bastion agent 0.1.15

2026-10-21 23:39:21 +00:00
parent 3f1d48bf9b
commit 53094a6940
5 changed files with 563 additions and 2 deletions
@@ -49,6 +49,23 @@ jobs:
              python -m unittest discover .'
          done

+  personal-data:
+    runs-on: platform
+    steps:
+      - name: fetch the commit
+        run: |
+          set -euo pipefail
+          git init -q .
+          git -c http.extraHeader="Authorization: token ${{ gitea.token }}" \
+            fetch -q --depth=1 "${{ gitea.server_url }}/${{ gitea.repository }}.git" "$WANT"
+          git checkout -q --detach FETCH_HEAD
+          test "$(git rev-parse HEAD)" = "$WANT"
+      - name: no person's data in the tree
+        # Reads files, runs nothing from the tree. The term check needs the
+        # maintainers' key, which a CI job never holds, so here it is skipped and
+        # the run says so; the entity-id, provenance, email and phone checks run.
+        run: python3 scripts/test_no_personal_data.py
+
  reproducible:
    needs: test
    runs-on: platform