mirror of
https://github.com/morluto/rea.git
synced 2026-10-31 11:56:12 +00:00
N0zoM1z0
0b3551076d
Add a hosted Windows x64 lane for named host capabilities, portable provider tests, and packed CLI/MCP verification. Add a default-branch-only repository-dispatch workflow for a controlled self-hosted Ghidra 12.1.2 runner, backed by a deterministic source-owned native PE fixture and a verifier that exercises all 18 admitted operations, target digest linkage, authenticated loopback transport, and complete runtime cleanup.
28 lines
1.1 KiB
TypeScript
28 lines
1.1 KiB
TypeScript
import { readFile } from "node:fs/promises";
|
|
|
|
import { describe, expect, it } from "vitest";
|
|
|
|
describe("real Windows Ghidra workflow trust boundary", () => {
|
|
it("runs only default-branch code on the fixed self-hosted environment", async () => {
|
|
const workflow = await readFile(
|
|
new URL("../.github/workflows/real-ghidra-windows.yml", import.meta.url),
|
|
"utf8",
|
|
);
|
|
|
|
expect(workflow).toContain("types: [real-ghidra-windows]");
|
|
expect(workflow).not.toContain("workflow_dispatch:");
|
|
expect(workflow).toContain("contents: read");
|
|
expect(workflow).toContain("if: github.ref == 'refs/heads/main'");
|
|
expect(workflow).toContain("environment: real-ghidra-windows");
|
|
expect(workflow).toContain(
|
|
"runs-on: [self-hosted, Windows, x64, ghidra-12-1-2]",
|
|
);
|
|
expect(workflow).not.toMatch(
|
|
/\$\{\{\s*(?:inputs|github\.event\.(?:inputs|client_payload))\b/u,
|
|
);
|
|
expect(workflow).not.toContain("cache: npm");
|
|
expect(workflow).toContain("npm run verify:ghidra:windows");
|
|
expect(workflow).toContain("windows-ghidra-proof.log");
|
|
});
|
|
});
|