explewd/trace
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Document cross-project receipt integration
All checks were successful
Docker / test-build-push (push) Successful in 37s
Details

Browse Source
This commit is contained in:
Fredrik Johansson
2026-07-20 22:03:37 +02:00
parent 825cd4bb74
commit baff962ba0
2 changed files with 274 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
README.md
View File

@@ -11,6 +11,8 @@ Node 24+, no runtime dependencies. Uses built-in `node:sqlite`. Set `TRACE_PASSW
Git candidate scanning is optional and disabled by default. If an installation deliberately mounts read-only repository mirrors, list their container paths in `TRACE_REPOS`; production receipt ingestion does not require repository access.
Producer onboarding, shared-runner examples, deployment-host responsibilities, and verification are documented in [`docs/INTEGRATING_PROJECTS.md`](docs/INTEGRATING_PROJECTS.md).
## Deployment receipts v1
`POST /api/v1/events` accepts versioned build/deployment receipts using a project-scoped bearer token configured as `TRACE_RECEIPT_TOKENS=goonk:token,retur:other-token`. Event IDs are idempotent. `GET /api/v1/public/projects/:project/latest` returns an explicit allowlisted projection; raw payloads remain private.