search

sigstore / community

General sigstore community repo
Apache License 2.0
36 stars 45 forks source link

root-signing-staging branch protection changed #449

Closed jku closed 1 month ago

jku commented 1 month ago

root-signing-staging has a setup where sigstore-bot can push to two branches main and publish.

Pushing to both worked May 23rd 10:19 GMT+3. Then on May 24th 15:26 GMT+3 pushing to main worked but pushing to publish failed with "protected branch hook declined".

So something clearly changed in the config. I can see that main and publish have slightly different configuration so this is likely an easy fix, I'm just a bit worried how the setup changed?

CC @kommendorkapten @haydentherapper

jku commented 1 month ago

I'm just a bit worried how the setup changed?

To be clear: the yaml hasn't changed in months: I'm referring to the actual setup in the GHproject ... but possibly the branch protection settings haven't been applied after that last change