Skip to content

fix(signingscript): Bug 2034166 reduce notarization requests #1426

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
hneiva wants to merge 1 commit into
base: master
Choose a base branch
from

fix(signingscript): Bug 2034166 reduce notarization requests

c2ca693
Select commit
Loading
Failed to load commit list.
Draft

fix(signingscript): Bug 2034166 reduce notarization requests #1426

fix(signingscript): Bug 2034166 reduce notarization requests
c2ca693
Select commit
Loading
Failed to load commit list.
firefoxci-taskcluster / Decision Task succeeded Apr 22, 2026 in 2m 15s

FirefoxCI (pull_request)

The task that creates all of the other tasks in the task graph

Details

View task in Taskcluster | View logs in Taskcluster | View task group in Taskcluster

Task Status

Started: 2026-04-22T17:33:13.319Z
Resolved: 2026-04-22T17:33:58.529Z
Task Execution Time: 45 seconds, 210 milliseconds
Task Status: completed
Reason Resolved: completed
TaskId: bBlMR5MMSnGCrqCmkYTDyQ
RunId: 0

Artifacts

- public/actions.json
- public/chain-of-trust.json
- public/chain-of-trust.json.sig
- public/docker-contexts/addonscript.tar.gz
- public/docker-contexts/balrogscript.tar.gz
- public/docker-contexts/base.tar.gz
- public/docker-contexts/beetmoverscript.tar.gz
- public/docker-contexts/bitrisescript.tar.gz
- public/docker-contexts/bouncerscript.tar.gz
- public/docker-contexts/githubscript.tar.gz
- public/docker-contexts/landoscript.tar.gz
- public/docker-contexts/pushapkscript.tar.gz
- public/docker-contexts/pushapkscript-test-py311.tar.gz
- public/docker-contexts/pushapkscript-test-py314.tar.gz
- public/docker-contexts/pushflatpakscript.tar.gz
- public/docker-contexts/pushflatpakscript-test-py311.tar.gz
- public/docker-contexts/pushflatpakscript-test-py314.tar.gz
- public/docker-contexts/pushmsixscript.tar.gz
- public/docker-contexts/python311.tar.gz
- public/docker-contexts/python314.tar.gz
- public/docker-contexts/shipitscript.tar.gz
- public/docker-contexts/signingscript.tar.gz
- public/docker-contexts/signingscript-test-py311.tar.gz
- public/docker-contexts/signingscript-test-py314.tar.gz
- public/docker-contexts/skopeo.tar.gz
- public/docker-contexts/treescript.tar.gz
- public/fetch-content
- public/full-task-graph.json
- public/label-to-taskid.json
- public/logs/certified.log
- public/logs/live_backing.log
- public/logs/live.log
- public/optimizations.log
- public/parameters.yml
- public/runnable-jobs.json
- public/run-task
- public/target-tasks.json
- public/task-graph.json

