ci: publish verified evidence packs from Gitea runs

2026-07-18 00:18:36 +07:00
parent 407d373b4e
commit 92c20e304c
2 changed files with 18 additions and 0 deletions
@@ -35,3 +35,20 @@ jobs:
      - name: Run CASAN harness gate
        working-directory: .
        run: bash packages/casan-harness/scripts/bash/ci-harness-gate.sh
+
+      - name: Build and verify Evidence Pack for this CI run
+        if: always()
+        working-directory: .
+        run: |
+          set -euo pipefail
+          RUN_ID="gitea-${GITHUB_RUN_ID:-local}-${GITHUB_SHA:-$(git rev-parse --short HEAD)}"
+          bash packages/casan-harness/scripts/bash/evidence-pack.sh pack "$RUN_ID"
+          bash packages/casan-harness/scripts/bash/evidence-pack.sh verify-pack "$RUN_ID"
+
+      - name: Publish Evidence Pack
+        if: always()
+        uses: actions/upload-artifact@v3
+        with:
+          name: casan-evidence-pack-${{ github.run_id }}
+          path: docs/output/casan/evidence-packs/
+          retention-days: 90