",
+      "valid": false,
+      "archiveBase64": "H4sIAAAAAAACA+3RwQ2AMAwDwIzSCagrSjNPyQZpKzE+Ei9APCkIkfvYX8tFxVNnAJBi3BLAOS86MwdyEz2glZqVgDtG7sd9RFHxeahLffX/8fh/AMdEDvZ/d3kWMsYY8z8ryCS5xQAKAAAB",
+      "expectedMetadata": {
+        "sha256": "d5c771dfb5975c81cdbc6883abf3a02a7a6c6d01ecaf0d30c16b07966ed51678",
+        "sizeBytes": 108,
+        "extractedSizeBytes": 3,
+        "entryCount": 2
+      },
+      "limits": {
+        "maximumExtractedBytes": 3,
+        "maximumEntries": 2,
+        "maximumPathMetadataBytes": 134217728
+      }
+    },
+    {
+      "id": "reject-concatenated-gzip-member",
+      "valid": false,
+      "archiveBase64": "H4sIAAAAAAACA+3RwQ2AMAwDwIzSCagrSjNPyQZpKzE+Ei9APCkIkfvYX8tFxVNnAJBi3BLAOS86MwdyEz2glZqVgDtG7sd9RFHxeahLffX/8fh/AMdEDvZ/d3kWMsYY8z8ryCS5xQAKAAAfiwgAAAAAAAIDAwAAAAAAAAAAAA==",
+      "expectedMetadata": {
+        "sha256": "2fd471bcdc0d9dfa46b65b2d5ddd4952e0dc6a45c0e5e7e2bcac917a284ead82",
+        "sizeBytes": 127,
+        "extractedSizeBytes": 3,
+        "entryCount": 2
+      },
+      "limits": {
+        "maximumExtractedBytes": 3,
+        "maximumEntries": 2,
+        "maximumPathMetadataBytes": 134217728
+      }
+    },
+    {
+      "id": "reject-truncated-gzip",
+      "valid": false,
+      "archiveBase64": "H4sIAAAAAAACA+3RwQ2AMAwDwIzSCagrSjNPyQZpKzE+Ei9APCkIkfvYX8tFxVNnAJBi3BLAOS86MwdyEz2glZqVgDtG7sd9RFHxeahLffX/8fh/AMdEDvZ/d3kWMsYY8z8ryCS5xQAK",
+      "expectedMetadata": {
+        "sha256": "15f3fa1c4ec79da651a47ba5e43cd1283f91f8f7ccc1e2117fe09ead1be672c8",
+        "sizeBytes": 105,
+        "extractedSizeBytes": 3,
+        "entryCount": 2
+      },
+      "limits": {
+        "maximumExtractedBytes": 3,
+        "maximumEntries": 2,
+        "maximumPathMetadataBytes": 134217728
+      }
+    },
+    {
+      "id": "reject-extracted-byte-limit",
+      "valid": false,
+      "archiveBase64": "H4sIAAAAAAACA+3RwQ2AMAwDwIzSCagrSjNPyQZpKzE+Ei9APCkIkfvYX8tFxVNnAJBi3BLAOS86MwdyEz2glZqVgDtG7sd9RFHxeahLffX/8fh/AMdEDvZ/d3kWMsYY8z8ryCS5xQAKAAA=",
+      "expectedMetadata": {
+        "sha256": "42424e38de46f7c0a92e382d71b41cf4e996cce94dfc8d7637aba7c0066c2500",
+        "sizeBytes": 107,
+        "extractedSizeBytes": 3,
+        "entryCount": 2
+      },
+      "limits": {
+        "maximumExtractedBytes": 2,
+        "maximumEntries": 2,
+        "maximumPathMetadataBytes": 134217728
+      }
+    },
+    {
+      "id": "reject-entry-limit",
+      "valid": false,
+      "archiveBase64": "H4sIAAAAAAACA+3RwQ2AMAwDwIzSCagrSjNPyQZpKzE+Ei9APCkIkfvYX8tFxVNnAJBi3BLAOS86MwdyEz2glZqVgDtG7sd9RFHxeahLffX/8fh/AMdEDvZ/d3kWMsYY8z8ryCS5xQAKAAA=",
+      "expectedMetadata": {
+        "sha256": "42424e38de46f7c0a92e382d71b41cf4e996cce94dfc8d7637aba7c0066c2500",
+        "sizeBytes": 107,
+        "extractedSizeBytes": 3,
+        "entryCount": 2
+      },
+      "limits": {
+        "maximumExtractedBytes": 3,
+        "maximumEntries": 1,
+        "maximumPathMetadataBytes": 134217728
+      }
+    },
+    {
+      "id": "reject-path-metadata-limit",
+      "valid": false,
+      "archiveBase64": "H4sIAAAAAAACA+3RwQ2AMAwDwIzSCagrSjNPyQZpKzE+Ei9APCkIkfvYX8tFxVNnAJBi3BLAOS86MwdyEz2glZqVgDtG7sd9RFHxeahLffX/8fh/AMdEDvZ/d3kWMsYY8z8ryCS5xQAKAAA=",
+      "expectedMetadata": {
+        "sha256": "42424e38de46f7c0a92e382d71b41cf4e996cce94dfc8d7637aba7c0066c2500",
+        "sizeBytes": 107,
+        "extractedSizeBytes": 3,
+        "entryCount": 2
+      },
+      "limits": {
+        "maximumExtractedBytes": 3,
+        "maximumEntries": 2,
+        "maximumPathMetadataBytes": 11
+      },
+      "pathMetadataBytes": 12
+    },
+    {
+      "id": "reject-pax-path-metadata-limit",
+      "valid": false,
+      "archiveBase64": "H4sIAAAAAAACA+3Wuw7CIBQG4DP7FLyAeqAXJndH38AcEVsTegnFpI9v6qKpgw7F6/kWSBkIIf9fWuq3hWt25Lalpb31MD1ExDxNLyMijsdh8TofvkuVJxpEAS9w6gJ5QJzikLeH+xKZEqapKluHFT1pBuxndN4sY+/xMP93c621BJFx/qPbUL++9H63PBydfc/9J2rc/1LnIHq+/+hULloK5WroAdfUxbymyi5CH7jl/0LryNiycXFefs/2fzLKv0wxAYGc/+hoZzgEf8ycvLd1+Kz3n0wRMxDq7qfE+WeMsamcAcVtIg0AFAAA",
+      "expectedMetadata": {
+        "sha256": "941f4162232b5af9c20fe15278e320e8fe5429a508de9f79621b38a0c8e13316",
+        "sizeBytes": 237,
+        "extractedSizeBytes": 3,
+        "entryCount": 3
+      },
+      "limits": {
+        "maximumExtractedBytes": 3,
+        "maximumEntries": 3,
+        "maximumPathMetadataBytes": 43
+      },
+      "pathMetadataBytes": 44
+    }
+  ]
+}

