From 2b74230d7f8ac3be6f635baa9d9fbef9b4380484 Mon Sep 17 00:00:00 2001
From: Julien Cristau <jcristau@mozilla.com>
Date: Wed, 14 Dec 2022 10:48:58 +0100
Subject: [PATCH] Bug 1805629: fix chain of trust verification failure on pull
requests
scriptworker's chain of trust verification expects a decision task's
MOBILE_HEAD_REPOSITORY to match the repository URL in metadata.source.
For pull requests that means we shouldn't set metadata.source to the
base repo.
---
.taskcluster.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.taskcluster.yml b/.taskcluster.yml
index 58239ba2bc0..869cde13a85 100644
--- a/.taskcluster.yml
+++ b/.taskcluster.yml
@@ -166,7 +166,7 @@ tasks:
metadata:
$merge:
- owner: "${ownerEmail}"
- source: 'https://github.com/${repoFullName}/raw/${head_sha}/.taskcluster.yml'
+ source: '${repoUrl}/raw/${head_sha}/.taskcluster.yml'
- $if: 'isPullRequest || tasks_for == "github-push"'
then:
name: "Decision Task"
--
GitLab