[taskcluster 2026-04-22T17:33:13.390Z] Worker Type (scriptworker-1/decision) settings:
[taskcluster 2026-04-22T17:33:13.390Z]   {
[taskcluster 2026-04-22T17:33:13.390Z]     "generic-worker": {
[taskcluster 2026-04-22T17:33:13.390Z]       "config": {
[taskcluster 2026-04-22T17:33:13.390Z]         "headlessTasks": true
[taskcluster 2026-04-22T17:33:13.390Z]       },
[taskcluster 2026-04-22T17:33:13.390Z]       "engine": "multiuser",
[taskcluster 2026-04-22T17:33:13.390Z]       "go-arch": "amd64",
[taskcluster 2026-04-22T17:33:13.390Z]       "go-os": "linux",
[taskcluster 2026-04-22T17:33:13.390Z]       "go-version": "go1.26.0",
[taskcluster 2026-04-22T17:33:13.390Z]       "release": "https://github.com/taskcluster/taskcluster/releases/tag/v97.0.1",
[taskcluster 2026-04-22T17:33:13.390Z]       "revision": "6519c127aad40a47b1412136d9a5797a76eca200",
[taskcluster 2026-04-22T17:33:13.390Z]       "source": "https://github.com/taskcluster/taskcluster/commits/6519c127aad40a47b1412136d9a5797a76eca200",
[taskcluster 2026-04-22T17:33:13.390Z]       "version": "97.0.1"
[taskcluster 2026-04-22T17:33:13.390Z]     },
[taskcluster 2026-04-22T17:33:13.390Z]     "image": "projects/taskcluster-imaging/global/images/gw-fxci-gcp-l1-2404-amd64-headless-googlecompute-2026-03-05",
[taskcluster 2026-04-22T17:33:13.390Z]     "instance-id": "5314071946454153453",
[taskcluster 2026-04-22T17:33:13.390Z]     "instance-type": "projects/887720501152/machineTypes/n2-standard-2",
[taskcluster 2026-04-22T17:33:13.390Z]     "local-ipv4": "10.128.1.12",
[taskcluster 2026-04-22T17:33:13.390Z]     "project-id": "fxci-production-level1-workers",
[taskcluster 2026-04-22T17:33:13.390Z]     "public-hostname": "scriptworker-1-decision-gttasw-ssaseemvwinnxrw.c.fxci-production-level1-workers.internal",
[taskcluster 2026-04-22T17:33:13.390Z]     "public-ipv4": "34.132.109.168",
[taskcluster 2026-04-22T17:33:13.390Z]     "region": "us-central1",
[taskcluster 2026-04-22T17:33:13.390Z]     "zone": "us-central1-a"
[taskcluster 2026-04-22T17:33:13.390Z]   }
[taskcluster 2026-04-22T17:33:13.390Z] Task ID: bBlMR5MMSnGCrqCmkYTDyQ
[taskcluster 2026-04-22T17:33:13.390Z] === Task Starting ===
[taskcluster 2026-04-22T17:33:15.355Z] [d2g] Loading docker image
[taskcluster 2026-04-22T17:33:26.745Z] [d2g] Loaded docker image "docker.io/mozillareleases/taskgraph:decision-v20.0.0@sha256:afae5e5d3caaeb10a93fae56bc3176d1e73faf9b616c01facf811e488db4eafe"
[taskcluster 2026-04-22T17:33:26.782Z] Executing command 0: docker run -t --name taskcontainer_ABBJlcKYTLaUYOuGOXJuFQ --memory-swap -1 --pids-limit -1 '--add-host=localhost.localdomain:127.0.0.1' --add-host=taskcluster:host-gateway --env-file 'env.list' 'mozillareleases/taskgraph:decision-v20.0.0@sha256:afae5e5d3caaeb10a93fae56bc3176d1e73faf9b616c01facf811e488db4eafe' run-task --scriptworker-checkout=/builds/worker/checkouts/src --task-cwd=/builds/worker/checkouts/src -- bash -cx 'ln -s /builds/worker/artifacts artifacts && taskgraph decision --pushlog-id='\''0'\'' --pushdate='\''0'\'' --project='\''scriptworker-scripts'\'' --message="" --owner='\''hneiva@users.noreply.github.com'\'' --level='\''1'\'' --base-repository="$SCRIPTWORKER_BASE_REPOSITORY" --head-repository="$SCRIPTWORKER_HEAD_REPOSITORY" --head-ref="$SCRIPTWORKER_HEAD_REF" --head-rev="$SCRIPTWORKER_HEAD_REV" --repository-type="$SCRIPTWORKER_REPOSITORY_TYPE" --tasks-for='\''github-pull-request'\'' 
[taskcluster 2026-04-22T17:33:26.782Z] '
[setup 2026-04-22T17:33:28.756+00:00] run-task started in /
[setup 2026-04-22T17:33:28.756+00:00] Invoked by command: --scriptworker-checkout=/builds/worker/checkouts/src --task-cwd=/builds/worker/checkouts/src -- bash -cx ln -s /builds/worker/artifacts artifacts && taskgraph decision --pushlog-id='0' --pushdate='0' --project='scriptworker-scripts' --message="" --owner='hneiva@users.noreply.github.com' --level='1' --base-repository="$SCRIPTWORKER_BASE_REPOSITORY" --head-repository="$SCRIPTWORKER_HEAD_REPOSITORY" --head-ref="$SCRIPTWORKER_HEAD_REF" --head-rev="$SCRIPTWORKER_HEAD_REV" --repository-type="$SCRIPTWORKER_REPOSITORY_TYPE" --tasks-for='github-pull-request' 

