fix: require exact main release branch for imgproxy
This commit is contained in:
@@ -25,4 +25,6 @@ test('release verifies checksums before loading the image and backs up launch st
|
|||||||
assert.match(release, /docker load/);
|
assert.match(release, /docker load/);
|
||||||
assert.match(release, /imgproxy-compat-\$RELEASE_ID\.plist/);
|
assert.match(release, /imgproxy-compat-\$RELEASE_ID\.plist/);
|
||||||
assert.match(release, /img\.tkmind\.cn\/health/);
|
assert.match(release, /img\.tkmind\.cn\/health/);
|
||||||
|
assert.match(release, /release\/\*/);
|
||||||
|
assert.match(release, /rev-parse origin\/main/);
|
||||||
});
|
});
|
||||||
|
|||||||
@@ -13,9 +13,10 @@ TMP="$(mktemp -d "${TMPDIR:-/tmp}/imgproxy-runtime-release.XXXXXX")"
|
|||||||
cleanup() { rm -rf "$TMP"; }
|
cleanup() { rm -rf "$TMP"; }
|
||||||
trap cleanup EXIT
|
trap cleanup EXIT
|
||||||
|
|
||||||
[[ "$(git -C "$ROOT" branch --show-current)" == "main" ]] || { echo 'imgproxy production release must run from main' >&2; exit 1; }
|
|
||||||
[[ -z "$(git -C "$ROOT" status --porcelain)" ]] || { echo 'worktree must be clean' >&2; exit 1; }
|
|
||||||
git -C "$ROOT" fetch origin main --quiet
|
git -C "$ROOT" fetch origin main --quiet
|
||||||
|
branch="$(git -C "$ROOT" branch --show-current)"
|
||||||
|
[[ "$branch" == release/* ]] || { echo 'imgproxy production release must run from a release/* branch' >&2; exit 1; }
|
||||||
|
[[ -z "$(git -C "$ROOT" status --porcelain)" ]] || { echo 'worktree must be clean' >&2; exit 1; }
|
||||||
[[ "$(git -C "$ROOT" rev-parse HEAD)" == "$(git -C "$ROOT" rev-parse origin/main)" ]] || { echo 'main must match origin/main' >&2; exit 1; }
|
[[ "$(git -C "$ROOT" rev-parse HEAD)" == "$(git -C "$ROOT" rev-parse origin/main)" ]] || { echo 'main must match origin/main' >&2; exit 1; }
|
||||||
bash "$ROOT/scripts/check-release-ready.sh"
|
bash "$ROOT/scripts/check-release-ready.sh"
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user