Scriptworker

--------------------

.. _added-53:

Added
~~~~~

- ``scriptworker.task.get_parent_task_id`` to support the new
``task.extra.parent`` breadcrumb.
- ``scriptworker.cot.verify.ACTION_MACH_COMMANDS`` and
``cot.verify.PARENT_TASK_TYPES`` to separate action task verification
from decision task verification.
- ``scriptworker.cot.verify.ChainOfTrust.parent_task_id`` to find the
``parent_task_id`` later.
- ``scriptworker.cot.verify.LinkOfTrust.parent_task_id`` to find the
``parent_task_id`` later.
- added a new ``action`` task type. This uses the same sha allowlist as
the ``decision`` task type.
- ``scriptworker.cot.verify.is_action``, since differentiating between
a decision task and an action task requires some task definition
introspection.
- ``verify_firefox_decision_command`` now takes a ``mach_commands``
kwarg; for action tasks, we set this to ``ACTION_MACH_COMMANDS``
- ``verify_action_task`` verifies the action task command.
- ``verify_parent_task`` runs the checks previously in
``verify_decision_task``; we run this for both action and decision
tasks.

.. _changed-44:

Changed
~~~~~~~

- ``find_sorted_task_dependencies`` now uses the ``parent_task_id``
rather than the ``decision_task_id`` for its ``parent_tuple``.
- ``download_firefox_cot_artifacts`` now downloads ``task-graph.json``
from action tasks as well as decision tasks
- ``verify_decision_task`` now only checks the command. The other
checks have been moved to ``verify_parent_task``.
- decision tasks now run ``verify_parent_task``.

.. _fixed-41:

Fixed
~~~~~

- Updated ``README.md`` to specify ``tox`` rather than
``python setup.py test``

.. _section-91:

--------------------

.. _added-54:

Added
~~~~~

- added maple to the list of privileged branches.

.. _changed-45:

Changed
~~~~~~~

- changed the default ``poll_interval`` to 10.

.. _fixed-42:

Fixed
~~~~~

- updated post-task sleep to 1; we only sleep ``poll_interval`` only
between polls.

.. _removed-20:

Removed
~~~~~~~

- removed date from the list of privileged branches.

.. _section-92:

--------------------

.. _fixed-43:

Fixed
~~~~~

- no longer add a decision task’s decision task to the chain of trust
to verify. This was a regression.

.. _removed-21:

Removed
~~~~~~~

- cleaned up aurora references from everything but pushapk, which uses
it.

.. _section-93:

--------------------

.. _fixed-44:

Fixed
~~~~~

- specify the correct docker shas for the new docker images.

.. _section-94:

--------------------

.. _fixed-45:

Fixed
~~~~~

- fixed new false error raised on missing command in payload

.. _section-95:

--------------------

.. _fixed-46:

Fixed
~~~~~

- updated cot verification to allow for the new docker-image and
decision paths (/home/worker -> /builds/worker)

.. _section-96: