Require fresh authorization and audit CI job reruns #1482
No reviewers
Labels
No Milestone
No project
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: stackchain/stackchain-dashboard#1482
Loading…
Reference in New Issue
Block a user
No description provided.
Delete Branch "timmy/1481-fresh-authorize-ci-job-reruns"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Closes #1481
Requires an exact, one-time fresh-authorization grant before pull-check or release-check reruns; fails closed on audit reservation failure; records successful reruns in principal-scoped Security activity.
Tests:
python3 -m pytest tests/ -q→ 2810 passed, 28 skipped.