lib

Core libraries for Radroots
git clone https://radroots.dev/git/lib.git
Log | Files | Refs | README

services_hardening_build_qualification.v2.json (2131B)

      1 {
      2   "schema": "radroots.services-hardening.build-qualification-decisions.v2",
      3   "contract_version": 2,
      4   "decision_state": "active",
      5   "predecessor": {
      6     "schema": "radroots.services-hardening.build-qualification-decisions.v1",
      7     "filename": "services_hardening_build_qualification.v1.json",
      8     "transition": "forward_only_replace"
      9   },
     10   "qualification_scope": "native_release_foundation",
     11   "fixture_root": "tools/xtask/fixtures/service-build-qualification",
     12   "supported_rust_targets": [
     13     "aarch64-apple-darwin",
     14     "aarch64-unknown-linux-gnu",
     15     "x86_64-apple-darwin",
     16     "x86_64-unknown-linux-gnu"
     17   ],
     18   "required_native_commands": [
     19     "cargo build --locked --release",
     20     "cargo fmt --all --check",
     21     "cargo check --workspace --all-targets --locked",
     22     "cargo test --workspace --all-targets --locked",
     23     "cargo clippy --workspace --all-targets --locked -- -D warnings",
     24     "RUSTDOCFLAGS=-D warnings cargo doc --workspace --no-deps --locked"
     25   ],
     26   "required_xtask_commands": [
     27     "cargo test --locked -p xtask service_source_lock::tests",
     28     "cargo test --locked -p xtask service_release_artifacts::tests",
     29     "cargo test --locked -p xtask service_build_qualification::tests",
     30     "cargo run --locked -q -p xtask -- contract validate",
     31     "cargo run --locked -q -p xtask -- release preflight"
     32   ],
     33   "required_evidence": [
     34     "cargo_lock",
     35     "source_lock",
     36     "package_metadata",
     37     "release_metadata",
     38     "binary_archive",
     39     "oci_source_artifact",
     40     "cyclonedx_sbom",
     41     "notices",
     42     "artifact_manifest",
     43     "unsigned_provenance_input",
     44     "checksums"
     45   ],
     46   "fixture_source_lock": "tools/xtask/fixtures/service-build-qualification/radroots.service.source-lock.v2.toml",
     47   "fixture_contract": "source_lock_package_and_release_metadata_exact_agreement",
     48   "release_artifact_command": "cargo xtask service-release-artifacts",
     49   "source_lock_command": "cargo xtask service-source-lock",
     50   "signing_authority": "external_only",
     51   "deferred_outputs": [
     52     "nix_packages",
     53     "nix_apps",
     54     "nix_checks",
     55     "nix_development_shells",
     56     "nixos_modules",
     57     "nix_produced_oci"
     58   ]
     59 }