[setup 2026-04-22T17:33:28.758+00:00] Python version: 3.11.2
[setup 2026-04-22T17:33:28.758+00:00] Subprocess python version: 
cpython-3.11.2-linux-x86_64-gnu    /usr/bin/python3.11
cpython-3.11.2-linux-x86_64-gnu    /usr/bin/python3 -> python3.11
[vcs 2026-04-22T17:33:28.893+00:00] WARNING: vcs checkout path (/builds/worker/checkouts/src) not in cache or volume; performance will likely suffer
[setup 2026-04-22T17:33:28.894+00:00] running as worker:worker
[vcs 2026-04-22T17:33:28.895+00:00] executing ['git', 'config', '--global', '--add', 'safe.directory', '/builds/worker/checkouts/src']
[vcs 2026-04-22T17:33:28.898+00:00] executing ['git', 'clone', 'https://github.com/mozilla-releng/scriptworker-scripts', '/builds/worker/checkouts/src']
[vcs 2026-04-22T17:33:28.901+00:00] Cloning into '/builds/worker/checkouts/src'...
[vcs 2026-04-22T17:33:38.199+00:00] executing ['git', 'fetch', '--tags', '--force', 'https://github.com/mozilla-releng/scriptworker-scripts', 'hneiva/smart-notarize']
[vcs 2026-04-22T17:33:38.451+00:00] From https://github.com/mozilla-releng/scriptworker-scripts
[vcs 2026-04-22T17:33:38.451+00:00]  * branch              hneiva/smart-notarize -> FETCH_HEAD
[vcs 2026-04-22T17:33:38.458+00:00] executing ['git', 'checkout', '-f', '-B', 'hneiva/smart-notarize', 'c2ca6937e9a8372f656e59190ce1b6794ea3a971']
[vcs 2026-04-22T17:33:38.827+00:00] Switched to a new branch 'hneiva/smart-notarize'
[vcs 2026-04-22T17:33:38.828+00:00] cleaning git checkout...
[vcs 2026-04-22T17:33:38.828+00:00] executing ['git', 'clean', '-nxdff']
[vcs 2026-04-22T17:33:38.838+00:00] removing []
[vcs 2026-04-22T17:33:38.839+00:00] successfully cleaned git checkout!
[vcs 2026-04-22T17:33:38.840+00:00] TinderboxPrint:<a href='https://github.com/mozilla-releng/scriptworker-scripts/commit/c2ca6937e9a8372f656e59190ce1b6794ea3a971' title='Built from scriptworker-scripts commit c2ca6937e9a8372f656e59190ce1b6794ea3a971'>c2ca6937e9a8372f656e59190ce1b6794ea3a971</a>
[task 2026-04-22T17:33:38.841+00:00] executing ['bash', '-cx', 'ln -s /builds/worker/artifacts artifacts && taskgraph decision --pushlog-id=\'0\' --pushdate=\'0\' --project=\'scriptworker-scripts\' --message="" --owner=\'hneiva@users.noreply.github.com\' --level=\'1\' --base-repository="$SCRIPTWORKER_BASE_REPOSITORY" --head-repository="$SCRIPTWORKER_HEAD_REPOSITORY" --head-ref="$SCRIPTWORKER_HEAD_REF" --head-rev="$SCRIPTWORKER_HEAD_REV" --repository-type="$SCRIPTWORKER_REPOSITORY_TYPE" --tasks-for=\'github-pull-request\' \n']
[task 2026-04-22T17:33:38.842+00:00] + ln -s /builds/worker/artifacts artifacts
[task 2026-04-22T17:33:38.843+00:00] + taskgraph decision --pushlog-id=0 --pushdate=0 --project=scriptworker-scripts --message= --owner=hneiva@users.noreply.github.com --level=1 --base-repository=https://github.com/mozilla-releng/scriptworker-scripts --head-repository=https://github.com/mozilla-releng/scriptworker-scripts --head-ref=hneiva/smart-notarize --head-rev=c2ca6937e9a8372f656e59190ce1b6794ea3a971 --repository-type=git --tasks-for=github-pull-request
[task 2026-04-22T17:33:39.480+00:00] 2026-04-22 17:33:39,478 - INFO - Loading graph configuration.
[task 2026-04-22T17:33:39.490+00:00] 2026-04-22 17:33:39,490 - WARNING - using default project parameters; add scriptworker-scripts to PER_PROJECT_PARAMETERS in /usr/local/lib/python3.11/dist-packages/taskgraph/decision.py to customize behavior for this project
[task 2026-04-22T17:33:39.490+00:00] 2026-04-22 17:33:39,490 - INFO - Using Parameters(id=a4e4154fb6fe) (from defaults)
[task 2026-04-22T17:33:39.491+00:00] 2026-04-22 17:33:39,491 - INFO - writing artifact file `parameters.yml`
[task 2026-04-22T17:33:39.503+00:00] 2026-04-22 17:33:39,503 - INFO - writing artifact file `actions.json`
