New issue
Advanced search Search tips

Issue 916833 link

Starred by 2 users
Status: Assigned
Owner:
tandrii@chromium.org
Cc:
tandrii@chromium.org
no...@chromium.org
Components:
EstimatedDays: 1
NextAction: ----
OS: ----
Pri: 1
Type: Bug



Sign in to add a comment

CQ should always trust its own builds (based on Build.created_by field)

Project Member Reported by no...@chromium.org, Dec 20 
context: go/chops-pm-110

CQ should always trust its own builds (based on Build.created_by field), so that we have a guarantee that it won't create thousands of builds in a loop.

This should be easy

Comment 1 by no...@chromium.org, Dec 20

Owner: tandrii@chromium.org
Status: Assigned (was: Available)
have to assign because of pm

Comment 2 by tandrii@chromium.org, Dec 21 

Accepted.
Nodir, can you confirm that created_by can't be spoofed?
ie that it's exactly the account which authenticated to schedule a build.

Comment 3 by no...@chromium.org, Dec 21 

i confirm
►

Sign in to add a comment