fix: 阻止流水线扩大已审阅发布范围

2026-07-21 15:50:28 +02:00
parent 54f9b0a65c
commit bcff84ff9f
10 changed files with 336 additions and 10 deletions
@@ -240,10 +240,16 @@ test("v02 render follows TypeScript runtime checks and does not self-patch boots
    assert.match(planArtifactsScript, /rolloutWithoutImageBuildServices/u);
    assert.match(planArtifactsScript, /serviceReusedCount/u);
    assert.match(planArtifactsScript, /artifactCatalog: plan\.artifactCatalog/u);
+    assert.match(planArtifactsScript, /--base-ref "\$\(params\.release-base-commit\)"/u);
+    assert.match(planArtifactsScript, /verify-reviewed-plan\.mjs/u);
    assert.ok(planArtifacts.taskSpec.params.some((param) => param.name === "git-read-url"));
    assert.ok(planArtifacts.taskSpec.params.some((param) => param.name === "gitops-branch"));
    assert.ok(planArtifacts.params.some((param) => param.name === "lane" && param.value === "$(params.lane)"));
    assert.ok(pipelineJson.spec.params.some((param) => param.name === "runtime-ready-timeout-ms" && param.default === "60000"));
+    for (const name of ["release-base-commit", "release-target", "release-consumer", "reviewed-plan"]) {
+      assert.ok(pipelineJson.spec.params.some((param) => param.name === name));
+      assert.ok(planArtifacts.taskSpec.params.some((param) => param.name === name));
+    }

    const gitopsPromote = taskByName(pipelineJson, "gitops-promote");
    assert.ok(gitopsPromote.taskSpec.results.some((result) => result.name === "runtime-ready-required"));