Skip to content

fix(delivery): trust protected-main admission - #98

Merged
xiaoland merged 1 commit into
mainfrom
hotfix/production-main-verification
Sep 1, 2026
Merged

fix(delivery): trust protected-main admission#98
xiaoland merged 1 commit into
mainfrom
hotfix/production-main-verification

Conversation

@xiaoland

@xiaoland xiaoland commented Sep 1, 2026

Copy link
Copy Markdown
Member

问题

移除 main CI 后,Production application 仍轮询 merge commit 上的 PR 检查名,导致 release merge 的生产交付等待直至超时。

修改

  • production 仅验证输入 SHA 仍是 exact current main
  • 成功 runtime artifact 的准入继续由 workflow_run 触发条件拥有
  • preview 仍验证 exact open PR head 与三项必需 PR checks
  • 部署文档同步说明该边界

验证

  • pdm run check
  • mise x actionlint -- actionlint
  • production 探针确保该路径不访问 check-runs API

- stop production from polling PR checks on merge commits
- retain exact-main identity and preview check verification
@xiaoland
xiaoland merged commit e200cdc into main Sep 1, 2026
5 of 6 checks passed
@xiaoland
xiaoland deleted the hotfix/production-main-verification branch September 1, 2026 04:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant