ai-workspace-services/portal
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: tighten release validation flow

Browse Source
This commit is contained in:
Haitao Pan 2026-04-12 16:17:50 +08:00
parent c94257e06c
commit b8cd175ecc
2 changed files with 5 additions and 24 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
.github/workflows/pipeline.yaml vendored
View File

@ -178,5 +178,4 @@ jobs:
run: |
bash scripts/github-actions/verify-frontend-release.sh \
"${PRIMARY_DOMAIN}" \
"${SECONDARY_DOMAIN}" \
"${{ needs.build.outputs.image_ref }}"
"${SECONDARY_DOMAIN}"

26
scripts/github-actions/verify-frontend-release.sh
View File

@ -3,22 +3,9 @@ set -euo pipefail
PRIMARY_DOMAIN="${1:?usage: verify-frontend-release.sh <primary-domain> <secondary-domain>}"
SECONDARY_DOMAIN="${2:?usage: verify-frontend-release.sh <primary-domain> <secondary-domain>}"
EXPECTED_IMAGE_REF="${3:?usage: verify-frontend-release.sh <primary-domain> <secondary-domain> <expected-image-ref>}"
primary_url="https://${PRIMARY_DOMAIN}"
secondary_url="https://${SECONDARY_DOMAIN}"
expected_image_tag_match="$(printf '%s' "${EXPECTED_IMAGE_REF}" | sed -nE 's#^.+:([^:@]+)$#\1#p')"
EXPECTED_IMAGE_TAG="${expected_image_tag_match}"
if [[ -z "${EXPECTED_IMAGE_TAG}" ]]; then
echo "Expected image ref must include a tag, got: ${EXPECTED_IMAGE_REF}" >&2
exit 1
fi
if [[ ! "${EXPECTED_IMAGE_TAG}" =~ ^[0-9a-f]{7,40}$ ]]; then
echo "Expected image tag must contain a commit id, got: ${EXPECTED_IMAGE_TAG}" >&2
exit 1
fi
curl -fsSIL "${primary_url}" >/dev/null
@ -62,18 +49,13 @@ if [[ -z "${actual_image_ref}" || -z "${actual_image_tag}" || -z "${actual_relea
exit 1
fi
if [[ "${actual_image_ref}" != "${EXPECTED_IMAGE_REF}" ]]; then
echo "Remote image ref mismatch: expected ${EXPECTED_IMAGE_REF}, got ${actual_image_ref}" >&2
if [[ ! "${actual_image_tag}" =~ ^[0-9a-f]{7,40}$ ]]; then
echo "Remote image tag must contain a commit id, got: ${actual_image_tag}" >&2
exit 1
fi
if [[ "${actual_image_tag}" != "${EXPECTED_IMAGE_TAG}" ]]; then
echo "Remote image tag mismatch: expected ${EXPECTED_IMAGE_TAG}, got ${actual_image_tag}" >&2
exit 1
fi
if [[ "${actual_release_commit}" != "${EXPECTED_IMAGE_TAG}" ]]; then
echo "Remote release commit mismatch: expected ${EXPECTED_IMAGE_TAG}, got ${actual_release_commit}" >&2
if [[ "${actual_release_commit}" != "${actual_image_tag}" ]]; then
echo "Remote release commit mismatch: expected ${actual_image_tag}, got ${actual_release_commit}" >&2
exit 1
fi