coulomb/audit-core
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

AUDIT-WP-0018-T03: pin receiver image sha256:5f3d01c8 built from 2b8c909
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 482098@bnt-lap001
Assistant-Session: 9643c95a-a398-4f4a-b56a-6119be4e845e
This commit is contained in:
tegwick 2026-11-03 22:07:31 +01:00
parent 2b8c9097ad
commit 4fcf7c6474
3 changed files with 10 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

9
deploy/README.md
View file

@ -8,7 +8,7 @@ the server port or export a copy before applying.
Apply order is documented in `docs/operator-runbook.md`. Do not apply the
Deployment until:
1. The image digest is pinned (currently `sha256:304cfb83…` built from source commit `818589359ae343d821a009413823f4456962c0d1`, AUDIT-WP-0013-T07).
1. The image digest is pinned (currently `sha256:5f3d01c8…` built from source commit `2b8c9097adaef67c88f329452e42eca1d74b65a7`, AUDIT-WP-0018-T03).
2. Secrets `audit-core-database`, `audit-core-database-migrate`, and
`audit-core-senders` exist. ConfigMap `audit-core-senders-scope` is
applied (`deploy/senders-scope.yaml`) before the Deployment mounts it.
@ -41,3 +41,10 @@ built from `818589359ae343d821a009413823f4456962c0d1`. It carries the T06
independent full-scope reconciliation reader and the AUDIT-WP-0018-T02
reject-only secret_policy overlay. No migration beyond 0007 is added, so no
migration Job run is required; rollback to `b479801b…` stays schema-compatible.
AUDIT-WP-0018-T03 (2026-11-03) re-pins receiver and migration Job to
`forgejo.coulomb.social/coulomb/audit-core@sha256:5f3d01c8a1f90411a1429451b46c66a9ac9262fc7fce68790c16e22eeb7871a6`,
built from `2b8c9097adaef67c88f329452e42eca1d74b65a7`. It adds the
`opening_without_closing` stream finding (`closing_classes`). No schema
change and no migration Job rerun are needed. Rollback to `304cfb83…` is
compatible: the older image ignores the `closing_classes` overlay key.