fix: harden provider and promotion evidence

2026-08-02 16:28:24 +09:00
parent 42ffb79997
commit 30ceac23c1
29 changed files with 3961 additions and 1076 deletions
@@ -1,12 +1,22 @@
 import { mkdir } from "node:fs/promises";

 import { writeValidatedJsonArtifact } from "./lib/validated-json-artifact.ts";
+import { localEvidenceAssessmentArtifactSchema } from "./contracts/release-artifacts.ts";
+import { createLocalEvidenceAssessment } from "./lib/local-release-evidence.ts";
 import {
  createReleaseCandidateManifest,
+  LOCAL_EVIDENCE_ASSESSMENT_PATH,
  RELEASE_CANDIDATE_MANIFEST_PATH,
  releaseCandidateManifestSchema,
 } from "./lib/release-candidate.ts";

+const assessment = await createLocalEvidenceAssessment();
+await mkdir("artifacts/security", { recursive: true });
+await writeValidatedJsonArtifact({
+  path: LOCAL_EVIDENCE_ASSESSMENT_PATH,
+  schema: localEvidenceAssessmentArtifactSchema,
+  value: assessment,
+});
 const manifest = await createReleaseCandidateManifest();
 await mkdir("artifacts/release", { recursive: true });
 await writeValidatedJsonArtifact({