Keep vault roots off ./data/dev and reject unknown types or sensitive payloads before staging. Co-authored-by: Cursor <cursoragent@cursor.com>
10 lines
376 B
Bash
Executable File
10 lines
376 B
Bash
Executable File
#!/usr/bin/env bash
|
|
# Fail-closed FAV coverage / destroy preflight. Does not start env-service.
|
|
set -euo pipefail
|
|
DSN="${APP_DB_DSN:-${TEST_DATABASE_URL:-}}"
|
|
if [[ -z "$DSN" ]]; then
|
|
echo "APP_DB_DSN or TEST_DATABASE_URL required" >&2
|
|
exit 2
|
|
fi
|
|
exec go run ./cmd/artifact-vault gc-preflight --dsn "$DSN" --backup-ok="${BACKUP_OK:-false}" --corpus-ok="${CORPUS_OK:-false}"
|