Skip to content

fix: don't run chain of trust tests on untrusted pull requests #765

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jcristau merged 1 commit into from
Jan 31, 2026

fix: don't run chain of trust tests on untrusted pull requests

a9ce285
Select commit
Loading
Failed to load commit list.
Merged

fix: don't run chain of trust tests on untrusted pull requests #765

fix: don't run chain of trust tests on untrusted pull requests
a9ce285
Select commit
Loading
Failed to load commit list.
firefoxci-taskcluster / Decision Task succeeded Jan 31, 2026 in 1m 35s

FirefoxCI (pull_request)

The task that creates all of the other tasks in the task graph

Details

View task in Taskcluster | View logs in Taskcluster | View task group in Taskcluster

Task Status

Started: 2026-01-31T00:56:02.605Z
Resolved: 2026-01-31T00:56:16.907Z
Task Execution Time: 14 seconds, 302 milliseconds
Task Status: completed
Reason Resolved: completed
RunId: 0

Artifacts

- public/actions.json
- public/docker-contexts/python3.11.tar.gz
- public/docker-contexts/python3.12.tar.gz
- public/docker-contexts/python3.13.tar.gz
- public/fetch-content
- public/full-task-graph.json
- public/label-to-taskid.json
- public/logs/live_backing.log
- public/logs/live.log
- public/parameters.yml
- public/runnable-jobs.json
- public/run-task
- public/target-tasks.json
- public/task-graph.json

[taskcluster 2026-01-31T00:56:02.691Z] Worker Type (scriptworker-1/decision) settings:
[taskcluster 2026-01-31T00:56:02.691Z]   {
[taskcluster 2026-01-31T00:56:02.691Z]     "config": {
[taskcluster 2026-01-31T00:56:02.691Z]       "deploymentId": ""
[taskcluster 2026-01-31T00:56:02.691Z]     },
[taskcluster 2026-01-31T00:56:02.691Z]     "generic-worker": {
[taskcluster 2026-01-31T00:56:02.691Z]       "config": {
[taskcluster 2026-01-31T00:56:02.691Z]         "headlessTasks": true
[taskcluster 2026-01-31T00:56:02.691Z]       },
[taskcluster 2026-01-31T00:56:02.691Z]       "engine": "multiuser",
[taskcluster 2026-01-31T00:56:02.691Z]       "go-arch": "amd64",
[taskcluster 2026-01-31T00:56:02.691Z]       "go-os": "linux",
[taskcluster 2026-01-31T00:56:02.691Z]       "go-version": "go1.25.5",
[taskcluster 2026-01-31T00:56:02.691Z]       "release": "https://github.com/taskcluster/taskcluster/releases/tag/v95.1.3",
[taskcluster 2026-01-31T00:56:02.691Z]       "revision": "300ac23a15bb11e577f3a3d116a570fde948337e",
[taskcluster 2026-01-31T00:56:02.691Z]       "source": "https://github.com/taskcluster/taskcluster/commits/300ac23a15bb11e577f3a3d116a570fde948337e",
[taskcluster 2026-01-31T00:56:02.691Z]       "version": "95.1.3"
[taskcluster 2026-01-31T00:56:02.691Z]     },
[taskcluster 2026-01-31T00:56:02.691Z]     "image": "projects/taskcluster-imaging/global/images/gw-fxci-gcp-l1-2404-amd64-headless-googlecompute-2026-01-14",
[taskcluster 2026-01-31T00:56:02.691Z]     "instance-id": "3498261053338348602",
