Publish curated ITWorx_MCP_Hub source from 3237e4d8aec312d63d13b4e80664422a7520b5f9

tests/test_release_images_workflow.py

@@ -60,9 +60,12 @@ def test_release_credentials_only_reach_the_bounded_producer() -> None:
     command = steps[1]["run"]
     assert "set -euo pipefail" in command
     assert "set -x" not in command and "docker login" not in command
-    assert 'python3 scripts/build_mcp_hub_release_images.py --revision "$GITHUB_SHA"' in command
+    assert (
+        "python3 scripts/build_mcp_hub_release_images.py --prepare-security-bases "
+        '--revision "$GITHUB_SHA"' in command
+    )
     assert '--run-id "$GITHUB_RUN_ID"' in command
-    assert '--output "${RUNNER_TEMP}/hub-release-candidate-${GITHUB_SHA}"' in command
+    assert '--output "${RUNNER_TEMP}/hub-release-security-bases-${GITHUB_SHA}"' in command
 
 
 def test_release_artifact_is_pinned_uncompressed_and_cannot_overwrite() -> None:
@@ -70,8 +73,8 @@ def test_release_artifact_is_pinned_uncompressed_and_cannot_overwrite() -> None:
     assert upload["uses"] == UPLOAD
     assert "if" not in upload
     assert upload["with"] == {
-        "name": "hub-release-candidate-${{ github.sha }}",
-        "path": "${{ runner.temp }}/hub-release-candidate-${{ github.sha }}/*",
+        "name": "hub-release-security-bases-${{ github.sha }}",
+        "path": "${{ runner.temp }}/hub-release-security-bases-${{ github.sha }}/*",
         "if-no-files-found": "error",
         "retention-days": 90,
         "compression-level": 0,