Pin verified dispatcher image and retain release evidence
Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a10780-6d41-7952-9718-dfbc1f41236f
This commit is contained in:
parent
a64aa58b38
commit
46bcfe20f2
5 changed files with 41 additions and 2 deletions
|
|
@ -0,0 +1,16 @@
|
|||
{
|
||||
"status": "passed",
|
||||
"image_id": "sha256:410fb6b6c9fd7a7ee0b63d727fd3249fb3ae13943421d6a5ce88b7ad2520bd2f",
|
||||
"checks": [
|
||||
"non-root read-only worker starts without external network",
|
||||
"explicit enqueue persists a lifecycle envelope without inventing a Hub relationship",
|
||||
"SIGTERM stops without forced kill",
|
||||
"restart retains the exact pending envelope; missing custody does not drop it",
|
||||
"private queue and database modes enforced"
|
||||
],
|
||||
"fixture_only": true,
|
||||
"external_network": "none",
|
||||
"native_identity_proven": false,
|
||||
"envelope_sha256": "ce0b8e1c6e861fde2da584363b695932bd0c74f923d1688211cc8b3d9a2f8c2e",
|
||||
"cleanup_complete": true
|
||||
}
|
||||
|
|
@ -0,0 +1,9 @@
|
|||
{
|
||||
"image": "forgejo.coulomb.social/coulomb/state-hub-memo-dispatch@sha256:410fb6b6c9fd7a7ee0b63d727fd3249fb3ae13943421d6a5ce88b7ad2520bd2f",
|
||||
"source_commit": "4a59b23",
|
||||
"scanner": "Trivy 0.74.0",
|
||||
"created_at": "2026-10-04T20:38:44.831801093Z",
|
||||
"high": 0,
|
||||
"critical": 0,
|
||||
"scope": "Image vulnerabilities in the scanner database at scan time; not universal security attestation."
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue