wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 2 Packages Projects Releases Wiki Activity

docs(security): add gitea owner response display sections

Browse Source
This commit is contained in:
Your Name
2026-05-18 14:08:30 +08:00
parent 9d509452c2
commit 434d87d129
32 changed files with 314 additions and 50 deletions
Download Patch File Download Diff File Expand all files Collapse all files

39
scripts/security/source-control-owner-response-guard.py
View File

@@ -69,6 +69,16 @@ LANES = [
"redaction-api-export-summary",
"redaction-quarantine-pointer",
],
"expected_display_sections": [
"display-owner-response-summary",
"display-owner-response-request-packet",
"display-template-status-ledger",
"display-audit-event-templates",
"display-redaction-examples",
"display-collection-checks",
"display-preflight-and-outcome-lanes",
"display-acceptance-and-rejection-rules",
],
},
{
"lane_id": "s4_10_github_target_owner_decision_response",
@@ -322,6 +332,35 @@ def validate(root: Path) -> None:
item["execution_authorized"],
)
assert_true(f"{lane['lane_id']}.{item['example_id']}.not_approval", item["not_approval"])
expected_display_sections = lane.get("expected_display_sections")
if expected_display_sections is not None:
display_sections = snapshot["owner_response_display_sections"]
assert_equal(
f"{lane['lane_id']}.owner_response_display_section_count",
summary["owner_response_display_section_count"],
len(expected_display_sections),
)
assert_equal(
f"{lane['lane_id']}.owner_response_display_section_ids",
[item["section_id"] for item in display_sections],
expected_display_sections,
)
assert_equal(
f"{lane['lane_id']}.owner_response_display_section_order",
[item["display_order"] for item in display_sections],
list(range(1, len(expected_display_sections) + 1)),
)
for item in display_sections:
assert_equal(
f"{lane['lane_id']}.{item['section_id']}.section_status",
item["section_status"],
"display_contract_only",
)
assert_false(
f"{lane['lane_id']}.{item['section_id']}.execution_authorized",
item["execution_authorized"],
)
assert_true(f"{lane['lane_id']}.{item['section_id']}.not_approval", item["not_approval"])
expected_request_packet_id = lane.get("expected_request_packet_id")
if expected_request_packet_id is not None:
request_packet = snapshot["owner_response_request_packet"]