Closed
Bug 1743238
Opened 3 years ago
Closed 3 years ago
Verify Updatebot cannot handle the windows jobs
Categories
(Developer Infrastructure :: Mach Vendor & Updatebot, defect)
Tracking
(Not tracked)
RESOLVED
FIXED
People
(Reporter: tjr, Assigned: tjr)
References
Details
(Keywords: sec-other)
Attachments
(1 file)
The verify updatebot job is intended to provide a check; on autoland, that Updatebot commits aren't backdoored by re-running the ./mach vendor command and ensuring that the commit produced matches the one submitted. It's not a foolproof system, but we wanted a little bit of belt-and-suspenders.
This will not work as-is for the Windows-based angle commits because the verify job is on Linux.
|
Assignee | |
Comment 1•3 years ago
|
||
|
||
Comment 2•3 years ago
•
|
||
Do not verify angle updates for now r=jewilde
https://hg.mozilla.org/integration/autoland/rev/8815c8183c16d457bcdb56c79d0217d3b9c22cdc
https://hg.mozilla.org/mozilla-central/rev/8815c8183c16
lint fix. a=fix
https://hg.mozilla.org/integration/autoland/rev/37cb9fec28f8b6602d9c21ca8b1fc86c4556be9f
https://hg.mozilla.org/mozilla-central/rev/37cb9fec28f8
Status: NEW → RESOLVED
Closed: 3 years ago
Resolution: --- → FIXED
|
||
Updated•3 years ago
|
Group: firefox-core-security → core-security-release
|
|
||
Updated•2 years ago
|
Group: core-security-release
You need to log in
before you can comment on or make changes to this bug.
Description
•