fix template, remove okr, use casan.*

2026-07-18 16:45:31 +07:00
parent 0dfd1742d3
commit 13fae3e6c3
249 changed files with 4881 additions and 5702 deletions
@@ -0,0 +1,69 @@
+#!/usr/bin/env bash
+set -uo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+source "$SCRIPT_DIR/casan-paths.sh"
+ROOT="$CASAN_APP_ROOT"
+MANIFEST_TOOL="$SCRIPT_DIR/project_manifest.py"
+PASS=0 FAIL=0 SKIP=0
+
+manifest_args=(--root "$ROOT")
+[[ -n "${CASAN_PROJECT_MANIFEST:-}" ]] && manifest_args+=(--manifest "$CASAN_PROJECT_MANIFEST")
+[[ -n "${CASAN_PROJECT_ID:-}" ]] && manifest_args+=(--project "$CASAN_PROJECT_ID")
+
+run() {
+  local name="$1"; shift
+  echo "==> $name"
+  if "$@"; then
+    echo "PROJECT_GATE_PASS $name"; PASS=$((PASS + 1))
+  else
+    echo "PROJECT_GATE_FAIL $name" >&2; FAIL=$((FAIL + 1))
+  fi
+}
+
+run "manifest" python3 "$MANIFEST_TOOL" validate "${manifest_args[@]}"
+if [[ "$FAIL" -ne 0 ]]; then
+  echo "PROJECT_GATE_SUMMARY PASS=$PASS FAIL=$FAIL SKIP=$SKIP"
+  exit 1
+fi
+
+project_id="$(python3 "$MANIFEST_TOOL" get "${manifest_args[@]}" --field project_id)"
+requirements="$(python3 "$MANIFEST_TOOL" get "${manifest_args[@]}" --field requirements)"
+architecture="$(python3 "$MANIFEST_TOOL" get "${manifest_args[@]}" --field architecture)"
+domain_root="$(python3 "$MANIFEST_TOOL" domain-root "${manifest_args[@]}")"
+evidence_dir="$ROOT/docs/output/casan/$project_id/project-gate"
+mkdir -p "$evidence_dir"
+
+run "requirement-security" bash "$SCRIPT_DIR/artifact-scan.sh" "$ROOT/$requirements" "$project_id-requirements"
+run "architecture-security" bash "$SCRIPT_DIR/artifact-scan.sh" "$ROOT/$architecture" "$project_id-architecture"
+if [[ "${CASAN_PROJECT_GATE_RUN_CORPUS:-1}" == "1" ]]; then
+  run "corpus-quality" env CASAN_DOMAIN_ROOT="$domain_root" bash "$SCRIPT_DIR/benign-fp-report.sh" "$evidence_dir/benign-fp-report.json"
+else
+  echo "PROJECT_GATE_SKIP corpus-quality"; SKIP=$((SKIP + 1))
+fi
+run "traceability" python3 "$SCRIPT_DIR/traceability-matrix.py" \
+  --requirements "$ROOT/$requirements" \
+  --map "$domain_root/traceability-map.json" \
+  --out "$evidence_dir/traceability-matrix.json" --gate
+
+if [[ "${CASAN_PROJECT_GATE_RUN_BUILD:-1}" == "1" ]]; then
+  run "build" python3 "$MANIFEST_TOOL" run "${manifest_args[@]}" --kind build
+else
+  echo "PROJECT_GATE_SKIP build"; SKIP=$((SKIP + 1))
+fi
+if [[ "${CASAN_PROJECT_GATE_RUN_TEST:-1}" == "1" ]]; then
+  run "test" python3 "$MANIFEST_TOOL" run "${manifest_args[@]}" --kind test
+else
+  echo "PROJECT_GATE_SKIP test"; SKIP=$((SKIP + 1))
+fi
+
+python3 - "$evidence_dir/summary.json" "$project_id" "$PASS" "$FAIL" "$SKIP" <<'PY'
+import json, sys
+path, project, passed, failed, skipped = sys.argv[1:]
+with open(path, "w", encoding="utf-8") as handle:
+    json.dump({"project_id": project, "pass": int(passed), "fail": int(failed), "skip": int(skipped), "accepted": int(failed) == 0}, handle, indent=2)
+    handle.write("\n")
+PY
+
+echo "PROJECT_GATE_SUMMARY project=$project_id PASS=$PASS FAIL=$FAIL SKIP=$SKIP evidence=$evidence_dir"
+[[ "$FAIL" -eq 0 ]]