ci: enforce digest-only dev releases
Some checks failed
State Corp Backend CI/CD / Quality gate (push) Successful in 3m32s
State Corp Backend CI/CD / Build linux/amd64 images once (push) Successful in 3m6s
State Corp Backend CI/CD / Refresh and release internal main (push) Has been skipped
State Corp Backend CI/CD / Release dev (push) Failing after 2s
State Corp Backend CI/CD / Release customer main (push) Has been skipped

This commit is contained in:
2026-08-27 13:57:27 +03:00
parent 9194ff3d0d
commit e060c36b6d
3 changed files with 40 additions and 1 deletions

View File

@@ -67,7 +67,7 @@ require_safe_value \
"RELEASE_SERVICE_PATH" "${release_service_path}" '^/[A-Za-z0-9._/-]+$'
case "${release_service_path}" in
/opt/ecos-dev/release-service)
image_ref_pattern='^[A-Za-z0-9._:/-]+:dev-[a-f0-9]{7,40}$'
image_ref_pattern='^[A-Za-z0-9._:/-]+@sha256:[a-f0-9]{64}$'
[[ "${refresh_data}" == false ]] || fail "dev releases cannot refresh data"
;;
/opt/ecos-main/release-service)