Skip to main content

OSS Inventory

OSS Inventory and Version Truth

jhf-selvage is a consumer of Fabric-owned OSS upgrade truth and publishes one repo-owned readback page for upgrade-relevant CI and migration-target surfaces.

Scope​

  • CI runner and toolchain declarations from .gitea/workflows/ci.yml
  • repo verifier contract from scripts/verify_oss_version_truth.py
  • Fabric OSS upgrade contracts from JaddaHelpifyr/helpifyr-fabric

Canonical Fabric Source of Truth​

This repository does not own central OSS-upgrade governance truth. It consumes these upstream contracts fail-closed:

  • contracts/platform/platform_version_truth.json
  • contracts/platform/platform_projection_catalog.json
  • contracts/platform/platform_oss_upgrade_governance_v1.json
  • contracts/platform/platform_oss_upgrade_compatibility_matrix_v1.json
  • contracts/platform/platform_oss_upgrade_evidence_contract_v1.json
  • contracts/platform/helpifyr_stack_module_identity_v1.json
  • contracts/platform/stack_tool_oss_inventory_directory.json
  • docs/contracts/HELPIFYR_PLATFORM_OSS_UPGRADE_GOVERNANCE.md
  • docs/contracts/HELPIFYR_STACK_MODULE_IDENTITY.md
  • docs/contracts/HELPIFYR_STACK_TOOL_OSS_INVENTORY_DIRECTORY.md

Consumer verifier:

  • python scripts/verify_fabric_oss_upgrade_consumer.py

Current Version Truth​

Component keyTruth surfaceCurrent valuePinning mode
ci.runner_os.gitea/workflows/ci.ymlubuntu-22.04stable_track
ci.python.gitea/workflows/ci.ymlsystem python3 (ubuntu-22.04 image)runner_image_contract
ci.action_checkout.gitea/workflows/ci.ymlactions/checkout@v4major_tag

No repo-owned runtime image baseline is tracked while deployment.kind remains admission-preparation-only.

Policy​

  • no latest tag in runtime images
  • no latest runner declaration in CI
  • no empty image tags
  • no undocumented drift between this doc and repo version surfaces

Verify Path​

python scripts/verify_oss_version_truth.py
python scripts/verify_fabric_oss_upgrade_consumer.py
python -m pytest -q

CI runs both OSS verifiers fail-closed:

  • python scripts/verify_oss_version_truth.py
  • python scripts/verify_fabric_oss_upgrade_consumer.py

Exceptions​

No owner-approved exception for latest exists in this repository.

License: AGPLv3. Helpifyr: https://helpifyr.com