nicweyand/argand-site-registry
1
0
Fork 0
Code Issues Pull requests Projects Releases 7 Packages Wiki Activity Actions

release: implement site registry v0.4 trust pipeline

Browse source
This commit is contained in:
Nic Weyand 2026-09-13 12:22:05 -04:00
commit e26efc19fa
Signed by: nicweyand
SSH key fingerprint: SHA256:2te+ycJIQON/Wo/dH6+ZkFSQ4HnHWpetV2azx9E65dQ
67 changed files with 10698 additions and 640 deletions
Download patch file Download diff file Expand all files Collapse all files

7
scripts/source_release.py
View file

@ -57,8 +57,11 @@ def safe_path(name):
raise ValueError("unsafe archive path")
allowed = {".rs", ".toml", ".md", ".py", ".sh", ".sql", ".yml", ".yaml",
".service", ".timer"}
if path.suffix not in allowed and path.name not in (".gitignore", "Dockerfile") and name not in (
"LICENSE", "Cargo.lock", "UPSTREAM.json", ".gitignore"):
if path.suffix not in allowed and path.name not in (
".gitignore", "Dockerfile") and name not in (
"LICENSE", "Cargo.lock", "UPSTREAM.json", ".gitignore",
"crates/argand-site-registry/examples/observer.env",
"crates/argand-site-registry/tests/fixtures/v03-contract.json"):
raise ValueError(f"file is outside the source release allowlist: {name}")