Skip to content

chore(ci): remove git tag --force from Wave release CI DEVOPS-1454#1056

Merged
ShahzebMahmood merged 1 commit into
masterfrom
chore/wave-no-force-tag-DEVOPS-1454
May 29, 2026
Merged

chore(ci): remove git tag --force from Wave release CI DEVOPS-1454#1056
ShahzebMahmood merged 1 commit into
masterfrom
chore/wave-no-force-tag-DEVOPS-1454

Conversation

@ShahzebMahmood

@ShahzebMahmood ShahzebMahmood commented May 28, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Removes [force] commit-message parsing and the -f flag from git tag / git push in the Wave release step.
  • Supply-chain hardening: a malicious commit can no longer overwrite an existing released tag by including [force] in its message.

DEVOPS-1454

@ShahzebMahmood ShahzebMahmood marked this pull request as ready for review May 28, 2026 17:33
@ShahzebMahmood ShahzebMahmood requested a review from bebosudo May 28, 2026 17:33
@ShahzebMahmood ShahzebMahmood merged commit 225a1b7 into master May 29, 2026
4 checks passed
@ShahzebMahmood ShahzebMahmood deleted the chore/wave-no-force-tag-DEVOPS-1454 branch May 29, 2026 10:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants