fix: bound conditional evidence waivers

This commit is contained in:
Joseph Magly
2026-08-15 02:00:50 -04:00
parent ba749c68b9
commit fa99d5a424
3 changed files with 77 additions and 12 deletions
+8
View File
@@ -43,6 +43,10 @@ on:
description: OBLITERATUS issue URL approving older software conditional evidence
type: string
default: ""
stale_evidence_expires:
description: ISO date when the stale-evidence waiver expires (maximum 30 days)
type: string
default: ""
schedule:
- cron: "17 6 * * 0"
release:
@@ -57,6 +61,7 @@ concurrency:
env:
CONDITIONAL_CANDIDATE_SHA: ${{ github.event.inputs.candidate_sha || github.sha }}
CONDITIONAL_STALE_EVIDENCE_EXPIRES: ${{ github.event.inputs.stale_evidence_expires || '' }}
CONDITIONAL_STALE_EVIDENCE_ISSUE: ${{ github.event.inputs.stale_evidence_issue || '' }}
CONDITIONAL_STALE_EVIDENCE_REASON: ${{ github.event.inputs.stale_evidence_reason || '' }}
PIP_DISABLE_PIP_VERSION_CHECK: "1"
@@ -119,6 +124,7 @@ jobs:
--require-gate external-evaluation
--stale-evidence-reason "$CONDITIONAL_STALE_EVIDENCE_REASON"
--stale-evidence-issue "$CONDITIONAL_STALE_EVIDENCE_ISSUE"
--stale-evidence-expires "$CONDITIONAL_STALE_EVIDENCE_EXPIRES"
- name: Upload model-runtime evidence
if: always()
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
@@ -160,6 +166,7 @@ jobs:
--require-gate network-services
--stale-evidence-reason "$CONDITIONAL_STALE_EVIDENCE_REASON"
--stale-evidence-issue "$CONDITIONAL_STALE_EVIDENCE_ISSUE"
--stale-evidence-expires "$CONDITIONAL_STALE_EVIDENCE_EXPIRES"
- name: Upload network evidence
if: always()
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
@@ -201,6 +208,7 @@ jobs:
--require-gate operator-ui
--stale-evidence-reason "$CONDITIONAL_STALE_EVIDENCE_REASON"
--stale-evidence-issue "$CONDITIONAL_STALE_EVIDENCE_ISSUE"
--stale-evidence-expires "$CONDITIONAL_STALE_EVIDENCE_EXPIRES"
- name: Upload UI evidence
if: always()
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1