Skip to content

M11.5a: fix post-release digest resolution - #6

Merged
pgousdal merged 1 commit into
mainfrom
work/m11.5a-post-release-audit-fix
Sep 5, 2026
Merged

pgousdal merged 1 commit into
mainfrom
work/m11.5a-post-release-audit-fix

Conversation

@pgousdal

@pgousdal pgousdal commented Sep 5, 2026

Copy link
Copy Markdown
Contributor

Fix the first real v0.2.0 post-release audit failure.

The Release workflow itself completed successfully, but Post-release audit #1 failed while resolving the published manifest digest with docker buildx imagetools inspect (exit 255).

This patch keeps the audit fail-closed while replacing that lookup with:

  • docker manifest inspect for amd64/arm64 manifest coverage
  • docker pull --platform linux/amd64 + RepoDigests for the immutable top-level digest
  • explicit sha256 shape/length validation before exact-digest runtime qualification

After merge, re-run Post-release audit manually against the already-published immutable v0.2.0 release.

@pgousdal
pgousdal merged commit b90da60 into main Sep 5, 2026
2 checks passed
@pgousdal
pgousdal deleted the work/m11.5a-post-release-audit-fix branch September 5, 2026 18:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant