feat(api): validate gitea owner attestation intake
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 1s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Successful in 19s
CD Pipeline / build-and-deploy (push) Successful in 4m29s
CD Pipeline / post-deploy-checks (push) Successful in 59s

This commit is contained in:
Your Name
2026-06-29 19:47:59 +08:00
parent 8e3449f9e2
commit b9293b76b5
5 changed files with 609 additions and 0 deletions

View File

@@ -121,6 +121,7 @@ def test_gitea_private_inventory_scorecard_stays_on_controlled_runtime_profile()
expected_sources = [
"docs/operations/awoooi-gitea-private-inventory-p0-scorecard.snapshot.json)",
"apps/api/src/services/gitea_authenticated_inventory_payload_validation.py)",
"apps/api/src/services/gitea_owner_coverage_attestation_validation.py)",
"apps/api/src/services/gitea_private_inventory_p0_scorecard.py)",
"apps/api/tests/test_gitea_private_inventory_p0_scorecard_api.py)",
"docs/operations/awoooi-gitea-authenticated-inventory-payload-validation.snapshot.json)",
@@ -131,6 +132,7 @@ def test_gitea_private_inventory_scorecard_stays_on_controlled_runtime_profile()
"scripts/security/gitea-authenticated-inventory-payload-validator.py)",
"scripts/security/tests/test_gitea_private_inventory_p0_scorecard.py)",
"src/services/gitea_authenticated_inventory_payload_validation.py",
"src/services/gitea_owner_coverage_attestation_validation.py",
"src/services/gitea_private_inventory_p0_scorecard.py",
"tests/test_gitea_private_inventory_p0_scorecard_api.py",
"scripts/security/tests/test_gitea_authenticated_inventory_payload_validator.py)",