Scriptworker

Latest version: v60.5.0

Safety actively analyzes 683530 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 30 of 37

5.1.5

--------------------

.. _added-54:

Added
~~~~~

- added maple to the list of privileged branches.

.. _changed-45:

Changed
~~~~~~~

- changed the default ``poll_interval`` to 10.

.. _fixed-42:

Fixed
~~~~~

- updated post-task sleep to 1; we only sleep ``poll_interval`` only
between polls.

.. _removed-20:

Removed
~~~~~~~

- removed date from the list of privileged branches.

.. _section-92:

5.1.4

--------------------

.. _fixed-43:

Fixed
~~~~~

- no longer add a decision task’s decision task to the chain of trust
to verify. This was a regression.

.. _removed-21:

Removed
~~~~~~~

- cleaned up aurora references from everything but pushapk, which uses
it.

.. _section-93:

5.1.3

--------------------

.. _fixed-44:

Fixed
~~~~~

- specify the correct docker shas for the new docker images.

.. _section-94:

5.1.2

--------------------

.. _fixed-45:

Fixed
~~~~~

- fixed new false error raised on missing command in payload

.. _section-95:

5.1.1

--------------------

.. _fixed-46:

Fixed
~~~~~

- updated cot verification to allow for the new docker-image and
decision paths (/home/worker -> /builds/worker)

.. _section-96:

5.1.0

--------------------

.. _added-55:

Added
~~~~~

- added ``DECISION_MACH_COMMANDS`` to ``cot.verify``, to support action
task verification
- added ``DECISION_TASK_TYPES`` to ``cot.verify``, to support verifying
decision tasks via ``verify_cot``
- added ``ChainOfTrust.is_decision`` to find if the chain object is a
decision task
- added ``ChainOfTrust.get_all_links_in_chain``. Previously, we ran
certain tests against all the links in the chain, and other tests
against all links + the chain object. Now, the chain itself may be a
decision task; we will add the decision task as a link in the chain,
and we no longer want to run verification tests against the chain
object.
- added new docker image shas

.. _changed-46:

Changed
~~~~~~~

- we now support testing any verifiable ``taskType`` via
``verify_cot``! Previously, only scriptworker task types were
verifiable via the commandline tool.
- we now support testing action task commandlines in
``verify_firefox_decision_command``
- we no longer ignore the decision task if the task-to-verify is the
decision task in ``find_sorted_task_dependencies``. We want to make
sure we verify it.
- we no longer raise a ``CoTError`` if the ``ChainOfTrust`` object is
not a scriptworker implementation

.. _fixed-47:

Fixed
~~~~~

- fixed ``partials`` task verification

.. _section-97:

Page 30 of 37

Links

Releases

Has known vulnerabilities

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.