HH-443: establish production CI and supply-chain evidence (#93)

* ci: enforce production release gates * ci: close release gate review blockers * ci: preserve verified digests during promotion * ci: serialize and verify release cleanup * ci: build govulncheck with Shangwutong toolchain --------- Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-22 03:26:38 +08:00
parent 798ea43c2f
commit 02a188dc29
17 changed files with 483 additions and 89 deletions
@@ -91,7 +91,7 @@ services:
    volumes:
      - gochat_storage:/app/storage
    healthcheck:
-      test: ["CMD", "curl", "-fsS", "http://127.0.0.1:3000/ready"]
+      test: ["CMD", "wget", "-q", "-T", "3", "-O", "/dev/null", "http://127.0.0.1:3000/ready"]
      interval: 10s
      timeout: 5s
      start_period: 15s