tegwick
ddde021bd0
lane.py setup/verify/teardown (attended; CCR-2026-0057 sha256-bound): generates password and TOTP seed in memory, KV CAS=0 with coding agents fenced, LLDAP user syn-journey with no groups, privacyIDEA TOTP token with enrollment confirmation, live journey as proof. SecurityCase for the public KeyCape client nk-synthetic-journey; syn-journey declared SERVICE (planned); proposed syn-<check> naming row in the SI standard; founder runbook. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 994874@bnt-lap001 Assistant-Session: 6017c416-d619-47eb-bd1a-f670a02d7d87
25 lines
1.2 KiB
YAML
25 lines
1.2 KiB
YAML
name: Identity provider journey acceptance
|
|
on:
|
|
push:
|
|
branches: [main]
|
|
paths: ["identity-provisioner/**", "sso-mfa/k8s/synthetic-journey/**", ".forgejo/workflows/identity-journeys.yaml"]
|
|
workflow_dispatch:
|
|
jobs:
|
|
provider:
|
|
runs-on: ubuntu-latest
|
|
container:
|
|
image: python:3.12-slim@sha256:d764629ce0ddd8c71fd371e9901efb324a95789d2315a47db7e4d27e78f1b0e9
|
|
steps:
|
|
- name: Run provider and directory-contract tests
|
|
run: |
|
|
set -eu
|
|
mkdir -p identity-source
|
|
python -c 'import os, urllib.request; urllib.request.urlretrieve("https://forgejo.coulomb.social/" + os.environ["GITHUB_REPOSITORY"] + "/archive/" + os.environ["GITHUB_SHA"] + ".tar.gz", "identity-source.tar.gz")'
|
|
tar xzf identity-source.tar.gz -C identity-source --strip-components=1
|
|
cd identity-source
|
|
PYTHONDONTWRITEBYTECODE=1 PYTHONPATH=identity-provisioner python3 -m unittest discover -s identity-provisioner/tests -v
|
|
- name: Run synthetic MFA journey runner tests (NK-WP-0056-T05)
|
|
run: |
|
|
set -eu
|
|
cd identity-source/sso-mfa/k8s/synthetic-journey
|
|
PYTHONDONTWRITEBYTECODE=1 python3 -m unittest test_journey test_lane -v
|