tegwick
fb7d56d3dc
Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a137ca-5c77-7a71-b9ae-23ad9b0b5684
96 lines
3 KiB
JSON
96 lines
3 KiB
JSON
{
|
|
"status": "passed",
|
|
"local_only": true,
|
|
"real_image_digest": null,
|
|
"synthetic_digest_used_only_to_check_rendering": true,
|
|
"checks": [
|
|
"production rendering unchanged except empty fail-closed allowlist",
|
|
"unknown/malformed digest fails",
|
|
"HTTP allowlist fails schema",
|
|
"exact14 URLs roundtrip",
|
|
"strategy resources PVC retained",
|
|
"dedicated ESO mapping preserves current fields/store",
|
|
"metadata sanitizer excludes userinfo/query secrets/fragments",
|
|
"kubectl failure output discarded",
|
|
"exact pod SQL real payload URL keys readonly fixture and anonymous filtering",
|
|
"legacy Forgejo branch URL accepted without weakening credential query refusal"
|
|
],
|
|
"helm_calls": [
|
|
{
|
|
"command": [
|
|
"helm",
|
|
"template",
|
|
"reuse",
|
|
"/tmp/cust81-apps-reader-owner/charts/reuse-surface",
|
|
"-f",
|
|
"/tmp/cust81-apps-reader-owner/helm/reuse-surface-values.yaml"
|
|
],
|
|
"exit_code": 0,
|
|
"expected_success": true
|
|
},
|
|
{
|
|
"command": [
|
|
"helm",
|
|
"template",
|
|
"reuse",
|
|
"/tmp/cust81-apps-reader-owner/charts/reuse-surface",
|
|
"-f",
|
|
"/tmp/cust81-apps-reader-owner/helm/reuse-surface-values.yaml",
|
|
"-f",
|
|
"/tmp/cust81-apps-reader-owner/docs/assessments/cust81-private-reader/private-reader-values.r1.yaml"
|
|
],
|
|
"exit_code": 1,
|
|
"expected_success": false
|
|
},
|
|
{
|
|
"command": [
|
|
"helm",
|
|
"template",
|
|
"reuse",
|
|
"/tmp/cust81-apps-reader-owner/charts/reuse-surface",
|
|
"-f",
|
|
"/tmp/cust81-apps-reader-owner/helm/reuse-surface-values.yaml",
|
|
"-f",
|
|
"/tmp/cust81-apps-reader-owner/docs/assessments/cust81-private-reader/private-reader-values.r1.yaml",
|
|
"--set",
|
|
"image.digest=sha256:bad"
|
|
],
|
|
"exit_code": 1,
|
|
"expected_success": false
|
|
},
|
|
{
|
|
"command": [
|
|
"helm",
|
|
"template",
|
|
"reuse",
|
|
"/tmp/cust81-apps-reader-owner/charts/reuse-surface",
|
|
"-f",
|
|
"/tmp/cust81-apps-reader-owner/helm/reuse-surface-values.yaml",
|
|
"-f",
|
|
"/tmp/cust81-apps-reader-owner/docs/assessments/cust81-private-reader/private-reader-values.r1.yaml",
|
|
"--set-json",
|
|
"authSourceAllowlist={\"BAD\":[\"http://attacker.invalid\"]}",
|
|
"--set",
|
|
"image.digest=sha256:0000000000000000000000000000000000000000000000000000000000000000"
|
|
],
|
|
"exit_code": 1,
|
|
"expected_success": false
|
|
},
|
|
{
|
|
"command": [
|
|
"helm",
|
|
"template",
|
|
"reuse",
|
|
"/tmp/cust81-apps-reader-owner/charts/reuse-surface",
|
|
"-f",
|
|
"/tmp/cust81-apps-reader-owner/helm/reuse-surface-values.yaml",
|
|
"-f",
|
|
"/tmp/cust81-apps-reader-owner/docs/assessments/cust81-private-reader/private-reader-values.r1.yaml",
|
|
"--set",
|
|
"image.digest=sha256:0000000000000000000000000000000000000000000000000000000000000000"
|
|
],
|
|
"exit_code": 0,
|
|
"expected_success": true
|
|
}
|
|
]
|
|
}
|