150 lines
6.4 KiB
JSON
150 lines
6.4 KiB
JSON
{
|
|
"schema_version": "awoooi_external_mcp_artifact_policy_v1",
|
|
"work_item_id": "MCP-ARTIFACT-PLAYWRIGHT-001",
|
|
"candidate_id": "external.playwright-verifier",
|
|
"risk_level": "high",
|
|
"catalog_source": {
|
|
"kind": "discovery_only",
|
|
"name": "mcp-so",
|
|
"url": "https://mcp.so/servers/playwright-mcp",
|
|
"executable_supply_chain_authority": false
|
|
},
|
|
"registry_contract": {
|
|
"registry_origin": "https://registry.npmjs.org",
|
|
"keys_url": "https://registry.npmjs.org/-/npm/v1/keys",
|
|
"allowed_hosts": [
|
|
"registry.npmjs.org"
|
|
],
|
|
"redirects_allowed": false,
|
|
"maximum_metadata_bytes": 1048576,
|
|
"maximum_tarball_bytes": 8388608,
|
|
"maximum_unpacked_bytes": 33554432,
|
|
"signature_key": {
|
|
"keyid": "SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U",
|
|
"keytype": "ecdsa-sha2-nistp256",
|
|
"scheme": "ecdsa-sha2-nistp256",
|
|
"expires": null,
|
|
"public_key_der_base64": "MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEY6Ya7W++7aUPzvMTrezH6Ycx3c+HOKYCcNGybJZSCJq/fd7Qa8uuAKtdIkUQtQiEKERhAmE5lMMJhP8OkDOa2g=="
|
|
}
|
|
},
|
|
"packages": [
|
|
{
|
|
"name": "@playwright/mcp",
|
|
"version": "0.0.78",
|
|
"metadata_url": "https://registry.npmjs.org/@playwright%2Fmcp/0.0.78",
|
|
"tarball_url": "https://registry.npmjs.org/@playwright/mcp/-/mcp-0.0.78.tgz",
|
|
"integrity": "sha512-XLTUeA6mEN9sQ+hJ4dfG8EIkDbxS0K3Trc2RBkUJuf02TgE2FQRNTMtq/aJfhyRMINsRl/Ybc4sxcWLtFn4/TQ==",
|
|
"shasum_sha1": "305c96c4ac0179bd37622fe4ed4162493513b33e",
|
|
"signature": "MEQCIFFsdei1ioeXzOhsBHdVv1XBungfkFzNx6eHS+igHlDaAiBfcETN9LM6vcv8GU8ch9KtODfcx3NXW0HW775r66Rzag==",
|
|
"attestations_url": "https://registry.npmjs.org/-/npm/v1/attestations/@playwright%2fmcp@0.0.78",
|
|
"slsa_subject_name": "pkg:npm/%40playwright/mcp@0.0.78",
|
|
"slsa_subject_sha512_hex": "5cb4d4780ea610df6c43e849e1d7c6f042240dbc52d0add3adcd91064509b9fd364e013615044d4ccb6afda25f87244c20db1197f61b738b317162ed167e3f4d",
|
|
"license": "Apache-2.0",
|
|
"dependencies": {
|
|
"playwright": "1.62.0-alpha-1783623505000",
|
|
"playwright-core": "1.62.0-alpha-1783623505000"
|
|
}
|
|
},
|
|
{
|
|
"name": "playwright",
|
|
"version": "1.62.0-alpha-1783623505000",
|
|
"metadata_url": "https://registry.npmjs.org/playwright/1.62.0-alpha-1783623505000",
|
|
"tarball_url": "https://registry.npmjs.org/playwright/-/playwright-1.62.0-alpha-1783623505000.tgz",
|
|
"integrity": "sha512-6KV9h4PP3hqu4NaGdxxcijWfYh9LJcFI/R2sP4TTC4I5cFo3oRawN0ETlW5MkE3cQEgKhhoj0KUNz4sfpCT0Tg==",
|
|
"shasum_sha1": "d04815de36073de29cc0b02c69bfd657231ec0c1",
|
|
"signature": "MEUCIQDw1UimZ6bCEYoTrl+bW4mopC7zomhYdObstPBijNCbMgIgUYnCgVS8CaC3sIfjJwe4RL3RY3SO3Zxy92PcP63vr7w=",
|
|
"attestations_url": "https://registry.npmjs.org/-/npm/v1/attestations/playwright@1.62.0-alpha-1783623505000",
|
|
"slsa_subject_name": "pkg:npm/playwright@1.62.0-alpha-1783623505000",
|
|
"slsa_subject_sha512_hex": "e8a57d8783cfde1aaee0d686771c5c8a359f621f4b25c148fd1dac3f84d30b8239705a37a116b0374113956e4c904ddc40480a861a23d0a50dcf8b1fa424f44e",
|
|
"license": "Apache-2.0",
|
|
"dependencies": {
|
|
"playwright-core": "1.62.0-alpha-1783623505000"
|
|
},
|
|
"optional_dependencies": {
|
|
"fsevents": "2.3.2"
|
|
}
|
|
},
|
|
{
