Skip to content

chore: add pip uploaded-prior-to cooldown#223

Open
charles-turner-bot wants to merge 3 commits into
ACCESS-NRI:mainfrom
charles-turner-bot:chore/pip-uploaded-prior-to-delay
Open

chore: add pip uploaded-prior-to cooldown#223
charles-turner-bot wants to merge 3 commits into
ACCESS-NRI:mainfrom
charles-turner-bot:chore/pip-uploaded-prior-to-delay

Conversation

@charles-turner-bot
Copy link
Copy Markdown

Change summary

Add a minimal pip install cooldown for GitHub Actions / docs build paths by setting PIP_UPLOADED_PRIOR_TO=P7D (and a matching Read the Docs pip config where applicable).

This is a lightweight supply-chain hardening step for pip-based installs.

description: Location of the experiment on the target environment
env:
ARTIFACT_LOCAL_LOCATION: /opt/artifact
PIP_UPLOADED_PRIOR_TO: P7D
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The issue here is that it would prevent installing new versions of model-config-tests for a week..

Pixi has functionality to add exceptions for packages but can't really use pixi here because we use python virtual environments to install dependencies on top of an existing payu environment. Though this does mean it isn't installing many packages here as it's obtaining most of the packages from the payu environment.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants