RFR: 1072: Skara should validate the commit hash of a Backport PR [v2]
erikj at openjdk.java.net
Tue Jun 8 23:15:29 UTC 2021
> Add a check for "Backport <hash>" titles that the given hash isn't the head of the PR itself. If the user mistakenly uses that hash, Skara is very likely to get fooled into thinking the backport is clean.
> While investigating this, I also discovered that the CheckWorkItem was inconsistent with not repeating "backport" errors, so I implemented a general mechanism for this, which guarantees that the same exact error message is never repeated. I believe this will be good enough, and certainly better than the existing behavior.
Erik Joelsson has updated the pull request incrementally with one additional commit since the last revision:
Check if backport hash is ancestor of PR change. Also check if a PR only contains changes already present in the target.
- all: https://git.openjdk.java.net/skara/pull/1184/files
- new: https://git.openjdk.java.net/skara/pull/1184/files/136cb2fc..f0cfcfff
- full: https://webrevs.openjdk.java.net/?repo=skara&pr=1184&range=01
- incr: https://webrevs.openjdk.java.net/?repo=skara&pr=1184&range=00-01
Stats: 78 lines in 4 files changed: 63 ins; 5 del; 10 mod
Fetch: git fetch https://git.openjdk.java.net/skara pull/1184/head:pull/1184
More information about the skara-dev