Enforce immutable supply chain defaults

This commit is contained in:
ms2k 2026-08-21 14:25:58 +09:00
commit 19ac156f4b

View file

@ -1,4 +1,4 @@
.PHONY: check-dependencies check-fixture-lib check-kind-sample check-durable check-coordination check-identity check-credentials check-admission check-attempt check-attempt-mutations check-recovery check-worker-api check-public-api check-live-events check-worker check-stream check-target check-result check-deletion check-outbound check-http-source check-object-source check-hf-source check-deployment check-requirements check-qualification-kind check-qualification check-fast check-full check-fast-host check-full-host contract-check rust-check web-install web-check web-test-fast web-test-full
.PHONY: check-pins check-dependencies check-fixture-lib check-kind-sample check-durable check-coordination check-identity check-credentials check-admission check-attempt check-attempt-mutations check-recovery check-worker-api check-public-api check-live-events check-worker check-stream check-target check-result check-deletion check-outbound check-http-source check-object-source check-hf-source check-deployment check-requirements check-qualification-kind check-qualification check-fast check-full check-fast-host check-full-host contract-check contract-check-host rust-check web-install web-check web-test-fast web-test-full
CONTAINER_ENGINE ?= nerdctl
CONTAINER_RUN_FLAGS ?= --memory=16g --memory-swap=24g --cpus=4
@ -6,15 +6,22 @@ PLAYWRIGHT_BROWSERS_PATH := $(CURDIR)/web/.cache/ms-playwright
export PLAYWRIGHT_BROWSERS_PATH
contract-check:
$(CONTAINER_ENGINE) build --file Dockerfile.test --target contract-check --tag remora-contract-check:local .
$(CONTAINER_ENGINE) run --rm $(CONTAINER_RUN_FLAGS) remora-contract-check:local
contract-check-host:
npm ci --prefix contracts/typespec
npm ci --prefix contracts/typespec-rust-emitter
npm run check --prefix contracts/typespec
rust-check: contract-check
check-pins:
./scripts/check-pins.sh
rust-check: contract-check-host
cargo fmt --all --check
cargo clippy --workspace --all-targets --all-features -- -D warnings
cargo nextest run --workspace --all-features
cargo test --workspace --doc
cargo clippy --locked --workspace --all-targets --all-features -- -D warnings
cargo nextest run --locked --workspace --all-features
cargo test --locked --workspace --doc
web-install:
pnpm --dir web install --frozen-lockfile
@ -36,23 +43,23 @@ web-test-full: web-install
pnpm --dir web test:component:full
pnpm --dir web test:e2e:full
check-fast: check-fixture-lib contract-check
check-fast: check-pins check-fixture-lib contract-check
$(CONTAINER_ENGINE) build --file Dockerfile.test --target rust-check --tag remora-rust-check:local .
$(CONTAINER_ENGINE) run --rm $(CONTAINER_RUN_FLAGS) remora-rust-check:local
$(CONTAINER_ENGINE) build --file Dockerfile.test --target web-fast --tag remora-web-check:local .
$(CONTAINER_ENGINE) run --rm $(CONTAINER_RUN_FLAGS) remora-web-check:local
check-full: check-fixture-lib contract-check
check-full: check-pins check-fixture-lib contract-check
$(CONTAINER_ENGINE) build --file Dockerfile.test --target rust-check --tag remora-rust-check:local .
$(CONTAINER_ENGINE) run --rm $(CONTAINER_RUN_FLAGS) remora-rust-check:local
$(CONTAINER_ENGINE) build --file Dockerfile.test --target web-full --tag remora-web-check:local .
$(CONTAINER_ENGINE) run --rm $(CONTAINER_RUN_FLAGS) remora-web-check:local
check-fast-host: rust-check web-check web-test-fast
check-fast-host: check-pins rust-check web-check web-test-fast
check-full-host: rust-check web-check web-test-full
check-full-host: check-pins rust-check web-check web-test-full
check-dependencies:
check-dependencies: check-pins
./tests/kind/fixture/run.sh
check-fixture-lib:
@ -97,11 +104,11 @@ check-live-events:
check-worker:
./tests/kind/worker/run.sh
check-stream:
check-stream: check-pins
cargo fmt --all --check
cargo clippy --package remora-stream --all-targets --all-features -- -D warnings
cargo nextest run --package remora-stream --all-features
cargo test --package remora-stream --doc
cargo clippy --locked --package remora-stream --all-targets --all-features -- -D warnings
cargo nextest run --locked --package remora-stream --all-features
cargo test --locked --package remora-stream --doc
check-target:
./tests/kind/target/run.sh
@ -124,7 +131,7 @@ check-object-source:
check-hf-source:
./tests/kind/hf-source/run.sh
check-deployment:
check-deployment: check-pins
./tests/kind/deployment/run.sh
check-requirements: