fix: require signed execution security evidence

This commit is contained in:
2026-09-02 11:12:28 +03:00
parent 259f52a02b
commit 7da2b72933
5 changed files with 180 additions and 16 deletions

View File

@@ -23,7 +23,7 @@
"capture:runtime-budgets": "playwright test tests/performance/runtime-budget-trace.spec.ts --project=runtime-budget-desktop --workers=1",
"verify:runtime-budgets": "node scripts/verify-runtime-budgets.mjs",
"verify:phase3": "npm run verify:runtime-budgets && npm run test:browser",
"verify:supply-chain": "node scripts/supply-chain-check.mjs verify --project . --evidence release-evidence/supply-chain",
"verify:supply-chain": "node scripts/supply-chain-check.mjs verify --project . --evidence release-evidence/supply-chain --tool-trust-policy config/release-execution-trust.json",
"smoke:production": "node scripts/smoke-production.mjs",
"aggregate:performance": "node scripts/aggregate-drive-traces.mjs",
"sign:performance": "node scripts/sign-drive-trace.mjs",