[task 2026-04-22T17:33:39.503+00:00] 2026-04-22 17:33:39,503 - INFO - Loading kinds
[task 2026-04-22T17:33:39.508+00:00] 2026-04-22 17:33:39,508 - INFO - Generating full task set
[task 2026-04-22T17:33:39.533+00:00] 2026-04-22 17:33:39,532 - INFO - Writing docker-contexts/python311.tar.gz for docker image python311
[task 2026-04-22T17:33:39.562+00:00] 2026-04-22 17:33:39,562 - INFO - Writing docker-contexts/python314.tar.gz for docker image python314
[task 2026-04-22T17:33:39.585+00:00] 2026-04-22 17:33:39,585 - INFO - Writing docker-contexts/skopeo.tar.gz for docker image skopeo
[task 2026-04-22T17:33:39.607+00:00] 2026-04-22 17:33:39,607 - INFO - Writing docker-contexts/base.tar.gz for docker image base
[task 2026-04-22T17:33:39.663+00:00] 2026-04-22 17:33:39,663 - INFO - Writing docker-contexts/addonscript.tar.gz for docker image addonscript
[task 2026-04-22T17:33:39.673+00:00] 2026-04-22 17:33:39,673 - INFO - Writing docker-contexts/balrogscript.tar.gz for docker image balrogscript
[task 2026-04-22T17:33:39.690+00:00] 2026-04-22 17:33:39,690 - INFO - Writing docker-contexts/bitrisescript.tar.gz for docker image bitrisescript
[task 2026-04-22T17:33:39.701+00:00] 2026-04-22 17:33:39,701 - INFO - Writing docker-contexts/beetmoverscript.tar.gz for docker image beetmoverscript
[task 2026-04-22T17:33:39.741+00:00] 2026-04-22 17:33:39,741 - INFO - Writing docker-contexts/bouncerscript.tar.gz for docker image bouncerscript
[task 2026-04-22T17:33:39.765+00:00] 2026-04-22 17:33:39,765 - INFO - Writing docker-contexts/githubscript.tar.gz for docker image githubscript
[task 2026-04-22T17:33:39.775+00:00] 2026-04-22 17:33:39,775 - INFO - Writing docker-contexts/landoscript.tar.gz for docker image landoscript
[task 2026-04-22T17:33:39.802+00:00] 2026-04-22 17:33:39,802 - INFO - Writing docker-contexts/shipitscript.tar.gz for docker image shipitscript
[task 2026-04-22T17:33:39.818+00:00] 2026-04-22 17:33:39,818 - INFO - Writing docker-contexts/pushapkscript.tar.gz for docker image pushapkscript
[task 2026-04-22T17:33:45.661+00:00] 2026-04-22 17:33:45,661 - INFO - Writing docker-contexts/pushflatpakscript.tar.gz for docker image pushflatpakscript
[task 2026-04-22T17:33:45.767+00:00] 2026-04-22 17:33:45,767 - INFO - Writing docker-contexts/pushmsixscript.tar.gz for docker image pushmsixscript
[task 2026-04-22T17:33:45.778+00:00] 2026-04-22 17:33:45,778 - INFO - Writing docker-contexts/signingscript.tar.gz for docker image signingscript
[task 2026-04-22T17:33:49.225+00:00] 2026-04-22 17:33:49,225 - INFO - Writing docker-contexts/treescript.tar.gz for docker image treescript
[task 2026-04-22T17:33:49.256+00:00] 2026-04-22 17:33:49,256 - INFO - Writing docker-contexts/pushapkscript-test-py311.tar.gz for docker image pushapkscript-test-py311
[task 2026-04-22T17:33:49.274+00:00] 2026-04-22 17:33:49,274 - INFO - Writing docker-contexts/pushflatpakscript-test-py311.tar.gz for docker image pushflatpakscript-test-py311
[task 2026-04-22T17:33:49.294+00:00] 2026-04-22 17:33:49,294 - INFO - Writing docker-contexts/signingscript-test-py311.tar.gz for docker image signingscript-test-py311
[task 2026-04-22T17:33:49.314+00:00] 2026-04-22 17:33:49,314 - INFO - Writing docker-contexts/pushapkscript-test-py314.tar.gz for docker image pushapkscript-test-py314
[task 2026-04-22T17:33:49.334+00:00] 2026-04-22 17:33:49,334 - INFO - Writing docker-contexts/pushflatpakscript-test-py314.tar.gz for docker image pushflatpakscript-test-py314
[task 2026-04-22T17:33:49.354+00:00] 2026-04-22 17:33:49,354 - INFO - Writing docker-contexts/signingscript-test-py314.tar.gz for docker image signingscript-test-py314
[task 2026-04-22T17:33:49.378+00:00] 2026-04-22 17:33:49,378 - INFO - Generated 23 tasks for kind docker-image
[task 2026-04-22T17:33:49.448+00:00] 2026-04-22 17:33:49,448 - INFO - Generated 3 tasks for kind check
[task 2026-04-22T17:33:49.469+00:00] 2026-04-22 17:33:49,469 - INFO - Generated 13 tasks for kind push-image
[task 2026-04-22T17:33:50.400+00:00] 2026-04-22 17:33:50,399 - INFO - Generated 34 tasks for kind tox
[task 2026-04-22T17:33:50.408+00:00] 2026-04-22 17:33:50,408 - INFO - Generated 1 tasks for kind pr
[task 2026-04-22T17:33:50.416+00:00] 2026-04-22 17:33:50,415 - INFO - Generating full task graph
[task 2026-04-22T17:33:50.416+00:00] 2026-04-22 17:33:50,415 - INFO - Full task graph contains 74 tasks and 76 dependencies
[task 2026-04-22T17:33:50.419+00:00] 2026-04-22 17:33:50,419 - INFO - writing artifact file `full-task-graph.json`
[task 2026-04-22T17:33:50.421+00:00] 2026-04-22 17:33:50,421 - INFO - writing artifact file `runnable-jobs.json`
[task 2026-04-22T17:33:50.422+00:00] 2026-04-22 17:33:50,422 - INFO - Generating target task set
[task 2026-04-22T17:33:50.423+00:00] 2026-04-22 17:33:50,423 - INFO - Filter filter_target_tasks pruned 36 tasks (38 remain)
[task 2026-04-22T17:33:50.423+00:00] 2026-04-22 17:33:50,423 - INFO - writing artifact file `target-tasks.json`
[task 2026-04-22T17:33:50.423+00:00] 2026-04-22 17:33:50,423 - INFO - Generating target task graph
[task 2026-04-22T17:33:50.424+00:00] 2026-04-22 17:33:50,424 - INFO - Adding 23 tasks with `always_target` attribute
[task 2026-04-22T17:33:50.424+00:00] 2026-04-22 17:33:50,424 - INFO - Generating optimized task graph
[task 2026-04-22T17:33:50.426+00:00] 2026-04-22 17:33:50,426 - INFO - No tasks removed during optimization
[task 2026-04-22T17:33:51.199+00:00] 2026-04-22 17:33:51,199 - INFO - Replaced 56 tasks by index-search (index-search) during optimization.
[task 2026-04-22T17:33:51.201+00:00] 2026-04-22 17:33:51,201 - INFO - writing artifact file `task-graph.json`
[task 2026-04-22T17:33:51.201+00:00] 2026-04-22 17:33:51,201 - INFO - writing artifact file `label-to-taskid.json`
[task 2026-04-22T17:33:51.204+00:00] 2026-04-22 17:33:51,203 - INFO - Creating task with taskId ItocO0gDQnCzmr7HDF8AXg for check-ruff-format
[task 2026-04-22T17:33:51.208+00:00] 2026-04-22 17:33:51,204 - INFO - Creating task with taskId LPqEIstlTo6LkyCK_O6tvQ for check-yamllint
[task 2026-04-22T17:33:51.208+00:00] 2026-04-22 17:33:51,205 - INFO - Creating task with taskId Zl7Uj3RVTLSuTZE_wpXc0g for check-ruff-lint
[task 2026-04-22T17:33:51.213+00:00] 2026-04-22 17:33:51,207 - INFO - Creating task with taskId W_7gsRvHQ8uUCrpi6MVGwA for docker-image-signingscript
[task 2026-04-22T17:33:51.392+00:00] 2026-04-22 17:33:51,392 - INFO - Creating task with taskId dOHyCC4xRDSscFgoA3ZQZQ for pr-complete
[taskcluster 2026-04-22T17:33:53.030Z]                        Exit Code: 0
[taskcluster 2026-04-22T17:33:53.030Z]                        User Time: 13.862ms
[taskcluster 2026-04-22T17:33:53.030Z]                      Kernel Time: 20.259ms
[taskcluster 2026-04-22T17:33:53.030Z]                        Wall Time: 26.246954873s
[taskcluster 2026-04-22T17:33:53.030Z]  Average Available System Memory: 6.74 GiB
[taskcluster 2026-04-22T17:33:53.030Z]       Average System Memory Used: 1.01 GiB
[taskcluster 2026-04-22T17:33:53.030Z]          Peak System Memory Used: 1.13 GiB
[taskcluster 2026-04-22T17:33:53.030Z]              Total System Memory: 7.75 GiB
[taskcluster 2026-04-22T17:33:53.030Z]                           Result: SUCCEEDED
[taskcluster 2026-04-22T17:33:53.031Z] === Task Finished ===
[taskcluster 2026-04-22T17:33:53.031Z] Task Duration: 26.24869435s
View more details on firefoxci-taskcluster