Jens
faeb58ef6d
GeoIntel release gates / Compile, test, contracts and builds (push) Successful in 1m49s
GeoIntel release gates / Python and npm vulnerability policy (push) Successful in 21s
GeoIntel release gates / Production AI image, SBOM and container scan (push) Successful in 5m39s
GeoIntel release gates / Deploy exact gated revision to Unraid (push) Failing after 58m43s
86 lines
2.5 KiB
Python
86 lines
2.5 KiB
Python
from __future__ import annotations
|
|
|
|
import importlib.util
|
|
import json
|
|
import subprocess
|
|
import sys
|
|
from pathlib import Path
|
|
|
|
|
|
ROOT = Path(__file__).resolve().parents[2]
|
|
SCRIPT = ROOT / "scripts" / "capture_release_evidence.py"
|
|
|
|
|
|
def load_script():
|
|
spec = importlib.util.spec_from_file_location("capture_release_evidence", SCRIPT)
|
|
assert spec is not None and spec.loader is not None
|
|
module = importlib.util.module_from_spec(spec)
|
|
spec.loader.exec_module(module)
|
|
return module
|
|
|
|
|
|
def test_release_evidence_manifest_is_secret_free_and_read_only(tmp_path: Path) -> None:
|
|
module = load_script()
|
|
args = module.parse_args(
|
|
[
|
|
"--output",
|
|
str(tmp_path / "evidence.json"),
|
|
"--release-id",
|
|
"test-rc",
|
|
]
|
|
)
|
|
|
|
manifest = module.build_manifest(args)
|
|
|
|
assert manifest["schema_version"] == 1
|
|
assert manifest["release_id"] == "test-rc"
|
|
assert manifest["version"] == "1.0.0"
|
|
assert manifest["read_only"] is True
|
|
assert manifest["scope"] == "Belgium and the Belgian North Sea"
|
|
assert "DATABASE_URL" not in json.dumps(manifest).replace(
|
|
'"DATABASE_URL": false',
|
|
"",
|
|
).replace(
|
|
'"DATABASE_URL": true',
|
|
"",
|
|
)
|
|
assert manifest["storage"] == {"requested": False}
|
|
assert manifest["live"] == {"requested": False}
|
|
|
|
|
|
def test_release_evidence_cli_writes_single_head_manifest(tmp_path: Path) -> None:
|
|
output = tmp_path / "baseline.json"
|
|
|
|
result = subprocess.run(
|
|
[
|
|
sys.executable,
|
|
str(SCRIPT),
|
|
"--output",
|
|
str(output),
|
|
"--release-id",
|
|
"test-cli",
|
|
],
|
|
cwd=ROOT,
|
|
capture_output=True,
|
|
text=True,
|
|
check=False,
|
|
timeout=60,
|
|
)
|
|
|
|
assert result.returncode == 0, result.stderr
|
|
payload = json.loads(output.read_text(encoding="utf-8"))
|
|
assert payload["git"]["commit"]
|
|
assert payload["migrations"]["single_head"] is True
|
|
assert payload["files"]["docs/RC_SCOPE_FREEZE_BELGIUM_NORTH_SEA.md"]["sha256"]
|
|
assert payload["files"]["docs/RC_ROADMAP_BELGIUM_NORTH_SEA.md"]["sha256"]
|
|
assert payload["files"]["docs/RELEASE_RUNBOOK.md"]["sha256"]
|
|
assert payload["files"]["docs/KNOWN_LIMITATIONS.md"]["sha256"]
|
|
|
|
|
|
def test_readiness_gate_compiles_release_evidence_command() -> None:
|
|
readiness = (ROOT / "scripts" / "run_readiness_check.sh").read_text(
|
|
encoding="utf-8"
|
|
)
|
|
|
|
assert "py_compile scripts/capture_release_evidence.py" in readiness
|