|
|
"name": "playwright-core",
|
|
"version": "1.62.0-alpha-1783623505000",
|
|
"metadata_url": "https://registry.npmjs.org/playwright-core/1.62.0-alpha-1783623505000",
|
|
"tarball_url": "https://registry.npmjs.org/playwright-core/-/playwright-core-1.62.0-alpha-1783623505000.tgz",
|
|
"integrity": "sha512-CPJZdsA/KGT2QQlekiV6Wt+QlQrZHVSZ6oiNtOI/bYYOIVLM8jfKGWTM4zQiyd4UN+40Cq4cA6lxmZHZbtPvJQ==",
|
|
"shasum_sha1": "3984745e615ad065b24a89edeeec1a653addc807",
|
|
"signature": "MEUCIFhV50jjIBy0rF0fm8SO5i0BHs7OULVIVg64Z+KOng7EAiEAy8QtBfSmtVqDHBXb+1x2VdWuChhvd2GWWaJHGm8O9eU=",
|
|
"attestations_url": "https://registry.npmjs.org/-/npm/v1/attestations/playwright-core@1.62.0-alpha-1783623505000",
|
|
"slsa_subject_name": "pkg:npm/playwright-core@1.62.0-alpha-1783623505000",
|
|
"slsa_subject_sha512_hex": "08f25976c03f2864f641095e92257a5adf90950ad91d5499ea888db4e23f6d860e2152ccf237ca1964cce33422c9de1437ee340aae1c03a9719991d96ed3ef25",
|
|
"license": "Apache-2.0",
|
|
"dependencies": {}
|
|
}
|
|
],
|
|
"internal_mirror": {
|
|
"artifact_kind": "oci_scratch_bundle",
|
|
"push_repository": "registry.wooo.work/awoooi/mcp-artifacts/playwright-mcp",
|
|
"runtime_repository": "192.168.0.110:5000/awoooi/mcp-artifacts/playwright-mcp",
|
|
"tag": "0.0.78-bundle-v1",
|
|
"digest_pin_required": true,
|
|
"sbom_required": true,
|
|
"upstream_signature_required": true,
|
|
"slsa_subject_match_required": true,
|
|
"vulnerability_scan_required": true,
|
|
"vulnerability_db_max_age_hours": 168,
|
|
"allowed_licenses": [
|
|
"Apache-2.0"
|
|
]
|
|
},
|
|
"replay_contract": {
|
|
"registered_adapter": "playwright_public_accessibility_verifier_v1",
|
|
"adapter_implemented": false,
|
|
"allowed_origins": [
|
|
"https://awoooi.wooo.work"
|
|
],
|
|
"first_canary_url": "https://awoooi.wooo.work/zh-TW/automation/mcp",
|
|
"authenticated_session_allowed": false,
|
|
"browser_profile_persistence_allowed": false,
|
|
"file_upload_allowed": false,
|
|
"download_allowed": false,
|
|
"pdf_write_allowed": false,
|
|
"browser_install_allowed": false,
|
|
"arbitrary_navigation_allowed": false,
|
|
"production_form_submit_allowed": false,
|
|
"production_write_allowed": false,
|
|
"screenshot_and_accessibility_receipts_only": true
|
|
},
|
|
"promotion_contract": {
|
|
"deployment_allowed": false,
|
|
"shadow_allowed": false,
|
|
"canary_allowed": false,
|
|
"required_before_shadow": [
|
|
"internal_mirror_digest_verified",
|
|
"cyclonedx_sbom_verified",
|
|
"npm_registry_signatures_verified",
|
|
"slsa_subjects_verified",
|
|
"vulnerability_decision_passed",
|
|
"license_decision_passed",
|
|
"registered_replay_adapter_verified",
|
|
"rollback_receipt_verified"
|
|
],
|
|
"rollback": {
|
|
"action": "disable_candidate_and_retain_immutable_bundle",
|
|
"fallback_verifier": "awoooi_repo_owned_playwright_test_runner",
|
|
"external_artifact_delete_allowed": false,
|
|
"production_route_change_allowed": false
|
|
}
|
|
},
|
|
"prohibited": [
|
|
"github_api_or_github_actions",
|
|
"actions_checkout",
|
|
"github_source_archive_or_ghcr",
|
|
"npx_y",
|
|
"at_latest",
|
|
"floating_container_tag",
|
|
"unverified_redirect",
|
|
"secret_read_or_log",
|
|
"request_or_response_body_storage",
|
|
"external_rag_write",
|
|
"production_mutation"
|
|
]
|
|
}
|