68 lines
2.5 KiB
Ruby
Executable File
68 lines
2.5 KiB
Ruby
Executable File
# frozen_string_literal: true
|
|
|
|
require "json"
|
|
require "time"
|
|
|
|
root = File.expand_path("..", __dir__)
|
|
tag, published_at, release_url, digest = ARGV
|
|
abort "usage: record_upstream_candidate.rb TAG PUBLISHED_AT RELEASE_URL DIGEST" unless digest
|
|
abort "invalid upstream release tag: #{tag.inspect}" unless tag.match?(/\Av\d+\.\d+\.\d+\z/)
|
|
abort "invalid OCI digest: #{digest.inspect}" unless digest.match?(/\Asha256:[0-9a-f]{64}\z/)
|
|
begin
|
|
Time.iso8601(published_at)
|
|
rescue ArgumentError, TypeError
|
|
abort "invalid upstream publication timestamp: #{published_at.inspect}"
|
|
end
|
|
expected_release_url = "https://github.com/anomalyco/opencode/releases/tag/#{tag}"
|
|
abort "invalid upstream release URL: #{release_url.inspect}" unless release_url == expected_release_url
|
|
|
|
version = tag.delete_prefix("v")
|
|
image = "ghcr.io/anomalyco/opencode@#{digest}"
|
|
upstream_path = File.join(root, "manifests/upstream.json")
|
|
matrix_path = File.join(root, "manifests/image-matrix.json")
|
|
upstream = JSON.parse(File.read(upstream_path))
|
|
matrix = JSON.parse(File.read(matrix_path))
|
|
public_ci = matrix.fetch("public_ci")
|
|
abort "public_ci must be an array" unless public_ci.is_a?(Array)
|
|
|
|
matching_targets = public_ci.select { |target| target.fetch("image") == image }
|
|
if matching_targets.length > 1
|
|
abort "image #{image} must appear exactly once in public_ci; found #{matching_targets.length}"
|
|
end
|
|
|
|
matrix_changed = false
|
|
if matching_targets.empty?
|
|
target_id = "upstream-#{version}-#{digest.delete_prefix('sha256:')}"
|
|
if public_ci.any? { |target| target.fetch("id") == target_id }
|
|
abort "cannot add #{image}: public_ci id #{target_id.inspect} is already used by another image"
|
|
end
|
|
|
|
public_ci << {
|
|
"id" => target_id,
|
|
"version" => version,
|
|
"image" => image,
|
|
"tag_provenance" => "ghcr.io/anomalyco/opencode:#{version}",
|
|
"consumers" => [],
|
|
"profiles" => ["ruby-rest-sse"],
|
|
"required_consumer_profiles" => [],
|
|
"certification_scope" => "shared-client-contract-only",
|
|
"certification_status" => "pending"
|
|
}
|
|
matrix_changed = true
|
|
end
|
|
|
|
upstream_changed = upstream.fetch("release_tag") != tag || upstream.fetch("image") != image
|
|
if upstream_changed
|
|
upstream.merge!(
|
|
"release_tag" => tag,
|
|
"version" => version,
|
|
"published_at" => published_at,
|
|
"release_url" => release_url,
|
|
"image" => image,
|
|
"observed_at" => Time.now.utc.iso8601
|
|
)
|
|
end
|
|
|
|
File.write(upstream_path, JSON.pretty_generate(upstream) + "\n") if upstream_changed
|
|
File.write(matrix_path, JSON.pretty_generate(matrix) + "\n") if matrix_changed
|