Skip to content

security(relay): refresh v0.15 advisory evidence - #535

Merged
jeremi merged 1 commit into
mainfrom
codex/refresh-relay-advisory-beta20
Jul 28, 2026
Merged

jeremi merged 1 commit into
mainfrom
codex/refresh-relay-advisory-beta20

Conversation

@jeremi

@jeremi jeremi commented Jul 28, 2026

Copy link
Copy Markdown
Member

Summary

  • bind the three existing non-fixable Relay libc advisory reviews to the exact v0.15.0 beta-20 candidate image and binaries
  • retain every previously reviewed native runtime digest
  • record the exact candidate source and review date

Verification

  • exact candidate image policy: blocking=3 fixable=0 reviewed=3 unreviewed=0 expired=0 invalid=0 stale=0
  • python3 release/scripts/test_check_advisory_checker_copies.py (3 passed)
  • python3 release/scripts/test_registry_release.py (92 passed)
  • python3 release/scripts/check-gates-inventory.py (168 gates)
  • git diff --check

This is the only correction needed after candidate run 30359937593 reached the advisory gates: Notary passed, Relay failed solely because its v0.15 binary digests had not been refreshed.

Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>
@jeremi
jeremi enabled auto-merge (squash) July 28, 2026 13:18

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 5cdfac4b91

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@jeremi
jeremi merged commit 0e3f473 into main Jul 28, 2026
34 checks passed
@jeremi
jeremi deleted the codex/refresh-relay-advisory-beta20 branch July 28, 2026 13:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant