noel/act-node-docker
Watch
1
0
Fork
You've already forked act-node-docker
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

fix: preserve sealed scanner transitions #15

Merged
noel merged 1 commit from fix/supplychain-transition-14 into main 2026-08-30 12:45:01 +00:00
Conversation 0 Commits 1 Files changed 4 +42 -2
noel commented 2026-08-30 12:43:53 +00:00
Owner

Fixes #14.

The protected-base source-approval workflow must be able to request its still-trusted scanner during a pin rotation. This seals the current scanner and one explicit compatibility scanner in the immutable image, dispatches only to an exact 40-character revision already present under the read-only libexec directory, and fails closed for every unknown revision.

Checks:

  • ./test-system-hz-hermetic.sh
  • shellcheck -S warning supplychain-hermetic test-system-hz-hermetic.sh
  • git diff --check
Fixes #14. The protected-base source-approval workflow must be able to request its still-trusted scanner during a pin rotation. This seals the current scanner and one explicit compatibility scanner in the immutable image, dispatches only to an exact 40-character revision already present under the read-only libexec directory, and fails closed for every unknown revision. Checks: - `./test-system-hz-hermetic.sh` - `shellcheck -S warning supplychain-hermetic test-system-hz-hermetic.sh` - `git diff --check`
noel merged commit ee97eeb2f6 into main 2026-08-30 12:45:01 +00:00
noel deleted branch fix/supplychain-transition-14 2026-08-30 12:45:01 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
noel/act-node-docker!15
No description provided.