sigstore/root-signing

GitHub Action syncing preprod/prod for snapshot/ts kicked off unexpectedly

Closed this issue · 1 comments

Description

https://github.com/sigstore/root-signing/blob/main/.github/workflows/sync-main-to-preprod-and-prod.yml should only kick off when a change is pushed to main and the contents of that change are only a timestamp or a snapshot and timestamp. After a merge after the 9-26 ceremony, https://github.com/sigstore/root-signing/actions/runs/6317134104/job/17153262328 ran, which should have exited early since the contents changed included target/root metadata. It did not, and synced all of main to preprod and prod.

Never saw this again, so assuming this was a one-off issue.