Development record
Releases signed before the release-chain fix carry a tag-ref signing identity, so the new pinned provenance checks and the emergency redeploy refuse them; the release runbook does not say so.
issueopenminoriss-2610161411595610
Releases signed before the release-chain fix carry a tag-ref signing identity, so the new pinned provenance checks and the emergency redeploy refuse them; the release runbook does not say so.
Frontmatter
| id | iss-2610161411595610 |
|---|---|
| type | issue |
| lifecycle | open |
| severity | minor |
.abcd/work/issues/open/iss-2610161411595610-releases-signed-before-the-release-chain.md
open on GitHub ↗ · commit history ↗