nicweyand/argand-site-registry
1
0
Fork 0
Code Issues Pull requests Projects Releases 7 Packages Wiki Activity Actions

feat: harden reviewed registry releases
All checks were successful
Standalone registry checks / check (push) Successful in 3m43s
Details

Browse source
This commit is contained in:
Nic Weyand 2026-09-13 01:19:27 -04:00
commit e83f43d00f
Signed by: nicweyand
SSH key fingerprint: SHA256:2te+ycJIQON/Wo/dH6+ZkFSQ4HnHWpetV2azx9E65dQ
37 changed files with 2856 additions and 286 deletions
Download patch file Download diff file Expand all files Collapse all files

2
scripts/source_release.py
View file

@ -57,7 +57,7 @@ def safe_path(name):
raise ValueError("unsafe archive path")
allowed = {".rs", ".toml", ".md", ".py", ".sh", ".sql", ".yml", ".yaml",
".service", ".timer"}
if path.suffix not in allowed and path.name != ".gitignore" and name not in (
if path.suffix not in allowed and path.name not in (".gitignore", "Dockerfile") and name not in (
"LICENSE", "Cargo.lock", "UPSTREAM.json", ".gitignore"):
raise ValueError(f"file is outside the source release allowlist: {name}")