Prepare ForgeFlow for public release #10

Merged
Jens merged 24 commits from codex/public-readiness-forgeflow into main 2026-08-31 18:17:57 +00:00
Showing only changes of commit c5cf384f9a - Show all commits
+4 -2
View File
@@ -6,10 +6,11 @@ const workflowUrl = new URL('../examples/gitea-actions/forgeflow-approved-deploy
const deployUrl = new URL('../examples/server/forgeflow-deploy', import.meta.url);
test('approved workflow transports immutable evidence only to the root-owned deploy wrapper', async () => {
test('central approved workflow transports signed target evidence only to the root-owned deploy wrapper', async () => {
const workflow = await readFile(workflowUrl, 'utf8');
for (const input of [
'repository',
'environment',
'commit_sha',
'request_id',
@@ -20,7 +21,8 @@ test('approved workflow transports immutable evidence only to the root-owned dep
]) {
assert.match(workflow, new RegExp(`\\b${input}:`));
}
assert.match(workflow, /\$\{\{ gitea\.repository \}\}/);
assert.match(workflow, /\$\{\{ inputs\.repository \}\}/);
assert.doesNotMatch(workflow, /\$\{\{ gitea\.repository \}\}/);
assert.match(workflow, /FF_APPROVAL_ID.*FF_REQUEST_ID/s);
assert.match(workflow, /sudo \/usr\/local\/bin\/forgeflow-deploy/);
assert.doesNotMatch(workflow, /actions\/checkout/);