shadowdaoandClaude Sonnet 5.5 8a6a6d7b44 ci: multi-arch-safe php.net guard and emergency workflow (no platform change) ...

- scripts/image-label-amd64.sh: index-safe read of the amd64 image's labels
  (OCI index with attestations, Docker manifest list, single manifest).
- scripts/php-emergency-guard.sh: used by both build-push.yaml guard sites;
  same decisions as the old inline step on single-platform images, but FAILS
  CLOSED when the labels cannot be read (only "tag not found" passes).
- lsphp-source-emergency.yaml: push by digest + assemble (copy of HMB
  assemble-multiarch-index.sh); optional arm64; refuses to replace a
  multi-arch production tag with amd64-only unless allow_amd64_only.
- Tests wired into Shell-Checks; main build matrix platforms unchanged.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0185ukXjXyosSkunDsdWz3mb

2026-11-11 17:22:24 -08:00

..

image-label-amd64.test.sh

ci: multi-arch-safe php.net guard and emergency workflow (no platform change)

2026-11-11 17:22:24 -08:00

index-platforms.test.sh

ci: multi-arch-safe php.net guard and emergency workflow (no platform change)

2026-11-11 17:22:24 -08:00

lsphp-abi-gate.test.sh

feat(lsphp): emergency build path compiling lsphp from php.net source

2026-10-21 09:46:22 -07:00

lsphp-info-probe.test.sh

fix(lsphp): correct the SIGPIPE explanation, drop the temp-dir boot precondition, close two scanner blind spots

2026-08-05 16:03:08 -07:00

lsphp-repo-version.test.sh

build: arch-aware mariadb.repo and lsphp index lookup (amd64 unchanged)

2026-11-11 17:01:34 -08:00