Skip to content

ci(debusine): export user for build signing key - #60

Open
Bjordis Collaku (bjordiscollaku) wants to merge 1 commit into
mainfrom
fix/debusine-user-signing-key
Open

ci(debusine): export user for build signing key#60
Bjordis Collaku (bjordiscollaku) wants to merge 1 commit into
mainfrom
fix/debusine-user-signing-key

Conversation

@bjordiscollaku

@bjordiscollaku Bjordis Collaku (bjordiscollaku) commented Aug 7, 2026

Copy link
Copy Markdown
Contributor

Context

Following the merge of debusine-action PR #103, Daily builds began failing after the Debusine build completed:

DEBUSINE_USER: parameter not set
fetch-signing-key: gave up waiting for a valid signing key

debusine-action PR #103 added post-build retrieval of the ephemeral workspace signing key to lib/build. The new signing-key fetch requires both DEBUSINE_USER and DEBUSINE_TOKEN, but the Build in Debusine workflow step exported only the token.

Resolution

Export the existing DEBUSINE_USER secret in the Build in Debusine step.

A Daily workflow has been dispatched from this branch to validate the fix: run 31141866797.

@github-advanced-security

Copy link
Copy Markdown

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

  • The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
  • Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
  • You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

PR #103 in debusine-action fetches the ephemeral workspace signing key
once Debusine reports a completed build. That helper requires both
DEBUSINE_USER and DEBUSINE_TOKEN, but this workflow only exported the
token. Export DEBUSINE_USER so the signing-key fetch can complete.

Signed-off-by: Bjordis Collaku <bcollaku@qti.qualcomm.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants