Skip to content

chore(octosts): remove the package-version-check identities - #143

Merged
jml merged 1 commit into
wolfi-dev:mainfrom
dnegreira:davidnegreira/auto-1829-retire-package-version-check
Nov 4, 2026
Merged

jml merged 1 commit into
wolfi-dev:mainfrom
dnegreira:davidnegreira/auto-1829-retire-package-version-check

Conversation

@dnegreira

@dnegreira dnegreira commented Nov 4, 2026 •

Copy link
Copy Markdown
Member

Summary

Removes the package-version-check OctoSTS trust policies: .github/chainguard/package-version-check.sts.yaml and .github/chainguard/staging-package-version-check.sts.yaml.

package-version-check is retired (AUTO-1829). Both of its deployments are destroyed. The staging apply finished 2026-11-04 09:50Z and the prod apply 10:13Z. Neither environment has any package-version-check services left, so nothing exchanges tokens against these policies. The staging check it posted on wolfi-dev/os was not required by branch protection.

The companion chainguard-dev/.github#358 removes the prod policy for chainguard-dev repositories.

Relates to AUTO-1829

🤖 Generated with Claude Code

package-version-check is retired (AUTO-1829). Its prod and staging
deployments are destroyed. Its check on wolfi-dev/os is not required
by branch protection, and nothing exchanges tokens against these
trust policies.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: David Negreira <david.negreira@chainguard.dev>
@dnegreira
dnegreira force-pushed the davidnegreira/auto-1829-retire-package-version-check branch from 685c71c to 5b95349 Compare November 4, 2026 10:42
dnegreira added a commit to chainguard-dev/.github that referenced this pull request Nov 4, 2026
## Summary

Removes the package-version-check OctoSTS trust policy:
`.github/chainguard/package-version-check.sts.yaml`.

package-version-check is retired (AUTO-1829). Both of its deployments
are destroyed. The staging apply finished 2026-11-04 09:50Z and the prod
apply 10:13Z. Neither environment has any package-version-check services
left, so nothing exchanges tokens against this policy. No branch
protection requires its check.

The companion wolfi-dev/.github#143 removes the policies for
`wolfi-dev/os`.

Relates to AUTO-1829

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Signed-off-by: David Negreira <david.negreira@chainguard.dev>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
@dnegreira
dnegreira marked this pull request as ready for review November 4, 2026 12:36
@jml
jml merged commit b0a6cba into wolfi-dev:main Nov 4, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants