blp/railwaysystem
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: 收口融合 QA 构建与验收安全基线

Browse Source
This commit is contained in:
wangzhibiao committed 2026-10-14 11:32:31 +08:00
1 parent 47bc6604e5
commit 5560a3ac04
28 files changed
+22947 -352
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

scripts/bootstrap/check-kingbase-jdbc.sh
+5 -5
View File
@@ -1,8 +1,8 @@
#!/usr/bin/env bash
set -euo pipefail
readonly EXPECTED_SHA256="346d5602477ed472b19c5e25729fff5a58b1d83cec56162a56ac4b86d9546c32"
readonly INSTALLED_JAR="${HOME}/.m2/repository/com/kingbase/kingbase8/8.6.0/kingbase8-8.6.0.jar"
readonly EXPECTED_SHA256="e439bd1c48ce654748c4f333b874a61465702ceb18f29ee017c3f9bc47738c23"
readonly INSTALLED_JAR="${HOME}/.m2/repository/cn/com/kingbase/kingbase8/9.0.0/kingbase8-9.0.0.jar"
sha256_file() {
if command -v sha256sum >/dev/null 2>&1; then
@@ -16,7 +16,7 @@ sha256_file() {
}
if [[ ! -f "${INSTALLED_JAR}" ]]; then
echo "Kingbase JDBC 8.6.0 is not provisioned." >&2
echo "Kingbase JDBC 9.0.0 is not provisioned." >&2
echo "Run scripts/bootstrap/install-kingbase-jdbc.sh" >&2
echo "with KINGBASE_JDBC_JAR pointing to the authorized vendor driver." >&2
exit 1
@@ -24,8 +24,8 @@ fi
installed_sha256="$(sha256_file "${INSTALLED_JAR}")"
if [[ "${installed_sha256}" != "${EXPECTED_SHA256}" ]]; then
echo "Kingbase JDBC 8.6.0 checksum mismatch." >&2
echo "Kingbase JDBC 9.0.0 checksum mismatch." >&2
exit 1
fi
echo "Kingbase JDBC 8.6.0 preflight PASS."
echo "Kingbase JDBC 9.0.0 preflight PASS."
scripts/bootstrap/install-kingbase-jdbc.sh
+10 -10
View File
@@ -1,9 +1,9 @@
#!/usr/bin/env bash
set -euo pipefail
readonly EXPECTED_SHA256="346d5602477ed472b19c5e25729fff5a58b1d83cec56162a56ac4b86d9546c32"
readonly EXPECTED_SHA256="e439bd1c48ce654748c4f333b874a61465702ceb18f29ee017c3f9bc47738c23"
readonly MAVEN_REPOSITORY="${HOME}/.m2/repository"
readonly INSTALLED_JAR="${MAVEN_REPOSITORY}/com/kingbase/kingbase8/8.6.0/kingbase8-8.6.0.jar"
readonly INSTALLED_JAR="${MAVEN_REPOSITORY}/cn/com/kingbase/kingbase8/9.0.0/kingbase8-9.0.0.jar"
sha256_file() {
if command -v sha256sum >/dev/null 2>&1; then
@@ -18,7 +18,7 @@ sha256_file() {
if [[ -z "${KINGBASE_JDBC_JAR:-}" ]]; then
echo "KINGBASE_JDBC_JAR is not set." >&2
echo "Set it to the absolute path of the authorized Kingbase JDBC 8.6.0 vendor driver." >&2
echo "Set it to the absolute path of the authorized Kingbase JDBC 9.0.0 vendor driver." >&2
exit 1
fi
@@ -29,28 +29,28 @@ fi
source_sha256="$(sha256_file "${KINGBASE_JDBC_JAR}")"
if [[ "${source_sha256}" != "${EXPECTED_SHA256}" ]]; then
echo "Kingbase JDBC 8.6.0 source checksum mismatch." >&2
echo "Kingbase JDBC 9.0.0 source checksum mismatch." >&2
exit 1
fi
mvn install:install-file \
mvn org.apache.maven.plugins:maven-install-plugin:3.1.2:install-file \
-Dfile="${KINGBASE_JDBC_JAR}" \
-DgroupId=com.kingbase \
-DgroupId=cn.com.kingbase \
-DartifactId=kingbase8 \
-Dversion=8.6.0 \
-Dversion=9.0.0 \
-Dpackaging=jar \
-DgeneratePom=true \
-Dmaven.repo.local="${MAVEN_REPOSITORY}"
if [[ ! -f "${INSTALLED_JAR}" ]]; then
echo "Kingbase JDBC 8.6.0 installation failed: local Maven artifact is missing." >&2
echo "Kingbase JDBC 9.0.0 installation failed: local Maven artifact is missing." >&2
exit 1
fi
installed_sha256="$(sha256_file "${INSTALLED_JAR}")"
if [[ "${installed_sha256}" != "${EXPECTED_SHA256}" ]]; then
echo "Kingbase JDBC 8.6.0 installed artifact checksum mismatch." >&2
echo "Kingbase JDBC 9.0.0 installed artifact checksum mismatch." >&2
exit 1
fi
echo "Kingbase JDBC 8.6.0 provisioning PASS."
echo "Kingbase JDBC 9.0.0 provisioning PASS."