Skip to content

infra: Add TOCTOU push detection to test-os-variants workflow - #1745

Merged
rvykydal merged 1 commit into
rhinstaller:mainfrom
rvykydal:PSIRTSUPT-21694
Sep 4, 2026
Merged

rvykydal merged 1 commit into
rhinstaller:mainfrom
rvykydal:PSIRTSUPT-21694

Conversation

@rvykydal

@rvykydal rvykydal commented Sep 2, 2026

Copy link
Copy Markdown
Contributor

Use the Check Suites API to verify the PR head commit was pushed before the /test-os-variants trigger comment. Enabled by default, can be skipped with --skip-timestamps-check.

The same patch has been already applied to anaconda repository workflow https://github.com/rhinstaller/anaconda/blob/main/.github/workflows/kickstart-tests.yml

Use the Check Suites API to verify the PR head commit was pushed
before the /test-os-variants trigger comment. Enabled by default,
can be skipped with --skip-timestamps-check.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@rvykydal
rvykydal marked this pull request as ready for review September 2, 2026 09:43
Comment thread .github/workflows/test-os-variants.yml
@rvykydal
rvykydal merged commit 0e64c1b into rhinstaller:main Sep 4, 2026
3 checks passed
@rvykydal

rvykydal commented Sep 4, 2026

Copy link
Copy Markdown
Contributor Author

Tested by #1748

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants