feat(ci): add artifact receipt source contract

This commit is contained in:
ogt
2026-07-10 12:06:30 +08:00
parent aa2a1727cc
commit 0ff83bf5fd
5 changed files with 528 additions and 18 deletions

View File

@@ -159,8 +159,8 @@ def test_gitea_capability_readback_rolls_up_complete_feature_surface() -> None:
assert (
professional_feature_rollups["registry_or_package_channel_workflow_count"] == 4
)
assert professional_feature_rollups["sbom_or_provenance_workflow_count"] == 0
assert professional_feature_rollups["artifact_transfer_workflow_count"] == 0
assert professional_feature_rollups["sbom_or_provenance_workflow_count"] == 1
assert professional_feature_rollups["artifact_transfer_workflow_count"] == 1
assert (
payload["workflow_source_inventory"]["secret_variable_rollups"][
"secret_values_collected"
@@ -259,6 +259,11 @@ def test_gitea_capability_readback_prioritizes_professional_cicd_gaps() -> None:
optimization_by_id["full_gitea_server_offsite_dr_receipts"]["status"]
== "source_ready"
)
assert (
optimization_by_id["dependency_sbom_and_cache_strategy"]["status"]
== "source_ready"
)
assert optimization_by_id["artifact_receipt_retention"]["status"] == "source_ready"
assert payload["rollups"]["ci_cd_optimization_count"] == len(
payload["ci_cd_optimization_rows"]
)
@@ -267,12 +272,10 @@ def test_gitea_capability_readback_prioritizes_professional_cicd_gaps() -> None:
payload["professional_ci_cd_practice_rows"]
)
assert payload["rollups"]["p0_professional_ci_cd_practice_gap_count"] == 0
assert payload["rollups"]["market_professional_ci_cd_gap_count"] == 3
assert payload["rollups"]["market_professional_ci_cd_gap_count"] == 1
assert payload["rollups"]["all_gitea_features_fully_utilized"] is False
assert payload["rollups"]["professional_ci_cd_practice_gap_ids"] == [
"gitea_125_packages_release_registry",
"slsa_build_provenance_isolation",
"artifact_cache_sbom_retention",
]
practice_by_id = {
@@ -329,12 +332,8 @@ def test_gitea_capability_readback_prioritizes_professional_cicd_gaps() -> None:
]
is False
)
assert (
practice_by_id["slsa_build_provenance_isolation"]["status"] == "action_required"
)
assert (
practice_by_id["artifact_cache_sbom_retention"]["status"] == "action_required"
)
assert practice_by_id["slsa_build_provenance_isolation"]["status"] == "source_ready"
assert practice_by_id["artifact_cache_sbom_retention"]["status"] == "source_ready"
assert (
"https://dora.dev/guides/dora-metrics/"
in payload["readback"]["market_practice_basis_refs"]