The GitHub Actions job "Tests (AMD)" on 
airflow.git/scope-amazon-secrets-lookups-to-their-team has succeeded.
Run started by GitHub user potiuk (triggered by potiuk).

Head commit for run:
279c8748b5394256c21c934fba84701dbf0b4754 / Jarek Potiuk <[email protected]>
Refuse an ambiguous secret id before any AWS lookup runs

Refusing only the team agnostic fall-through left the team scoped lookup
open to the same ambiguity it was meant to close: a caller in team 'a'
asking for 'b--c' builds exactly the name team 'a--b' builds for 'c', and
that lookup runs first, so the fall-through is never reached.

Deciding this at the entry points instead means the ambiguity is settled
before a name is built, in Secrets Manager and Parameter Store alike.

Report URL: https://github.com/apache/airflow/actions/runs/30675640212

With regards,
GitHub Actions via GitBox


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to