21 lines
769 B
TypeScript
21 lines
769 B
TypeScript
import { mkdir } from "node:fs/promises";
|
|
|
|
import { providerVerificationArtifactSchema } from "./lib/provider-evidence.ts";
|
|
import { verifyPromotionInputs } from "./lib/promotion-verifier.ts";
|
|
import { writeValidatedJsonArtifact } from "./lib/validated-json-artifact.ts";
|
|
|
|
const report = await verifyPromotionInputs();
|
|
await mkdir("artifacts/security", { recursive: true });
|
|
await writeValidatedJsonArtifact({
|
|
path: "artifacts/security/promotion-verification.json",
|
|
schema: providerVerificationArtifactSchema,
|
|
value: report,
|
|
});
|
|
if (report.status !== "PASS") {
|
|
process.stderr.write(
|
|
`Supply-chain promotion is FAIL_UNVERIFIED:\n- ${report.failures.join("\n- ")}\n`,
|
|
);
|
|
process.exit(1);
|
|
}
|
|
process.stdout.write("Supply-chain promotion evidence: PASS\n");
|