tegwick
79f14ce50a
All checks were successful
Bounded-execution contracts / contracts (push) Successful in 1m16s
Build and Publish bounded-executor / build-and-push (push) Successful in 6s
CI Smoke / host-smoke (push) Successful in 1s
CI Smoke / container-smoke (push) Successful in 2s
Identity provider journey acceptance / provider (push) Successful in 1m5s
T19 runs the KeyCape binary from the pinned image instead of docker: tools/contract-tests/oci_extract.py pulls the image anonymously by digest and verifies manifest and layer digests before extracting. Both exercises record GITHUB_SHA when net-kingdom is a source tarball. PyJWT[crypto] chain pinned by PyPI-checked hashes. 85 tests pass in a CI-like layout. rapp CI recorded (rapp 15df0e3). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 943911@bnt-lap001 Assistant-Session: fc322940-1c8e-4bed-ab39-86cec99f23a0
22 lines
971 B
Bash
Executable file
22 lines
971 B
Bash
Executable file
#!/usr/bin/env bash
|
|
# Bounded-execution contract suite (NK-WP-0058-T02). One list, used by `make contract-test` and by CI.
|
|
# The owners must sit next to net-kingdom (locally the sibling checkouts; in CI tools/contract-tests/fetch_owners.py).
|
|
# A skipped test fails the run: a contract that was not checked must not look green.
|
|
set -euo pipefail
|
|
cd "$(dirname "$0")/../.."
|
|
out=$(mktemp)
|
|
trap 'rm -f "$out"' EXIT
|
|
PYTHONDONTWRITEBYTECODE=1 python3 -m pytest -q -rs -p no:cacheprovider \
|
|
tests/test_executor_lanes.py \
|
|
tests/test_write_role_audit.py \
|
|
bounded-executor/tests/test_approval_request.py \
|
|
tools/bounded-execution-readiness/tests \
|
|
tools/bounded-execution-run/tests \
|
|
tools/execution-attribution-receipt/tests \
|
|
sso-mfa/k8s/bounded-executor \
|
|
tools/contract-tests/tests \
|
|
"$@" | tee "$out"
|
|
if grep -q '^SKIPPED' "$out"; then
|
|
echo "contract-test: skipped tests above; every contract must run (are the owner checkouts present?)" >&2
|
|
exit 1
|
|
fi
|