core-devops
8b6195d34a
CI / Template validation (static) (push) Successful in 7s
CI / Template validation (static) (pull_request) Successful in 6s
CI / Adapter unit tests (push) Successful in 7s
Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 6s
CI / Adapter unit tests (pull_request) Successful in 8s
CI / Template validation (runtime) (push) Successful in 3m37s
CI / Template validation (runtime) (pull_request) Successful in 1m50s
CI / T4 tier-4 conformance (live) (pull_request) Failing after 1m47s
CI / T4 tier-4 conformance (live) (push) Failing after 3m31s
CI / validate (pull_request) Failing after 2s
CI / validate (push) Failing after 2s
29 lines
898 B
Python
29 lines
898 B
Python
from pathlib import Path
|
|
|
|
|
|
ROOT = Path(__file__).resolve().parents[1]
|
|
|
|
|
|
def test_ci_does_not_use_github_go_setup():
|
|
workflow = (ROOT / ".gitea" / "workflows" / "ci.yml").read_text()
|
|
|
|
assert "actions/setup-go" not in workflow
|
|
assert "go run ./cmd/t4-contract-dump" not in workflow
|
|
assert "t4_capabilities.yaml" in workflow
|
|
assert "git.moleculesai.app" in workflow
|
|
|
|
|
|
def test_dockerfile_does_not_install_github_cli_from_github():
|
|
dockerfile = (ROOT / "Dockerfile").read_text()
|
|
|
|
assert "cli.github.com" not in dockerfile
|
|
assert "githubcli-archive-keyring" not in dockerfile
|
|
assert "apt-get install -y --no-install-recommends gh" not in dockerfile
|
|
|
|
|
|
def test_github_mirror_credentials_are_opt_in():
|
|
entrypoint = (ROOT / "entrypoint.sh").read_text()
|
|
|
|
assert 'ENABLE_GITHUB_MIRROR_CREDENTIALS:-false' in entrypoint
|
|
assert "gh auth login" not in entrypoint
|