Skip to content

fix: verify published tag digests - #784

Draft
ianpittwood wants to merge 1 commit into
mainfrom
fix/782-validate-published-digests
Draft

fix: verify published tag digests#784
ianpittwood wants to merge 1 commit into
mainfrom
fix/782-validate-published-digests

Conversation

@ianpittwood

@ianpittwood ianpittwood commented Sep 2, 2026

Copy link
Copy Markdown
Contributor

Closes #782

Summary

  • resolve and retain the final Stage 1 source descriptor digest
  • require every published destination tag to match that digest, retrying stale registry reads
  • log expected and observed digests for mismatches

Testing

  • just test

@ianpittwood
ianpittwood force-pushed the fix/782-validate-published-digests branch from 73d45ac to 7b39376 Compare September 2, 2026 17:51
@github-actions

github-actions Bot commented Sep 2, 2026

Copy link
Copy Markdown

Test Results

2 273 tests  +3   2 273 ✅ +3   7m 42s ⏱️ - 3m 34s
    1 suites ±0       0 💤 ±0 
    1 files   ±0       0 ❌ ±0 

Results for commit 7b39376. ± Comparison against base commit 03d3645.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Validate every published tag against the expected digest

1 participant