[taskcluster 2026-01-31T00:56:02.691Z]     "instance-type": "projects/887720501152/machineTypes/n2-standard-2",
[taskcluster 2026-01-31T00:56:02.691Z]     "local-ipv4": "10.142.0.17",
[taskcluster 2026-01-31T00:56:02.691Z]     "project-id": "fxci-production-level1-workers",
[taskcluster 2026-01-31T00:56:02.691Z]     "public-hostname": "scriptworker-1-decision-xgl-btpxshgfkbpgipjn4q.c.fxci-production-level1-workers.internal",
[taskcluster 2026-01-31T00:56:02.691Z]     "public-ipv4": "35.229.86.252",
[taskcluster 2026-01-31T00:56:02.691Z]     "region": "us-east1",
[taskcluster 2026-01-31T00:56:02.691Z]     "zone": "us-east1-c"
[taskcluster 2026-01-31T00:56:02.691Z]   }
[taskcluster 2026-01-31T00:56:02.691Z] Task ID: THizWLTpRBGrUqjMZNZPKg
[taskcluster 2026-01-31T00:56:02.691Z] === Task Starting ===
[taskcluster 2026-01-31T00:56:05.103Z] [d2g] Loading docker image
[taskcluster 2026-01-31T00:56:10.685Z] [d2g] Loaded docker image "docker.io/mozillareleases/taskgraph:decision-v7.2.1@sha256:6ff20f06a760af0d47d3f54c8c334a1b20afbbc54d7b36b49a542ce828762ff8"
[taskcluster 2026-01-31T00:56:10.686Z] Executing command 0: docker run -t --name taskcontainer_elCKdzWQS0aHlMhgSM8LMA --memory-swap -1 --pids-limit -1 '--add-host=localhost.localdomain:127.0.0.1' --add-host=taskcluster:host-gateway --env-file 'env.list' 'mozillareleases/taskgraph:decision-v7.2.1@sha256:6ff20f06a760af0d47d3f54c8c334a1b20afbbc54d7b36b49a542ce828762ff8' run-task --scriptworker-checkout=/builds/worker/checkouts/src -- bash -cx 'cd /builds/worker/checkouts/src && ln -s /builds/worker/artifacts artifacts && taskgraph decision --pushlog-id='\''0'\'' --pushdate='\''0'\'' --project='\''scriptworker'\'' --owner='\''bhearsum@users.noreply.github.com'\'' --level='\''1'\'' --repository-type=git --tasks-for='\''github-pull-request'\'' --base-repository='\''https://github.com/mozilla-releng/scriptworker'\'' --base-ref='\''main'\'' --base-rev='\''ba76103f715ec8c537de9576c88c2beb6c0296d3'\'' --head-repository='\''https://github.com/bhearsum/scriptworker'\'' --head-ref='\''push-qtssznumzpzx'\'' --head-rev='\''a9ce2858ba4a3779ebc09a501b4f5736c9f29c89'\'' 
[taskcluster 2026-01-31T00:56:10.686Z] '
[setup 2026-01-31T00:56:12.250Z] run-task started in /
[setup 2026-01-31T00:56:12.250Z] Invoked by command: --scriptworker-checkout=/builds/worker/checkouts/src -- bash -cx cd /builds/worker/checkouts/src && ln -s /builds/worker/artifacts artifacts && taskgraph decision --pushlog-id='0' --pushdate='0' --project='scriptworker' --owner='bhearsum@users.noreply.github.com' --level='1' --repository-type=git --tasks-for='github-pull-request' --base-repository='https://github.com/mozilla-releng/scriptworker' --base-ref='main' --base-rev='ba76103f715ec8c537de9576c88c2beb6c0296d3' --head-repository='https://github.com/bhearsum/scriptworker' --head-ref='push-qtssznumzpzx' --head-rev='a9ce2858ba4a3779ebc09a501b4f5736c9f29c89' 

