128 Releases 190 Tags

RSS Feed

• v1.4.1 e050e65158

  Compare

  v1.4.1 — Central pipeline contract + shell reproducibility + streaming Stable

  grimacing released this 2026-07-22 15:11:34 +00:00 | 535 commits to main since this release

  Phase 19 — Central Pipeline Contract + Shell Reproducibility + Output Streaming

  What's new

  Central pipeline contract — A declarative pipeline contract (schemas/pipeline.schema.json + pipelines/ci.yaml) is now the single source of truth for both Gitea Actions (dev) and GitHub Actions (production) workflows. Both workflow files are byte-identical and validated against the contract by 32 new tests.

  Shell reproducibility — scripts/run_ci.sh mirrors the CI pipeline locally (lint → test → check-only), exiting 0 with "CI PIPELINE OK". The pipeline is now fully reproducible from the shell, not just in CI.

  Output streaming — scripts/run_platform.sh now streams output by default:

  • --check-only: streams the emitted Terraform file content to stdout
  • --plan-only / full mode: streams terraform init, terraform validate, terraform plan via tee
  • Full mode: prints Checkov compliance results and each PolicyCheckResult record with severity, rule ID, and pass/fail status
  • New --quiet flag suppresses streaming (log-only mode)

  Requirements

  • REQ-43: Central pipeline contract (JSON Schema + YAML instance + conformance tests)
  • REQ-44: Shell reproducibility (run_ci.sh mirrors CI pipeline)
  • REQ-45: Output streaming (run_platform.sh streams by default, --quiet for log-only)

  Test results

  • 122 tests pass (90 original + 32 new) — all offline, no AWS
  • run_ci.sh exits 0
  • run_platform.sh --check-only streams Terraform, exits 0
  • Workflows byte-identical (diff confirms)
  • Contract validates against pipeline.schema.json

  Downloads

  • Source Code (ZIP)
  • Source Code (TAR.GZ)