diff options
| author | Yuriy Andamasov <yuriy@vyos.io> | 2026-05-11 00:49:57 +0300 |
|---|---|---|
| committer | Yuriy Andamasov <yuriy@vyos.io> | 2026-05-11 00:49:57 +0300 |
| commit | b74e0a69e30bce74a9cd478c515b5d89d9482538 (patch) | |
| tree | 2953e7264291c5857950c585cf63c3082a32cf7d /docs/_include | |
| parent | 6851aa0c49d599da3c93011a7d3d23b748c62cd3 (diff) | |
| download | vyos-documentation-b74e0a69e30bce74a9cd478c515b5d89d9482538.tar.gz vyos-documentation-b74e0a69e30bce74a9cd478c515b5d89d9482538.zip | |
ci: re-validate HEAD inside retag job
Both Copilot and CodeRabbit flagged the same hole on PR #1958: GitHub's
"Re-run failed jobs" can execute retag in isolation, skipping
check_head. If the branch HEAD advanced since the original run, the
isolated retag would PATCH the tag to a stale github.sha.
Add the same HEAD-equivalence guard inside retag, immediately before
the PATCH/POST. Defense-in-depth — both jobs check, so neither full
re-runs nor selective retag re-runs can move the tag backward.
🤖 Generated by [robots](https://vyos.io)
Diffstat (limited to 'docs/_include')
0 files changed, 0 insertions, 0 deletions