Repository navigation
Ci/pin harvest content - #42
Merged
Merged
Conversation
With push-to-registry the attest action also writes an org-level artifact metadata storage record, which needs a permission the image job does not have and came back "no artifacts found": two warnings on every release. The record is unused, provenance is the attestation itself, so skip it rather than widen the token. The comment that blamed download-artifact for the warnings was wrong and is gone.
The two userportal extension tags fired on every userportal release, twice in three weeks, and both times nothing here had to change. Watch the facts instead: the deployed profile files by hash and the dcat fork's upstream base against the conformance requirements, resolved at whatever tag the userportal's own ckan/Dockerfile names. Replace the gdi-metadata README-phrase pin with content drift of the vendored shapes: `drift` takes a set filter and distinct exit codes, and the pins leg runs it for gdi-metadata, fatal under PINS_STRICT. A rebuilt base image is a note in the weekly job and fatal only under BASE_IMAGE_STRICT, which release and pins-strict set; image-scan already fails on a fixable CVE in the pinned base. One classify_fetch_failure beside curl_to decides gone, rate-limited or unreachable for every fetch site, so a 404 counts as drift everywhere.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.