coulomb/railiance-platform
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Pin the released audit-core receiver (304cfb83, AUDIT-WP-0013-T07) in the recovery preflight.

Browse source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 236506@bnt-lap001
Assistant-Session: 09087018-91e1-48c5-ab2f-acfbb62c92e4
This commit is contained in:
codex 2026-11-03 22:07:26 +01:00
parent 3a68eaca8a
commit 3ddef4cedc
1 changed files with 4 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

7
scripts/audit-core-recovery-preflight.py
View file

@ -20,11 +20,12 @@ from pathlib import Path
from typing import Any
# audit-core release pinned by audit-core 1269a0e (2026-10-15, deploy/audit-core.yaml);
# the previously reviewed ec15f63d image now remains only on the attest-chain CronJob.
# audit-core release pinned by audit-core b365525 (2026-11-03, AUDIT-WP-0013-T07,
# deploy/audit-core.yaml), built from 8185893. The attest-chain CronJob may run
# an older image and is not checked here.
EXPECTED_IMAGE = (
"forgejo.coulomb.social/coulomb/audit-core@"
"sha256:b479801b0bc76df66a36a85376c45aaf399c6d82feade9ba81430b774c4a8271"
"sha256:304cfb83daa873e5790a2f262f6c4ccd56498b6e9e1a390368dcf0d407256300"
)
EXPECTED_DB_KEYS = {"username", "password", "host", "port", "dbname"}