Validate image metadata before build

.gitea/workflows/docker-build-push.yml

@@ -31,7 +31,7 @@ jobs:
 
           for name in FRAMEWORK GPU_TYPE TASK_TYPE; do
             eval "value=\${${name}:-}"
-            if [ -z "$value" ]; then
+            if [ "$name" = "FRAMEWORK" ] && [ -z "$value" ]; then
               echo "${name} is empty in .gitea/workflows/task_info.env"
               exit 1
             fi
@@ -39,6 +39,38 @@ jobs:
             echo "${name}=${value}" >> "$GITEA_ENV"
           done
 
+      - name: Validate Image Verify Metadata
+        run: |
+          if ! response="$(curl --silent --show-error --location --get 'https://modelhub.org.cn/adminApi/image-verify/validate' \
+            --data-urlencode "gpuType=${GPU_TYPE:-}" \
+            --data-urlencode "taskType=${TASK_TYPE:-}")"; then
+            echo "failed to call image verify validate API"
+            exit 1
+          fi
+
+          VALIDATE_RESPONSE="$response" python3 - <<'PY'
+          import json
+          import os
+          import sys
+
+          raw = os.environ.get("VALIDATE_RESPONSE", "")
+          try:
+              body = json.loads(raw)
+          except json.JSONDecodeError:
+              print("image verify validate API returned invalid JSON")
+              print(raw)
+              sys.exit(1)
+
+          if body.get("code") == 0 and body.get("data") is True:
+              print("image verify metadata validation passed")
+              sys.exit(0)
+
+          message = body.get("message") or "unknown error"
+          print(f"image verify metadata validation failed: {message}")
+          print(raw)
+          sys.exit(1)
+          PY
+
       - name: Login to Docker Registry
         run: |
           echo "$DOCKER_PASSWORD" | docker login "$DOCKER_REGISTRY" \