Jens/geointel
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Handle nested release evidence checksums
GeoIntel release gates / Compile, test, contracts and builds (push) Canceled after 0s
Details
GeoIntel release gates / Python and npm vulnerability policy (push) Canceled after 0s
Details
GeoIntel release gates / GIS image, SBOM and container scan (push) Canceled after 0s
Details

Browse Source
This commit is contained in:
Codex
2026-07-18 08:59:53 +02:00
parent a70cb79e06
commit 33bcd0f3bd
2 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/tests/test_rc11_release_package.py
+3
View File
@@ -74,6 +74,9 @@ def test_release_package_signature_and_checksums_fail_closed(tmp_path: Path) ->
package.mkdir() package.mkdir()
evidence = package / "readiness.txt" evidence = package / "readiness.txt"
evidence.write_text("passed\n", encoding="utf-8") evidence.write_text("passed\n", encoding="utf-8")
nested_checksums = package / "backup" / module.CHECKSUMS_NAME
nested_checksums.parent.mkdir()
nested_checksums.write_text("backup evidence\n", encoding="utf-8")
identity = "geointel-release" identity = "geointel-release"
namespace = "geointel-release" namespace = "geointel-release"
(package / module.SIGNERS_NAME).write_text( (package / module.SIGNERS_NAME).write_text(
scripts/build_release_package.py
+1 -1
View File
@@ -114,7 +114,7 @@ def verify_checksums(package_dir: Path) -> None:
actual_paths = { actual_paths = {
path.relative_to(package_dir).as_posix() path.relative_to(package_dir).as_posix()
for path in package_files(package_dir, include_generated=True) for path in package_files(package_dir, include_generated=True)
if path.name != CHECKSUMS_NAME if path.relative_to(package_dir).as_posix() != CHECKSUMS_NAME
} }
if expected_paths != actual_paths: if expected_paths != actual_paths:
raise RuntimeError( raise RuntimeError(