18d87c64c5
- Implemented PolicyPackSelectorComponent for selecting policy packs. - Added unit tests for component behavior, including API success and error handling. - Introduced monaco-workers type declarations for editor workers. - Created acceptance tests for guardrails with stubs for AT1–AT10. - Established SCA Failure Catalogue Fixtures for regression testing. - Developed plugin determinism harness with stubs for PL1–PL10. - Added scripts for evidence upload and verification processes.
47 lines
1.7 KiB
Bash
47 lines
1.7 KiB
Bash
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
# Upload both Zastava and Signals evidence bundles to the locker.
|
|
# Requires EVIDENCE_LOCKER_URL and CI_EVIDENCE_LOCKER_TOKEN.
|
|
|
|
EVIDENCE_LOCKER_URL=${EVIDENCE_LOCKER_URL:-}
|
|
CI_EVIDENCE_LOCKER_TOKEN=${CI_EVIDENCE_LOCKER_TOKEN:-}
|
|
|
|
if [[ -z "$EVIDENCE_LOCKER_URL" || -z "$CI_EVIDENCE_LOCKER_TOKEN" ]]; then
|
|
echo "EVIDENCE_LOCKER_URL and CI_EVIDENCE_LOCKER_TOKEN are required" >&2
|
|
exit 1
|
|
fi
|
|
|
|
# Defaults
|
|
ZASTAVA_TAR=${ZASTAVA_TAR:-evidence-locker/zastava/2025-12-02/zastava-evidence.tar}
|
|
ZASTAVA_VERIFY=${ZASTAVA_VERIFY:-tools/zastava-verify-evidence-tar.sh}
|
|
ZASTAVA_PATH=\$EVIDENCE_LOCKER_URL/zastava/2025-12-02/zastava-evidence.tar
|
|
|
|
SIGNALS_TAR=${SIGNALS_TAR:-evidence-locker/signals/2025-12-05/signals-evidence.tar}
|
|
SIGNALS_VERIFY=${SIGNALS_VERIFY:-tools/signals-verify-evidence-tar.sh}
|
|
SIGNALS_PATH=\$EVIDENCE_LOCKER_URL/signals/2025-12-05/signals-evidence.tar
|
|
|
|
# Verify
|
|
if [[ -x "$ZASTAVA_VERIFY" ]]; then
|
|
"$ZASTAVA_VERIFY" "$ZASTAVA_TAR"
|
|
fi
|
|
if [[ -x "$SIGNALS_VERIFY" ]]; then
|
|
"$SIGNALS_VERIFY" "$SIGNALS_TAR"
|
|
fi
|
|
|
|
# Upload Zastava
|
|
curl --retry 3 --retry-delay 2 --fail \
|
|
-H "Authorization: Bearer $CI_EVIDENCE_LOCKER_TOKEN" \
|
|
-X PUT "$EVIDENCE_LOCKER_URL/zastava/2025-12-02/zastava-evidence.tar" \
|
|
--data-binary @"$ZASTAVA_TAR"
|
|
|
|
echo "Uploaded Zastava evidence to $EVIDENCE_LOCKER_URL/zastava/2025-12-02/zastava-evidence.tar"
|
|
|
|
# Upload Signals
|
|
curl --retry 3 --retry-delay 2 --fail \
|
|
-H "Authorization: Bearer $CI_EVIDENCE_LOCKER_TOKEN" \
|
|
-X PUT "$EVIDENCE_LOCKER_URL/signals/2025-12-05/signals-evidence.tar" \
|
|
--data-binary @"$SIGNALS_TAR"
|
|
|
|
echo "Uploaded Signals evidence to $EVIDENCE_LOCKER_URL/signals/2025-12-05/signals-evidence.tar"
|