Skip to content

receipt(OMN-13762): bind infra dev-promotable receipt to promotion PR #2166 #3392

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jonahgabriel merged 2 commits into from
Jul 1, 2026
Merged

receipt(OMN-13762): bind infra dev-promotable receipt to promotion PR #2166 #3392

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
657631d
receipt(OMN-13762): bind infra dev-promotable receipt to promotion PR…
jonahgabriel Jul 1, 2026
76a7a2e
receipt(OMN-13762): self-bind dod-occ-self to OCC PR commit 657631de6…
jonahgabriel Jul 1, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
26 changes: 13 additions & 13 deletions drift/dod_receipts/OMN-13762/dod-infra-dev-promotable-to-main/command.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,23 +5,23 @@ evidence_item_id: "dod-infra-dev-promotable-to-main"
check_type: "command"
check_value: "grep -q '^status: PASS$' drift/dod_receipts/OMN-13762/dod-infra-dev-promotable-to-main/command.yaml"
status: PASS
run_timestamp: "2026-07-01T03:10:00Z"
commit_sha: "524b4c0c03420ee4572090ca40b6e230d69bdc1e"
pr_number: 2165
run_timestamp: "2026-07-01T04:20:00Z"
commit_sha: "03935a1d6fdaf0c3a53fe4999427b3ca4e098f3a"
pr_number: 2166
runner: "claude-code-wf_trivy"
verifier: "receipt-gate-local"
probe_command: "env -u GITHUB_TOKEN gh api repos/OmniNode-ai/omnibase_infra/compare/main...dev --jq '{ahead:.ahead_by,behind:.behind_by,status:.status}'"
probe_stdout: |
{"ahead":190,"behind":4,"status":"diverged"}
omnibase_infra dev remains a clean dev-to-main promotion source. Infra PR #2165
(jonah/omn-13762-trivy-npm-fix, head 524b4c0c) is the dev commit that patches npm's
bundled Node deps (cross-spawn/glob/minimatch/tar) so the runtime-image Trivy
CRITICAL/HIGH scan passes and the ECR push is no longer skipped. Once #2165 merges to
dev, the dev->main promotion PR ships a clean, real-PyPI-sourced image whose ECR push
succeeds.
{"ahead":196,"behind":5,"status":"diverged"}
omnibase_infra dev head 03935a1d includes infra PR #2165 (Trivy npm-bundled-dep fix,
merged to dev). The dev->main promotion PR #2166 (promotion/omn-13762-infra-trivy-fix,
head 03935a1d) ships dev's content verbatim; infra main is strict=false so no main
back-merge is needed. Promoting this dev makes the runtime-image Trivy CRITICAL/HIGH
scan pass on the main rebuild, unblocking the ECR push. This receipt binds to the
promotion PR #2166 by pr_number (the >100-commit promotion defeats commit_sha binding).
actual_output: >-
PASS: omnibase_infra dev is a clean dev-to-main promotion source; infra PR #2165 clears the runtime-image
Trivy scan so the promoted image can push to ECR.
PASS: omnibase_infra dev is a clean dev-to-main promotion source; promotion PR #2166 carries the Trivy-clean
runtime image so the promoted image pushes to ECR.
exit_code: 0
contract_sha256: "sha256:740bfed68594f5d8c50df7129cb8807b82276d02b3ec362c45b91e209ed79a1f"
branch: "jonah/omn-13762-trivy-npm-fix"
branch: "promotion/omn-13762-infra-trivy-fix"
10 changes: 5 additions & 5 deletions drift/dod_receipts/OMN-13762/dod-occ-self/command.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,9 +6,9 @@ check_type: "command"
check_value: "grep -q '^status: PASS$' drift/dod_receipts/OMN-13762/dod-occ-self/command.yaml"
contract_sha256: "sha256:740bfed68594f5d8c50df7129cb8807b82276d02b3ec362c45b91e209ed79a1f"
status: PASS
run_timestamp: "2026-07-01T03:12:00Z"
commit_sha: "08a73934660694d7cca132f1c1039d57ec63dc52"
branch: "jonah/omn-13762-occ-bind-infra-2165"
run_timestamp: "2026-07-01T04:22:00Z"
commit_sha: "657631de6e96afcbab1fc94cf0a1fa47e652b41d"
branch: "jonah/omn-13762-occ-bind-infra-promo-2166"
Comment thread
coderabbitai[bot] marked this conversation as resolved.
pr_number: null
runner: "claude-opus-4-8"
verifier: "receipt-gate-contract-review"
Expand All @@ -17,6 +17,6 @@ probe_stdout: |
status: PASS
evidence_item_id: "dod-occ-self"
actual_output: "PASS: OCC self-binding receipt is present for OMN-13762 (this OCC PR binds the dod-infra-dev-promotable-to-main
receipt to infra dev PR #2165 by pr_number/commit_sha)."
receipt to infra dev->main promotion PR #2166 by pr_number)."
exit_code: 0
working_dir: "/Users/jonah/Code/omni_worktrees/OMN-13762/onex_change_control_trivybind"
working_dir: "/Users/jonah/Code/omni_worktrees/OMN-13762/onex_change_control_promobind"
Loading