Skip to content

Share resource bundle via organization secret - #51

Merged
m-hu merged 1 commit into
masterfrom
chore/org-secret-bundle
Nov 4, 2026
Merged

m-hu merged 1 commit into
masterfrom
chore/org-secret-bundle

Conversation

@m-hu

@m-hu m-hu commented Nov 4, 2026

Copy link
Copy Markdown
Collaborator

Rebuild tests/resources.tar.xz.asc from current resource/shared (incl. T246 additions; clojure bundle was stale since Oct 29) under a fresh passphrase, and move RESOURCES_PASSPHRASE from a repository secret to the hhh-pa organization secret shared by the clojure/python/ocaml snippet repos (one passphrase, identical bundles).

  • New bundle verified: decrypts with the org secret, 3530 files identical to resource/shared, clean macOS metadata (no AppleDouble files or xattr headers, zero tar warnings on Linux)
  • Repo-level RESOURCES_PASSPHRASE secrets already deleted in all three repos; org secret (visibility: all) is live
  • Sibling PRs/commits: python-code-snippet master, ocaml-code-snippet master (direct push)

Rebuild tests/resources.tar.xz.asc from current resource/shared (incl.
T246 additions; clojure bundle was stale since Oct 29) under a fresh
passphrase, and move RESOURCES_PASSPHRASE from a repository secret to
the hhh-pa organization secret shared by the clojure/python/ocaml
snippet repos (one passphrase, identical bundles). Clean macOS metadata
from the tarball (no AppleDouble files or xattr headers).
@m-hu
m-hu merged commit 5cc7903 into master Nov 4, 2026
5 checks passed
m-hu pushed a commit to hhh-pa/clojure that referenced this pull request Nov 4, 2026
…ret)

The org-level RESOURCES_PASSPHRASE decrypts only the bundle rebuilt in
hhh-pa/clojure-code-snippet#51; the old pin predates the rotation, so
every recipes leg failed in gpg with 'Bad session key'.

AI-Tool: Muse Code (Meta Muse Spark)
@github-actions

github-actions Bot commented Nov 4, 2026 •

Copy link
Copy Markdown

🐰 Bencher Report

Projectclojure-code-snippet
Branchchore/org-secret-bundle
Commit172548a
ReportTestbedAdapterStatus
1ubuntu-latest-clojure-rsJSON✅ No Alerts
2ubuntu-latest-jvmJSON✅ No Alerts

⚠️ WARNING: Truncated view!

The full continuous benchmarking report exceeds the maximum length allowed on this platform.

m-hu pushed a commit to hhh-pa/clojure that referenced this pull request Nov 4, 2026
…ret)

The org-level RESOURCES_PASSPHRASE decrypts only the bundle rebuilt in
hhh-pa/clojure-code-snippet#51; the old pin predates the rotation, so
every recipes leg failed in gpg with 'Bad session key'.

AI-Tool: Muse Code (Meta Muse Spark)
m-hu added a commit to hhh-pa/clojure that referenced this pull request Nov 5, 2026
…ret)

The org-level RESOURCES_PASSPHRASE decrypts only the bundle rebuilt in
hhh-pa/clojure-code-snippet#51; the old pin predates the rotation, so
every recipes leg failed in gpg with 'Bad session key'.

AI-Tool: Muse Code (Meta Muse Spark)
m-hu added a commit to hhh-pa/clojure that referenced this pull request Nov 5, 2026
…ret)

The org-level RESOURCES_PASSPHRASE decrypts only the bundle rebuilt in
hhh-pa/clojure-code-snippet#51; the old pin predates the rotation, so
every recipes leg failed in gpg with 'Bad session key'.

AI-Tool: Muse Code (Meta Muse Spark)
m-hu added a commit to hhh-pa/clojure that referenced this pull request Nov 5, 2026
…ret)

The org-level RESOURCES_PASSPHRASE decrypts only the bundle rebuilt in
hhh-pa/clojure-code-snippet#51; the old pin predates the rotation, so
every recipes leg failed in gpg with 'Bad session key'.

AI-Tool: Muse Code (Meta Muse Spark)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant