feat: enforce pinned image digest for madengine run - #178

Open

coketaste wants to merge 16 commits into

mainfrom

coketaste/pulled-image-sha

Commits on Aug 12, 2026

fix(run_orchestrator): preserve multiple_results in local-image manifest (#166)

coketaste
and
claude
authored
4b739b6
feat(auth): reuse existing docker login (OAT) instead of requiring credential.json (#168)

coketaste
and
claude
authored
0173326

Commits on Aug 18, 2026

fix(slurm): make the generated job script portable across clusters (#163)

authored
c5b016f

Commits on Aug 20, 2026

docs: rewrite README as concise landing page and add architecture diagrams (#161)

coketaste
and
claude
authored
4f281ef

Commits on Aug 27, 2026

docs: add design spec for pinned image digest enforcement
coketaste
committed
438618a
docs: add implementation plan for pinned image digest enforcement

coketaste
and
claude
committed
d9c4ad3

Commits on Aug 28, 2026

feat(image-digest): add digest parsing, pinned reference, and enforcement helpers

coketaste
and
claude
committed
46f2edd
feat(build): capture pushed image digest during docker push

coketaste
and
claude
committed
fc789f5
feat(build): record image_digest in build manifest entries

coketaste
and
claude
committed
7be8aaf
feat(run): add --require-pinned-image flag and context propagation

coketaste
and
claude
committed
b424b05
feat(run): pin local docker pulls to manifest digest when required

coketaste
and
claude
committed
f7bb2a6
feat(k8s): pin pod image to manifest digest when required

coketaste
and
claude
committed
3e8f1a5
feat(slurm): pin slurm_multi image to manifest digest when required

coketaste
and
claude
committed
dc0ad91
test(execution): cover log naming for digest-pinned image references

coketaste
and
claude
committed
be6a2d4
docs: document --require-pinned-image and image digest capture

coketaste
and
claude
committed
102c216
fix(run): enforce pinned digest on build-on-compute-node manifests

coketaste
and
claude
committed
0455477