refactor: generate CI workflow from gate contracts

2026-08-02 13:53:25 +09:00
parent 777ce5c9ed
commit 1bb2cc4a20
45 changed files with 8599 additions and 1177 deletions
@@ -1,10 +1,16 @@
 import { mkdir } from "node:fs/promises";
+import path from "node:path";

 import { providerVerificationArtifactSchema } from "./lib/provider-evidence.ts";
 import { verifyPromotionInputs } from "./lib/promotion-verifier.ts";
 import { writeValidatedJsonArtifact } from "./lib/validated-json-artifact.ts";

-const report = await verifyPromotionInputs();
+const report = await verifyPromotionInputs({
+  artifactType: "promotion-verification",
+  repositoryRoot: path.resolve(process.env.CANDIDATE_ROOT ?? process.cwd()),
+  providerEvidenceRoot: process.cwd(),
+  trustRoot: process.cwd(),
+});
 await mkdir("artifacts/security", { recursive: true });
 await writeValidatedJsonArtifact({
  path: "artifacts/security/promotion-verification.json",