[setup 2026-01-31T00:56:12.250Z] Python version: 3.11.2
[vcs 2026-01-31T00:56:12.251Z] WARNING: vcs checkout path (/builds/worker/checkouts/src) not in cache or volume; performance will likely suffer
[setup 2026-01-31T00:56:12.254Z] running as worker:worker
[vcs 2026-01-31T00:56:12.255Z] executing ['git', 'config', '--global', '--add', 'safe.directory', '/builds/worker/checkouts/src']
[vcs 2026-01-31T00:56:12.256Z] executing ['git', 'clone', 'https://github.com/mozilla-releng/scriptworker', '/builds/worker/checkouts/src']
[vcs 2026-01-31T00:56:12.258Z] Cloning into '/builds/worker/checkouts/src'...
[vcs 2026-01-31T00:56:13.019Z] executing ['git', 'fetch', 'origin', 'main']
[vcs 2026-01-31T00:56:13.157Z] From https://github.com/mozilla-releng/scriptworker
[vcs 2026-01-31T00:56:13.157Z]  * branch            main       -> FETCH_HEAD
[vcs 2026-01-31T00:56:13.162Z] executing ['git', 'checkout', 'main']
[vcs 2026-01-31T00:56:13.198Z] Already on 'main'
[vcs 2026-01-31T00:56:13.198Z] Your branch is up to date with 'origin/main'.
[vcs 2026-01-31T00:56:13.198Z] executing ['git', 'fetch', 'origin', 'ba76103f715ec8c537de9576c88c2beb6c0296d3']
[vcs 2026-01-31T00:56:13.342Z] From https://github.com/mozilla-releng/scriptworker
[vcs 2026-01-31T00:56:13.342Z]  * branch            ba76103f715ec8c537de9576c88c2beb6c0296d3 -> FETCH_HEAD
[vcs 2026-01-31T00:56:13.347Z] executing ['git', 'fetch', '--no-tags', 'https://github.com/bhearsum/scriptworker', 'push-qtssznumzpzx']
[vcs 2026-01-31T00:56:13.541Z] From https://github.com/bhearsum/scriptworker
[vcs 2026-01-31T00:56:13.541Z]  * branch            push-qtssznumzpzx -> FETCH_HEAD
[vcs 2026-01-31T00:56:13.543Z] executing ['git', 'checkout', '-f', '-B', 'push-qtssznumzpzx', 'a9ce2858ba4a3779ebc09a501b4f5736c9f29c89']
[vcs 2026-01-31T00:56:13.613Z] Switched to a new branch 'push-qtssznumzpzx'
[vcs 2026-01-31T00:56:13.613Z] cleaning git checkout...
[vcs 2026-01-31T00:56:13.613Z] executing ['git', 'clean', '-nxdff']
[vcs 2026-01-31T00:56:13.616Z] removing []
[vcs 2026-01-31T00:56:13.616Z] successfully cleaned git checkout!
[vcs 2026-01-31T00:56:13.618Z] TinderboxPrint:<a href='https://github.com/bhearsum/scriptworker/commit/a9ce2858ba4a3779ebc09a501b4f5736c9f29c89' title='Built from scriptworker commit a9ce2858ba4a3779ebc09a501b4f5736c9f29c89'>a9ce2858ba4a3779ebc09a501b4f5736c9f29c89</a>
[task 2026-01-31T00:56:13.618Z] executing ['bash', '-cx', "cd /builds/worker/checkouts/src && ln -s /builds/worker/artifacts artifacts && taskgraph decision --pushlog-id='0' --pushdate='0' --project='scriptworker' --owner='bhearsum@users.noreply.github.com' --level='1' --repository-type=git --tasks-for='github-pull-request' --base-repository='https://github.com/mozilla-releng/scriptworker' --base-ref='main' --base-rev='ba76103f715ec8c537de9576c88c2beb6c0296d3' --head-repository='https://github.com/bhearsum/scriptworker' --head-ref='push-qtssznumzpzx' --head-rev='a9ce2858ba4a3779ebc09a501b4f5736c9f29c89' \n"]
[task 2026-01-31T00:56:13.619Z] + cd /builds/worker/checkouts/src
[task 2026-01-31T00:56:13.620Z] + ln -s /builds/worker/artifacts artifacts
[task 2026-01-31T00:56:13.621Z] + taskgraph decision --pushlog-id=0 --pushdate=0 --project=scriptworker --owner=bhearsum@users.noreply.github.com --level=1 --repository-type=git --tasks-for=github-pull-request --base-repository=https://github.com/mozilla-releng/scriptworker --base-ref=main --base-rev=ba76103f715ec8c537de9576c88c2beb6c0296d3 --head-repository=https://github.com/bhearsum/scriptworker --head-ref=push-qtssznumzpzx --head-rev=a9ce2858ba4a3779ebc09a501b4f5736c9f29c89
[task 2026-01-31T00:56:13.828Z] 2026-01-31 00:56:13,828 - INFO - Loading graph configuration.
[task 2026-01-31T00:56:13.836Z] 2026-01-31 00:56:13,836 - WARNING - using default project parameters; add scriptworker to PER_PROJECT_PARAMETERS in /usr/local/lib/python3.11/dist-packages/taskgraph/decision.py to customize behavior for this project
[task 2026-01-31T00:56:13.837Z] 2026-01-31 00:56:13,836 - INFO - Using Parameters(id=caf2c6d8cc53) (from defaults)
[task 2026-01-31T00:56:13.837Z] 2026-01-31 00:56:13,837 - INFO - writing artifact file `parameters.yml`
[task 2026-01-31T00:56:13.845Z] 2026-01-31 00:56:13,845 - INFO - writing artifact file `actions.json`
[task 2026-01-31T00:56:13.846Z] 2026-01-31 00:56:13,846 - INFO - Loading kinds
[task 2026-01-31T00:56:13.853Z] 2026-01-31 00:56:13,853 - INFO - Generating full task set
[task 2026-01-31T00:56:13.868Z] 2026-01-31 00:56:13,868 - INFO - Writing docker-contexts/python3.13.tar.gz for docker image python3.13
[task 2026-01-31T00:56:13.883Z] 2026-01-31 00:56:13,883 - INFO - Writing docker-contexts/python3.12.tar.gz for docker image python3.12
[task 2026-01-31T00:56:13.898Z] 2026-01-31 00:56:13,898 - INFO - Writing docker-contexts/python3.11.tar.gz for docker image python3.11
[task 2026-01-31T00:56:13.914Z] 2026-01-31 00:56:13,914 - INFO - Generated 3 tasks for kind docker-image
[task 2026-01-31T00:56:13.927Z] 2026-01-31 00:56:13,927 - INFO - Generated 7 tasks for kind tox
[task 2026-01-31T00:56:13.928Z] 2026-01-31 00:56:13,928 - INFO - Generated 1 tasks for kind pr
[task 2026-01-31T00:56:13.928Z] 2026-01-31 00:56:13,928 - INFO - Generating full task graph
[task 2026-01-31T00:56:13.928Z] 2026-01-31 00:56:13,928 - INFO - Full task graph contains 11 tasks and 7 dependencies
[task 2026-01-31T00:56:13.928Z] 2026-01-31 00:56:13,928 - INFO - writing artifact file `full-task-graph.json`
[task 2026-01-31T00:56:13.931Z] 2026-01-31 00:56:13,930 - INFO - writing artifact file `runnable-jobs.json`
[task 2026-01-31T00:56:13.931Z] 2026-01-31 00:56:13,931 - INFO - Generating target task set
[task 2026-01-31T00:56:13.931Z] 2026-01-31 00:56:13,931 - INFO - Filter filter_target_tasks pruned 3 tasks (8 remain)
[task 2026-01-31T00:56:13.931Z] 2026-01-31 00:56:13,931 - INFO - writing artifact file `target-tasks.json`
[task 2026-01-31T00:56:13.931Z] 2026-01-31 00:56:13,931 - INFO - Generating target task graph
[task 2026-01-31T00:56:13.931Z] 2026-01-31 00:56:13,931 - INFO - Adding 3 tasks with `always_target` attribute
[task 2026-01-31T00:56:13.932Z] 2026-01-31 00:56:13,932 - INFO - Generating optimized task graph
[task 2026-01-31T00:56:13.932Z] 2026-01-31 00:56:13,932 - INFO - No tasks removed during optimization
[task 2026-01-31T00:56:14.773Z] 2026-01-31 00:56:14,773 - INFO - Replaced 3 tasks by index-search (index-search) during optimization.
[task 2026-01-31T00:56:14.774Z] 2026-01-31 00:56:14,773 - INFO - writing artifact file `task-graph.json`
[task 2026-01-31T00:56:14.775Z] 2026-01-31 00:56:14,775 - INFO - writing artifact file `label-to-taskid.json`
[task 2026-01-31T00:56:14.777Z] 2026-01-31 00:56:14,777 - INFO - Creating task with taskId Kwc4diizTi6q0LK_V512wg for tox-py311
[task 2026-01-31T00:56:14.778Z] 2026-01-31 00:56:14,777 - INFO - Creating task with taskId D8c8TY1dTQeeEQpA3VX_KA for tox-py312-cot
[task 2026-01-31T00:56:14.779Z] 2026-01-31 00:56:14,777 - INFO - Creating task with taskId EahKvpCKQuOcLR2AafLkzA for tox-check
[task 2026-01-31T00:56:14.780Z] 2026-01-31 00:56:14,780 - INFO - Creating task with taskId WthWV7PnT8-pUVJ6B1iZgg for tox-py313
[task 2026-01-31T00:56:14.782Z] 2026-01-31 00:56:14,782 - INFO - Creating task with taskId Hww7Csh6RDCdpQIp23LPtw for tox-py312
[task 2026-01-31T00:56:14.786Z] 2026-01-31 00:56:14,784 - INFO - Creating task with taskId BvO4_3TdTxiPpIVZfhGRRw for tox-py313-cot
[task 2026-01-31T00:56:14.786Z] 2026-01-31 00:56:14,786 - INFO - Creating task with taskId eGpoUp7kTF-uEaekyhppRQ for tox-py311-cot
[task 2026-01-31T00:56:15.046Z] 2026-01-31 00:56:15,046 - INFO - Creating task with taskId a89jvI2FTEeoSYDz1kvZJQ for pr-complete
[taskcluster 2026-01-31T00:56:15.377Z]                        Exit Code: 0
[taskcluster 2026-01-31T00:56:15.377Z]                        User Time: 11.673ms
[taskcluster 2026-01-31T00:56:15.377Z]                      Kernel Time: 12.734ms
[taskcluster 2026-01-31T00:56:15.377Z]                        Wall Time: 4.690722311s
[taskcluster 2026-01-31T00:56:15.377Z]  Average Available System Memory: 7.13 GiB
[taskcluster 2026-01-31T00:56:15.377Z]       Average System Memory Used: 633.88 MiB
[taskcluster 2026-01-31T00:56:15.377Z]          Peak System Memory Used: 668.80 MiB
[taskcluster 2026-01-31T00:56:15.377Z]              Total System Memory: 7.75 GiB
[taskcluster 2026-01-31T00:56:15.377Z]                           Result: SUCCEEDED
[taskcluster 2026-01-31T00:56:15.377Z] === Task Finished ===
[taskcluster 2026-01-31T00:56:15.377Z] Task Duration: 4.691468399s
View more details on firefoxci-taskcluster