Closed Bug 1743238 Opened 1 year ago Closed 9 months ago

Verify Updatebot cannot handle the windows jobs

Categories

(Developer Infrastructure :: Mach Vendor & Updatebot, defect)

x86_64
Linux
defect

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: tjr, Assigned: tjr)

References

Details

(Keywords: sec-other)

Attachments

(1 file)

The verify updatebot job is intended to provide a check; on autoland, that Updatebot commits aren't backdoored by re-running the ./mach vendor command and ensuring that the commit produced matches the one submitted. It's not a foolproof system, but we wanted a little bit of belt-and-suspenders.

This will not work as-is for the Windows-based angle commits because the verify job is on Linux.

Group: core-security → firefox-core-security
Keywords: sec-other
Group: firefox-core-security → core-security-release
Group: core-security-release
You need to log in before you can comment on or make changes to this bug.