verify: fail fast and never hang #345

Merged

vkobel merged 3 commits from refs/pull/345/head into main

2026-07-07 12:57:51 +00:00

vkobel commented

2026-06-30 12:23:14 +00:00

(Migrated from codeberg.org)

caution verify could waste 10+ minutes (or hang forever) before telling you something was wrong. Now it checks the cheap stuff first and bounds every network call.

Preflight the app source ref (git ls-remote) before building — missing branch fails in seconds, not minutes
Preflight enclave + framework archives too (HEAD request) — a 404'd commit fails fast
Added timeouts to the attestation call and archive downloads — they were unbounded and could hang forever
Guarded enclave-builder's ls-remote so it can't hang on a credential prompt
Hardened the commit-SHA matching + added tests

caution verify could waste 10+ minutes (or hang forever) before telling you something was wrong. Now it checks the cheap stuff first and bounds every network call. - Preflight the app source ref (git ls-remote) before building — missing branch fails in seconds, not minutes - Preflight enclave + framework archives too (HEAD request) — a 404'd commit fails fast - Added timeouts to the attestation call and archive downloads — they were unbounded and could hang forever - Guarded enclave-builder's ls-remote so it can't hang on a credential prompt - Hardened the commit-SHA matching + added tests

No reviewers

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

public/platform!345

No description provided.

Rows
Columns