Repository navigation
fix(ci): retry brief download failures when installing supply-chain tools - #4024
Conversation
…ools Both pinned tool downloads ran once, so a momentary 5xx from GitHub's release host failed manifest validation on every PR and would fail the merge-queue deploy that installs the same tools. Retry curl's transient failures a few times; the digest check against the reviewed pin and the fail-closed behaviour on a persistent failure are unchanged. Fixes #4023 Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Tried as a user. Ran the exact new download command (same flags, including Evidence for the fix: the failing step on #4020 and #4022 (and #4022's re-run) was |
@coderabbitai full review |
|
|
|
Warning Review limit reachedNext included review available in 32 minutes. View limit detailsLimit details: You’ve used the included review currently available. You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository. Review configuration: ⚙️ Run configurationConfiguration used: Repository YAML (base), Organization UI (inherited) Review profile: ASSERTIVE Plan: Advanced Run ID: 📒 Files selected for processing (2)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
CodeRabbit refused this head (rate limited) and Codex is at its usage limit, so this round advances to Bugbot. |
|
@cursor review |
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
✅ Bugbot reviewed your changes and found no new issues!
Comment @cursor review or bugbot run to trigger another review on this PR
Reviewed by Cursor Bugbot for commit f92770f. Configure here.
Readiness at |
Why
Every platform change is checked by a job that downloads two signing and inventory tools from GitHub. When GitHub briefly answers with a server error, as it did repeatedly this afternoon, the job fails outright and blocks unrelated changes; the production deploy installs the same tools and would fail the same way.
What
The downloads now retry a few times before giving up. The downloaded tools are still checked against the exact versions we reviewed, and a download that keeps failing still stops the job.
Fixes #4023