boj-server/k9iser.toml at main · hyperpolymath/boj-server · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
# SPDX-License-Identifier: PMPL-1.0-or-later
# Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
#
# k9iser manifest for boj-server
# Bundle of Joy MCP orchestration server with cartridge-based DevOps toolkit

[project]
name = "boj-server"
safety_tier = "yard"

[[source]]
path = "package.json"
type = "deno"
output = "generated/k9iser/deno-manifest.k9"

[[source]]
path = "Justfile"
type = "justfile"
output = "generated/k9iser/justfile-recipes.k9"

[[source]]
path = "Containerfile"
type = "containerfile"
output = "generated/k9iser/container-build.k9"

[[source]]
path = ".github/workflows/hypatia-scan.yml"
type = "workflow"
output = "generated/k9iser/ci-security.k9"

[[constraint]]
rule = "container.base_image uses chainguard or distroless"
severity = "warn"

[[constraint]]
rule = "workflows includes hypatia-scan"
severity = "error"

[[constraint]]
rule = "services.boj-server.tls is enabled in production"
severity = "warn"