lib

Core libraries for Radroots
git clone https://radroots.dev/git/lib.git
Log | Files | Refs | README

services_hardening_build_qualification.v1.json (1922B)

      1 {
      2   "schema": "radroots.services-hardening.build-qualification-decisions.v1",
      3   "contract_version": 1,
      4   "decision_state": "active",
      5   "qualification_scope": "native_release_foundation",
      6   "fixture_root": "tools/xtask/fixtures/service-build-qualification",
      7   "supported_rust_targets": [
      8     "aarch64-apple-darwin",
      9     "aarch64-unknown-linux-gnu",
     10     "x86_64-apple-darwin",
     11     "x86_64-unknown-linux-gnu"
     12   ],
     13   "required_native_commands": [
     14     "cargo build --locked --release",
     15     "cargo fmt --all --check",
     16     "cargo check --workspace --all-targets --locked",
     17     "cargo test --workspace --all-targets --locked",
     18     "cargo clippy --workspace --all-targets --locked -- -D warnings",
     19     "RUSTDOCFLAGS=-D warnings cargo doc --workspace --no-deps --locked"
     20   ],
     21   "required_xtask_commands": [
     22     "cargo test --locked -p xtask service_source_lock::tests",
     23     "cargo test --locked -p xtask service_release_artifacts::tests",
     24     "cargo test --locked -p xtask service_build_qualification::tests",
     25     "cargo run --locked -q -p xtask -- contract validate",
     26     "cargo run --locked -q -p xtask -- release preflight"
     27   ],
     28   "required_evidence": [
     29     "cargo_lock",
     30     "source_lock",
     31     "package_metadata",
     32     "release_metadata",
     33     "binary_archive",
     34     "oci_source_artifact",
     35     "cyclonedx_sbom",
     36     "notices",
     37     "artifact_manifest",
     38     "unsigned_provenance_input",
     39     "checksums"
     40   ],
     41   "fixture_source_lock": "tools/xtask/fixtures/service-build-qualification/radroots.service.source-lock.v1.toml",
     42   "fixture_contract": "source_lock_package_and_release_metadata_exact_agreement",
     43   "release_artifact_command": "cargo xtask service-release-artifacts",
     44   "source_lock_command": "cargo xtask service-source-lock",
     45   "signing_authority": "external_only",
     46   "deferred_outputs": [
     47     "nix_packages",
     48     "nix_apps",
     49     "nix_checks",
     50     "nix_development_shells",
     51     "nixos_modules",
     52     "nix_produced_oci"
     53   ]
     54 }