CD/CD consolidation

.gitea/scripts/test/determinism-run.sh

@@ -0,0 +1,22 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# DEVOPS-SCAN-90-004: run determinism harness/tests and collect report
+
+ROOT="$(git rev-parse --show-toplevel)"
+OUT="${ROOT}/out/scanner-determinism"
+mkdir -p "$OUT"
+
+PROJECT="src/Scanner/__Tests/StellaOps.Scanner.Analyzers.Lang.Tests/StellaOps.Scanner.Analyzers.Lang.Tests.csproj"
+
+echo "[determinism] running dotnet test (filter=Determinism)"
+dotnet test "$PROJECT" --no-build --logger "trx;LogFileName=determinism.trx" --filter Determinism
+
+find "$(dirname "$PROJECT")" -name "*.trx" -print -exec cp {} "$OUT/" \;
+
+echo "[determinism] summarizing"
+printf "project=%s\n" "$PROJECT" > "$OUT/summary.txt"
+printf "timestamp=%s\n" "$(date -u +"%Y-%m-%dT%H:%M:%SZ")" >> "$OUT/summary.txt"
+
+tar -C "$OUT" -czf "$OUT/determinism-artifacts.tgz" .
+echo "[determinism] artifacts at $OUT"

.gitea/scripts/test/run-fixtures-check.sh

@@ -0,0 +1,7 @@
+#!/usr/bin/env bash
+set -euo pipefail
+root_dir=$(cd "$(dirname "$0")/.." && pwd)
+verifier="$root_dir/packs/verify_offline_bundle.py"
+python3 "$verifier" --bundle "$root_dir/packs/__fixtures__/good" --manifest bundle.json --require-dsse
+python3 "$verifier" --bundle "$root_dir/packs/__fixtures__/bad" --manifest bundle-missing-quota.json --require-dsse && exit 1 || true
+echo "fixture checks completed"