chore: establish local platform baseline

2026-08-26 06:41:54 +08:00
commit 29bdf4900f
575 changed files with 95644 additions and 0 deletions
@@ -0,0 +1,48 @@
+package main
+
+import (
+	"encoding/json"
+	"flag"
+	"fmt"
+	"os"
+	"path/filepath"
+	"strings"
+	"time"
+
+	"data-terminal-cloud/internal/cisupplychainconformance"
+)
+
+func main() {
+	capturePath := flag.String("capture", "", "remote-ci-supply-chain-capture-v1 JSON")
+	candidateVersion := flag.String("candidate-version", "", "release candidate version")
+	buildDigest := flag.String("build-digest", "", "sha256 immutable build digest")
+	sourceCommit := flag.String("source-commit", "", "full source commit")
+	outputPath := flag.String("output", "", "absolute output report path")
+	flag.Parse()
+	if *capturePath == "" || strings.TrimSpace(*candidateVersion) == "" || strings.TrimSpace(*buildDigest) == "" || strings.TrimSpace(*sourceCommit) == "" || !filepath.IsAbs(*outputPath) {
+		fmt.Fprintln(os.Stderr, "usage: ci-supply-chain-conformance -capture capture.json -candidate-version VERSION -build-digest sha256:... -source-commit COMMIT -output ABSOLUTE.json")
+		os.Exit(2)
+	}
+	content, err := os.ReadFile(*capturePath)
+	if err != nil {
+		fmt.Fprintln(os.Stderr, "read remote CI capture:", err)
+		os.Exit(2)
+	}
+	capture, err := cisupplychainconformance.ParseCapture(content)
+	if err != nil {
+		fmt.Fprintln(os.Stderr, err)
+		os.Exit(2)
+	}
+	report := cisupplychainconformance.Evaluate(capture, *candidateVersion, *buildDigest, *sourceCommit, time.Now().UTC())
+	report.InputSHA256["ci_capture"] = cisupplychainconformance.SHA256(content)
+	encoded, _ := json.MarshalIndent(report, "", "  ")
+	encoded = append(encoded, '\n')
+	if err = os.WriteFile(*outputPath, encoded, 0o600); err != nil {
+		fmt.Fprintln(os.Stderr, "write remote CI report:", err)
+		os.Exit(2)
+	}
+	fmt.Printf("Remote CI supply-chain conformance %s: %s\n", report.Result, *outputPath)
+	if report.Result != "PASS" {
+		os.Exit(1)
+	}
+}