-
Notifications
You must be signed in to change notification settings - Fork 128
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat(STONEINTG-1078): Combine all FBC validation tasks into one #1534
base: main
Are you sure you want to change the base?
Conversation
a4ebd8d
to
64db07b
Compare
c278ac7
to
55ff684
Compare
55ff684
to
246ccc1
Compare
0cd30a4
to
01adb6b
Compare
@yashvardhannanavati @grokspawn , I cannot assign you as reviewers, but can you double check this PR? It is a big PR but the content should be largely unchanged from when it was separated into three tasks. |
approvers: | ||
- integration-team | ||
reviewers: | ||
- integration-team |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
probably doesn't matter, but do you need a newline here?
This change combines the inspect-image, fbc-validate, and fbc-related-image-check into a single task. All of the old tasks will be deprecated and the required tasks need to be updated to require only ``` - [fbc-related-image-check, validate-fbc] ``` This will ensure that users can still be guaranteed to have a valid FBC fragment and appropriate related images. The following items were deferred from this task update: * make this task multi-arch aware. * make this task fail if a bundle is an image index reference * change the related-image check to be done in EC by exporting the set of related images Signed-off-by: arewm <[email protected]>
01adb6b
to
f3b2c7f
Compare
Just ran across the gh notification now. I'll take a look. I also couldn't assign me. 😞 |
This change combines the inspect-image, fbc-validate, and fbc-related-image-check into a single task.
It depends on functionality that needs to be added to EC to parse the produced trusted artifact in order to assess whether the related images are valid.All of the old tasks will be deprecated and the required tasks need to be updated to require only
This will ensure that users can still be guaranteed to have a valid FBC fragment and appropriate related images.
EDIT: In order to merge this PR quicker, the functionality for moving the related image check was backed out. In a future PR, we can update the task to output the list of related images and have EC check them for validity.