Skip to content

ci(release): harden downstream payload evidence#129

Merged
shideneyu merged 1 commit into
mainfrom
ci/release-downstream-payload-hardening
Jul 20, 2026
Merged

ci(release): harden downstream payload evidence#129
shideneyu merged 1 commit into
mainfrom
ci/release-downstream-payload-hardening

Conversation

@shideneyu

Copy link
Copy Markdown
Contributor

Summary

  • permit repeated payload roles for multiarchitecture APT/RPM artifacts while keeping filenames unique
  • bind policy-audit references to the exact audit App installation
  • add focused multiarchitecture and schema regressions

Validation

  • cargo test --locked for every release_*_spec integration suite
  • cargo clippy --workspace --all-targets --locked -- -D warnings
  • cargo fmt --all -- --check
  • ruff check scripts/release/downstream_payload.py
  • python3 scripts/release/validate-contracts.py

All release capabilities remain disabled.

@shideneyu
shideneyu merged commit 980501a into main Jul 20, 2026
52 checks passed
@shideneyu
shideneyu deleted the ci/release-downstream-payload-hardening branch July 20, 2026 21:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant