Verify and keep signed Flow receipts issue #37 closed: completed andymccall opened this · 0 comments
closed by change cc19697f8871 ·
andymccall referenced by change a0d4bbfbedd1 on run-one-job ·
closed by change cc19697f8871 ·
andymccall referenced by change a0d4bbfbedd1 on run-one-job ·
Backlog P4c, hub side. Check the signed receipt a runner sends with finish: it must match the job, its state and repository, and the key the runner's token first used. Keep it in the repository and show it on the run and the change, with a download for
oxy receipt verify.