Development record
The bootstrap ignores a newest-release mark that fails its ownership or mode check (find ... ! -perm -0020) silently, so a machine whose mark is unreadable looks the same as one with no mark (fix for iss-2609151847117977). The attestation behaves the same way.
issueopenminoriss-2610120656379101
The bootstrap ignores a newest-release mark that fails its ownership or mode check (find ... ! -perm -0020) silently, so a machine whose mark is unreadable looks the same as one with no mark (fix for iss-2609151847117977). The attestation behaves the same way.
Frontmatter
| id | iss-2610120656379101 |
|---|---|
| type | issue |
| lifecycle | open |
| severity | minor |
.abcd/work/issues/open/iss-2610120656379101-bootstrap-ignores-bad-release-mark.md
open on GitHub ↗ · commit history ↗
mentions1
- iss-2609151847117977The home-scoped cache attestation (GHSA-4q78-ccfv-f374) binds exactly two