Pin the audit-core receiver released by AUDIT-WP-0018-T03 (5f3d01c8) in the recovery preflight.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 236506@bnt-lap001
Assistant-Session: 09087018-91e1-48c5-ab2f-acfbb62c92e4
This commit is contained in:
codex 2026-11-03 22:21:53 +01:00
parent c90d37e27f
commit edc6bf4dd6

View file

@ -20,12 +20,12 @@ from pathlib import Path
from typing import Any
# audit-core release pinned by audit-core b365525 (2026-11-03, AUDIT-WP-0013-T07,
# deploy/audit-core.yaml), built from 8185893. The attest-chain CronJob may run
# audit-core release pinned by audit-core 4fcf7c6 (2026-11-03, AUDIT-WP-0018-T03,
# deploy/audit-core.yaml), built from 2b8c909. The attest-chain CronJob may run
# an older image and is not checked here.
EXPECTED_IMAGE = (
"forgejo.coulomb.social/coulomb/audit-core@"
"sha256:304cfb83daa873e5790a2f262f6c4ccd56498b6e9e1a390368dcf0d407256300"
"sha256:5f3d01c8a1f90411a1429451b46c66a9ac9262fc7fce68790c16e22eeb7871a6"
)
EXPECTED_DB_KEYS = {"username", "password", "host", "port", "dbname"}