Skip to content

fix(status-all): favor verified build per signer, skip hash-less builds - #139

Merged
meumar-osec merged 3 commits into
otter-sec:masterfrom
solana-mobile:stegaBOB/fix/status-all
Jul 13, 2026
Merged

fix(status-all): favor verified build per signer, skip hash-less builds#139
meumar-osec merged 3 commits into
otter-sec:masterfrom
solana-mobile:stegaBOB/fix/status-all

Conversation

@stegaBOB

Copy link
Copy Markdown
Contributor

No description provided.

stegaBOB and others added 3 commits July 10, 2026 17:55
/status-all picked each signer's most recent completed build by
completed_at, so a newer unverified build -- or a hash-less "completed"
row imported by the v2 migration -- could shadow the verified one,
reporting a program unverified while /status reported it verified.

Per signer, prefer the build whose executable_hash matches the current
on-chain hash (the verified one), then most recent; skip builds with no
executable_hash, which are never a verification.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
The testcontainers postgres image lacks gen_random_uuid(); bind a
uuid::Uuid::new_v4() for the raw hash-less build insert instead.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@meumar-osec
meumar-osec merged commit b141ee1 into otter-sec:master Jul 13, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants