[ci] Make sealed scanner rotations transition-safe #14
Loading…
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Deploy source approval deliberately runs the protected-base workflow, so a scanner pin change cannot approve itself after the runner replaces the old binary.
codewire/deploy#84is currently stuck at this boundary.Keep candidate code non-executing. Seal the current and one explicitly supported compatibility scanner in the hermetic runner, and make the read-only wrapper select only the exact
EXPECTED_SUPPLYCHAINrevision already present under/usr/local/libexec. Unknown revisions must fail closed. Add focused contract tests. This is a transition mechanism, not permission to accept arbitrary scanners.