package/conformance/ci-actions/compile-invalid/build-arg-secret-collision.yml

@@ -0,0 +1,31 @@
+spec: 2.0.0
+on:
+  push:
+    branches:
+      - main
+permissions:
+  source: read
+  artifacts: none
+  caches: none
+  images: candidate
+  npm: none
+  releaseAssets: none
+jobs:
+  image:
+    runner:
+      profile: oci-image
+      labels:
+        - builder
+    secrets:
+      - name: npm-token
+        environment: NPM_TOKEN
+    build:
+      context: .
+      dockerfile: Dockerfile
+      platforms:
+        - linux/amd64
+      buildArgs:
+        NPM_TOKEN: placeholder
+      secrets:
+        - id: npmrc
+          environment: NPM_TOKEN

package/conformance/ci-actions/compile-invalid/candidate-without-needs.yml

@@ -0,0 +1,36 @@
+spec: 2.0.0
+on:
+  push:
+    branches:
+      - main
+permissions:
+  source: read
+  artifacts: none
+  caches: none
+  images: candidate
+  npm: none
+  releaseAssets: none
+jobs:
+  image:
+    runner:
+      profile: oci-image
+      labels:
+        - builder
+    build:
+      context: .
+      dockerfile: Dockerfile
+      platforms:
+        - linux/amd64
+  smoke:
+    runner:
+      profile: oci
+      labels:
+        - linux
+    execution:
+      profile: oci
+      image:
+        candidate: image
+    steps:
+      - run:
+          - /usr/local/bin/app
+          - --self-test

package/conformance/ci-actions/compile-invalid/needs-wider-triggers.yml

@@ -0,0 +1,42 @@
+spec: 2.0.0
+on:
+  push:
+    branches:
+      - main
+  tag:
+    tags:
+      - v*
+permissions:
+  source: read
+  artifacts: none
+  caches: none
+  images: none
+  npm: none
+  releaseAssets: none
+jobs:
+  sign:
+    triggers:
+      - tag
+    runner:
+      profile: oci
+      labels:
+        - linux
+    execution:
+      profile: oci
+      image: registry.example/ci/node@sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
+    steps:
+      - run:
+          - ./scripts/sign.sh
+  verify:
+    needs:
+      - sign
+    runner:
+      profile: oci
+      labels:
+        - linux
+    execution:
+      profile: oci
+      image: registry.example/ci/node@sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
+    steps:
+      - run:
+          - ./scripts/verify.sh

package/conformance/ci-actions/compile-invalid/npm-read-registry-not-allowlisted.yml

@@ -0,0 +1,34 @@
+spec: 2.0.0
+on:
+  push:
+    branches:
+      - main
+permissions:
+  source: read
+  artifacts: none
+  caches: none
+  images: none
+  npm: none
+  releaseAssets: none
+jobs:
+  test:
+    runner:
+      profile: oci
+      labels:
+        - linux
+    execution:
+      profile: oci
+      image: registry.example/ci/node@sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
+    network:
+      mode: egress
+      allow:
+        - host: registry.npmjs.org
+    npmRead:
+      - registry: https://npm.example.com
+        scopes:
+          - '@example_private'
+    steps:
+      - run:
+          - pnpm
+          - install
+          - --frozen-lockfile

package/conformance/ci-actions/compile-invalid/publish-job-excludes-tag.yml

@@ -0,0 +1,57 @@
+spec: 2.0.0
+on:
+  push:
+    branches:
+      - main
+  tag:
+    tags:
+      - v*
+permissions:
+  source: read
+  artifacts: write
+  caches: none
+  images: none
+  npm: none
+  releaseAssets: publish
+jobs:
+  test:
+    runner:
+      profile: oci
+      labels:
+        - linux
+    execution:
+      profile: oci
+      image: registry.example/ci/node@sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
+    steps:
+      - run:
+          - pnpm
+          - test
+  pack:
+    triggers:
+      - push
+    runner:
+      profile: oci
+      labels:
+        - linux
+    execution:
+      profile: oci
+      image: registry.example/ci/node@sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
+    steps:
+      - run:
+          - pnpm
+          - pack
+          - --pack-destination
+          - .nogit/package
+    artifacts:
+      - name: package
+        path: .nogit/package
+        when: success
+        required: true
+        maximumBytes: 104857600
+        maximumExtractedBytes: 104857600
+        maximumEntries: 1
+publish:
+  releaseAssets:
+    - artifact:
+        job: pack
+        name: package

package/conformance/ci-actions/compile-invalid/shared-memory-above-memory.yml

@@ -0,0 +1,28 @@
+spec: 2.0.0
+on:
+  push:
+    branches:
+      - main
+permissions:
+  source: read
+  artifacts: none
+  caches: none
+  images: none
+  npm: none
+  releaseAssets: none
+jobs:
+  test:
+    runner:
+      profile: oci
+      labels:
+        - linux
+    execution:
+      profile: oci
+      image: registry.example/ci/node@sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
+    resources:
+      memoryBytes: 1073741824
+      sharedMemoryBytes: 2147483648
+    steps:
+      - run:
+          - pnpm
+          - test