[GitHub] [tvm] areusch commented on a diff in pull request #12604: [ci] Add mechanism for trust on certain CI scripts

[GitBox <gi...@apache.org>]

areusch commented on code in PR #12604:
URL: https://github.com/apache/tvm/pull/12604#discussion_r955463717


##########
ci/jenkins/Jenkinsfile.j2:
##########
@@ -103,6 +103,19 @@ s3_prefix = "tvm-jenkins-artifacts-prod/tvm/${env.BRANCH_NAME}/${env.BUILD_NUMBE
 {% set aws_default_region = "us-west-2" %}
 {% set aws_ecr_url = "dkr.ecr." + aws_default_region + ".amazonaws.com" %}
 
+// Any scripts that run on the bare host and not inside a Docker container
+// (especially those that access secrets) should be in this list so that only
+// trusted versions of these files are used in CI
+{% set trusted_files = [

Review Comment:
   should this just be a glob for simplicity?



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@tvm.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org