Supply exact private platform source to sealed checks without private evaluator egress

2026-10-11 16:07:52 -07:00
parent fa698dd306
commit 0f41b12ca0
4 changed files with 44 additions and 4 deletions
@@ -6,5 +6,13 @@ const [repository, commit, log, workspaceId] = process.argv.slice(2);
 if (!repository || !commit || !log || !workspaceId || process.argv.length !== 6)
  throw Error("source-check-driver REPOSITORY COMMIT LOG WORKSPACE_ID");
 process.stdout.write(
-  (await buildImmutableCandidate({ repository, commit }, "workspace", log, false, undefined, workspaceId)) + "\n",
+  (await buildImmutableCandidate(
+    { repository, commit },
+    "workspace",
+    log,
+    false,
+    undefined,
+    workspaceId,
+    process.env.QUIXOS_CHECK_PLATFORM_SOURCE ? JSON.parse(process.env.QUIXOS_CHECK_PLATFORM_SOURCE) : undefined,
+  )) + "\n",
 );