Publish verified agent images for the OTel spike - #517
Merged
Merged
Conversation
The merge test in StackVista/stackstate#561 requires the collector provenance labels present only on STAC-25490-otel-spike. That branch currently has no push-triggered builds, and workflow_dispatch skips image publication. Enable the three existing CI workflows on that exact spike branch. Preserve the same-commit cross-workflow verification barriers and existing per-architecture image build, scan and signing jobs. Keep DEB publication and the shared pre-release install script restricted to stackstate-7.78.2. Permit the spike multi-architecture manifest after successful image publication with package publication intentionally skipped; retain the package-success prerequisite for the release branch. Never proceed after failed or cancelled image publication. Validation: offline Zizmor has no findings; 525 local publication guard cases pass. Parsed workflow comparison confirms only the intended triggers and guards changed.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The OTel spike has no published agent images: its push events do not start CI, and manual builds skip publication. Enable the three existing verification/build workflows for that exact branch so DataDog#561 can consume commit-tagged images with collector attribution.
Keep shared pre-release DEB/install-script publication restricted to
stackstate-7.78.2. Image publication retains its verification, scan and signing steps. This PR targets the spike branch; its merge must finish publishing before Beest starts.Validation: all three CI workflows passed at
6ac9e9f055(lint/unit, binary and DEB builds, including both architectures). Offline Zizmor passed; 525 local publication-guard cases passed, including failed/cancelled dependencies and the skipped DEB job on the spike.Tracking: https://github.com/StackVista/stackstate/issues/561