Acceptance passes with unsigned capsules when CAPSULE_SIGN_KEY is missing #174

New Issue

2026-11-11T21:33:07Z

rajames commented

2026-11-11 21:33:07 +00:00

Found

.gitea/workflows/acceptance.yml (and build, nightly, release): with no CAPSULE_SIGN_KEY secret the step prints ::warning::... built unsigned and the gate passes. Right for a fork; for the gate into master it may not be what is meant (#139: capsule trust).

Done when

Decided: the gate into master refuses an unsigned build, or the warning stands and the reason is written in the workflow

🤖 Filed with Claude Code -- the code review of 2026-11-11, at 4d42d25c (Captain Bob, 2026-11-11: "File the review findings as issues"). Read, not run: each is to be confirmed by a test written first and seen to fail.

### Found `.gitea/workflows/acceptance.yml` (and build, nightly, release): with no `CAPSULE_SIGN_KEY` secret the step prints `::warning::... built unsigned` and the gate passes. Right for a fork; for the gate into `master` it may not be what is meant (#139: capsule trust). ### Done when - [ ] Decided: the gate into master refuses an unsigned build, or the warning stands and the reason is written in the workflow 🤖 Filed with [Claude Code](https://claude.com/claude-code) -- the code review of 2026-11-11, at `4d42d25c` (Captain Bob, 2026-11-11: "File the review findings as issues"). Read, not run: each is to be confirmed by a test written first and seen to fail.

rajames added the

labels 2026-11-11 21:33:08 +00:00

Sign in to join this conversation.