wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 4 Packages Projects Releases Wiki Activity

docs(security): add gitea owner response outcome lanes

Browse Source
This commit is contained in:
Your Name
2026-05-18 10:31:02 +08:00
parent 835820b58b
commit e65515617e
29 changed files with 267 additions and 33 deletions
Download Patch File Download Diff File Expand all files Collapse all files

31
scripts/security/source-control-owner-response-guard.py
View File

@@ -34,6 +34,13 @@ LANES = [
"preflight-no-execution-request",
"preflight-all-five-items-before-accepted",
],
"expected_outcome_lanes": [
"ready_for_owner_review",
"request_more_evidence",
"quarantine_sensitive_payload",
"reject_execution_request",
"keep_waiting_owner_response",
],
},
{
"lane_id": "s4_10_github_target_owner_decision_response",
@@ -187,6 +194,30 @@ def validate(root: Path) -> None:
f"{lane['lane_id']}.{item['check_id']}.execution_authorized",
item["execution_authorized"],
)
expected_outcome_lanes = lane.get("expected_outcome_lanes")
if expected_outcome_lanes is not None:
intake_outcome_lanes = snapshot["intake_outcome_lanes"]
assert_equal(
f"{lane['lane_id']}.intake_outcome_lane_count",
summary["intake_outcome_lane_count"],
len(expected_outcome_lanes),
)
assert_equal(
f"{lane['lane_id']}.intake_outcome_lane_ids",
[item["lane_id"] for item in intake_outcome_lanes],
expected_outcome_lanes,
)
assert_equal(
f"{lane['lane_id']}.intake_outcome_display_order",
[item["display_order"] for item in intake_outcome_lanes],
list(range(1, len(expected_outcome_lanes) + 1)),
)
for item in intake_outcome_lanes:
assert_false(
f"{lane['lane_id']}.{item['lane_id']}.execution_authorized",
item["execution_authorized"],
)
assert_true(f"{lane['lane_id']}.{item['lane_id']}.not_approval", item["not_approval"])
assert_false(f"{lane['lane_id']}.runtime_execution_authorized", snapshot["runtime_execution_authorized"])
assert_false(f"{lane['lane_id']}.rollup_execution_authorized", rollup_lane["execution_authorized"])
assert_equal(