Route git push and gh pr through the sandbox supervisor broker so project computers never receive GITHUB_TOKEN/GH_TOKEN. Remove NOPASSWD sudo from the computer image. Localize awareness strip copy via Lingui and wire computer-image-tools.test.sh into the validate-computer-image job. Co-authored-by: cynarAI <cynarAI@users.noreply.github.com>
13 lines
445 B
Bash
Executable File
13 lines
445 B
Bash
Executable File
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
IMAGE="${RAKAZO_COMPUTER_IMAGE:-rakazo/computer:local}"
|
|
|
|
for tool in git gh ssh curl; do
|
|
docker run --rm "$IMAGE" bash -lc "command -v $tool >/dev/null"
|
|
done
|
|
|
|
docker run --rm "$IMAGE" bash -lc 'git --version | grep -q "^git version "'
|
|
docker run --rm "$IMAGE" bash -lc 'gh --version | grep -q "^gh version "'
|
|
docker run --rm "$IMAGE" bash -lc 'test "$(command -v git)" = "/usr/local/lib/rakazo/bin/git"'
|