Bind installed releases to signed artifact receipts

2026-07-22 20:42:05 +02:00
parent 4dc0c8d013
commit 9c0650b2ed
13 changed files with 2179 additions and 52 deletions
--- a/tests/test_capability_fit_review.py
+++ b/tests/test_capability_fit_review.py
@@ -606,6 +606,7 @@ def signed_catalog(
    sequence: int = 202607220843,
    selected_units: list[dict[str, object]] | None = None,
    include_selected_units: bool = True,
+    release_artifacts: list[dict[str, object]] | None = None,
 ) -> tuple[dict[str, object], dict[str, object]]:
    versions = versions or {}
    private_key = Ed25519PrivateKey.generate()
@@ -661,6 +662,8 @@ def signed_catalog(
    release: dict[str, object] = {"keyring_sha256": canonical_hash(keyring)}
    if include_selected_units:
        release["selected_units"] = selected_units
+    if release_artifacts is not None:
+        release["artifacts"] = release_artifacts
    catalog: dict[str, object] = {
        "catalog_version": "1",
        "channel": "stable",