redlinegate 0.0.1 → 0.0.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +22 -6
- package/dist/bin/redline.js +101 -11
- package/dist/bin/redline.js.map +1 -1
- package/dist/commands/init.js +94 -23
- package/dist/commands/init.js.map +1 -1
- package/dist/commands/remove.js +3 -1
- package/dist/commands/remove.js.map +1 -1
- package/dist/commands/verify.js +82 -2
- package/dist/commands/verify.js.map +1 -1
- package/dist/config/redline-json.js +45 -1
- package/dist/config/redline-json.js.map +1 -1
- package/dist/detect/existing.js +151 -0
- package/dist/detect/existing.js.map +1 -0
- package/dist/exempt/parse.js +8 -1
- package/dist/exempt/parse.js.map +1 -1
- package/dist/platforms/azure/install.js +8 -4
- package/dist/platforms/azure/install.js.map +1 -1
- package/dist/platforms/azure/verify.js +6 -0
- package/dist/platforms/azure/verify.js.map +1 -1
- package/dist/platforms/github/install.js +88 -10
- package/dist/platforms/github/install.js.map +1 -1
- package/dist/platforms/github/preflight.js +63 -0
- package/dist/platforms/github/preflight.js.map +1 -0
- package/dist/platforms/github/verify.js +62 -5
- package/dist/platforms/github/verify.js.map +1 -1
- package/dist/platforms/types.js +4 -0
- package/dist/platforms/types.js.map +1 -1
- package/dist/policy/diff.js +26 -9
- package/dist/policy/diff.js.map +1 -1
- package/dist/render/contexts.js +39 -0
- package/dist/render/contexts.js.map +1 -0
- package/dist/render/profile.js +44 -10
- package/dist/render/profile.js.map +1 -1
- package/dist/render/standards.js +2 -0
- package/dist/render/standards.js.map +1 -1
- package/dist/render/vendors.js +5 -1
- package/dist/render/vendors.js.map +1 -1
- package/dist/ui/facts.js +82 -0
- package/dist/ui/facts.js.map +1 -0
- package/dist/ui/prompt.js +201 -0
- package/dist/ui/prompt.js.map +1 -0
- package/dist/ui/tty.js +243 -0
- package/dist/ui/tty.js.map +1 -0
- package/dist/ui/wizard.js +179 -0
- package/dist/ui/wizard.js.map +1 -0
- package/package.json +10 -1
- package/platforms/azure/gate-template-github.yml +152 -0
- package/platforms/azure/gate-template.yml +59 -6
- package/scripts/check-pins.mjs +84 -1
- package/standards/contexts/speckit.md +22 -0
- package/standards/contexts/tmf.md +25 -0
- package/standards/manifest.json +1 -1
- package/templates/redline.yml +5 -9
- package/workflows/dashboard.yml +1 -1
- package/workflows/redline-collect.yml +1 -1
- package/workflows/redline-gate.yml +10 -3
- package/workflows/seed-canary.yml +2 -2
- package/workflows/weekly-digest.yml +1 -1
|
@@ -39,7 +39,7 @@ jobs:
|
|
|
39
39
|
# command line is visible in the process table.
|
|
40
40
|
GH_TOKEN: ${{ secrets.REDLINE_ORG_READ_TOKEN }}
|
|
41
41
|
run: |
|
|
42
|
-
npx --yes "redlinegate@0.0.
|
|
42
|
+
npx --yes "redlinegate@0.0.2" metrics collect \
|
|
43
43
|
--org "${{ github.repository_owner }}" \
|
|
44
44
|
--days "${{ inputs.days || '8' }}" \
|
|
45
45
|
--out data
|
|
@@ -133,7 +133,7 @@ jobs:
|
|
|
133
133
|
BASE: ${{ github.event.pull_request.base.sha }}
|
|
134
134
|
HEAD: ${{ github.event.pull_request.head.sha }}
|
|
135
135
|
RUNG: ${{ inputs.rung }}
|
|
136
|
-
REDLINE_CLI_VERSION: '0.0.
|
|
136
|
+
REDLINE_CLI_VERSION: '0.0.2'
|
|
137
137
|
run: |
|
|
138
138
|
set -euo pipefail
|
|
139
139
|
# Three dots: the diff against the merge base, not against the tip of
|
|
@@ -179,7 +179,14 @@ jobs:
|
|
|
179
179
|
head: ${{ github.event.pull_request.head.sha }}
|
|
180
180
|
# verified only: `unknown` produces false positives, and this is a blocking
|
|
181
181
|
# check. Unverified candidates are caught by GHAS secret scanning instead.
|
|
182
|
-
|
|
182
|
+
#
|
|
183
|
+
# No `--fail` here. The action's own entrypoint already passes it before
|
|
184
|
+
# appending extra_args, and trufflehog rejects a repeated flag outright —
|
|
185
|
+
# `flag 'fail' cannot be repeated` — so the scan never ran at all. This
|
|
186
|
+
# job is outside the enforcement ladder and outside label exemption, so
|
|
187
|
+
# that failure blocked every pull request in every onboarded repository
|
|
188
|
+
# for a reason no author could act on or waive.
|
|
189
|
+
extra_args: --results=verified
|
|
183
190
|
|
|
184
191
|
gate:
|
|
185
192
|
# Aggregate. The branch ruleset requires the check "redline-gate / gate".
|
|
@@ -201,7 +208,7 @@ jobs:
|
|
|
201
208
|
PR_BODY: ${{ github.event.pull_request.body }}
|
|
202
209
|
# Pinned, not @latest: the gate's behaviour must not change under a
|
|
203
210
|
# repository because a release happened overnight.
|
|
204
|
-
REDLINE_CLI_VERSION: '0.0.
|
|
211
|
+
REDLINE_CLI_VERSION: '0.0.2'
|
|
205
212
|
run: |
|
|
206
213
|
set -euo pipefail
|
|
207
214
|
|
|
@@ -155,9 +155,9 @@ jobs:
|
|
|
155
155
|
run: |
|
|
156
156
|
set -euo pipefail
|
|
157
157
|
mkdir -p "$GITHUB_WORKSPACE/scores"
|
|
158
|
-
npx --yes "redlinegate@0.0.
|
|
158
|
+
npx --yes "redlinegate@0.0.2" metrics score-seeds --repo "$TARGET_REPO" --pr "$PR" --json \
|
|
159
159
|
> "$GITHUB_WORKSPACE/scores/$(echo "$TARGET_REPO" | tr / -).json" || echo "score-seeds exited non-zero"
|
|
160
|
-
npx --yes "redlinegate@0.0.
|
|
160
|
+
npx --yes "redlinegate@0.0.2" metrics score-seeds --repo "$TARGET_REPO" --pr "$PR" \
|
|
161
161
|
| tee -a "$GITHUB_STEP_SUMMARY" || true
|
|
162
162
|
|
|
163
163
|
- name: Close the canary pull request
|