mirror of
https://github.com/stablyai/orca.git
synced 2026-09-29 16:02:50 +00:00
Jinwoo Hong
3eec77c11a
Phase 6 of the relay split: the relay's deploy/operate surface moves under cloud/ with 24 cloud-* workflows gated on ORCA_CLOUD_OPERATIONS_ENABLED, the Cloud SQL rollout lease action, the relay Terraform root (dual-accept identities for both repositories), scripts, docs, CODEOWNERS, and a terraform validate job in Cloud Verify.
16 lines
626 B
TOML
16 lines
626 B
TOML
[extend]
|
|
useDefault = true
|
|
|
|
[[allowlists]]
|
|
description = "Explicit Relay test signing key"
|
|
regexTarget = "secret"
|
|
regexes = ['''^test-assignment-key-with-at-least-32-bytes$''']
|
|
|
|
# The Cloud SQL rollout lease records `owner/repo/run_id` as the holder of a lease. The action's
|
|
# unit tests build fixture holders from that shape, which the generic key rule reads as a secret.
|
|
[[allowlists]]
|
|
description = "Cloud SQL rollout lease holder keys in the action's unit tests"
|
|
regexTarget = "secret"
|
|
paths = ['''\.github/actions/cloud-sql-rollout-lease/[a-z-]+\.test\.mjs$''']
|
|
regexes = ['''^[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+/[0-9]+$''']
|