Distillation

Date: Sep 10, 2026

• 🔴 (03:36) An actions/checkout commit titled backport fixes to releases-v4 (#2524), authored by Aiqiao Yan (aiqiaoy) and committed by GitHub (web-flow), is verified and reports 163 total changes with 19 deletions; its author timestamp is 2026-07-16T19:43:47Z and parent is c915c33a16f01166c17c4e35fe1d4085a2d71adb. (meaning Jul 16, 2026)
• 🔴 (03:36) The releases-v4 backport modifies input-helper tests, dist/index.js, and src/input-helper.ts; the test file reports 83 changes with 3 deletions, while each of dist/index.js and src/input-helper.ts reports 40 changes with 32 additions.
• 🔴 (03:36) The releases-v4 input-helper backport adds a regression test named does not reclassify a ref as sha when a BOM is prefixed, using inputs.ref = '\uFEFF522d932fae5296da51fdf431934425ecf891c6a2'; the rationale is that default core.getInput trimming previously collapsed the BOM-prefixed fork branch into a bare 40-character SHA and bypassed the unsafe fork-PR checkout guard.
• 🔴 (03:36) The releases-v4 backport adds an unsafe PR checkout guard test suite with a fork payload whose base repository ID is 100, head repository ID is 200, head repository is attacker/fork, head SHA is 1234567890123456789012345678901234567890, and merge commit SHA is aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa; it tests that default self-checkout on pull_request_target is allowed but customized checkout of inputs.repository = 'attacker/fork' rejects with /Refusing to check out fork pull request code/.
• 🔴 (03:36) In the releases-v4 backport, src/input-helper.ts and bundled dist/index.js read the ref using core.getInput('ref', {trimWhitespace: false}), derive asciiTrimmedRef using .replace(/^[\t\n\v\f\r ]+|[\t\n\v\f\r ]+$/g, ''), and use the ASCII-trimmed value for 40-character SHA classification while preserving non-ASCII characters such as U+FEFF.
• 🔴 (03:36) In the releases-v4 backport, the unsafe checkout guard computes isDefaultCheckout = isWorkflowRepository && !core.getInput('ref'); unsafePrCheckoutHelper.assertSafePrCheckout(...) runs only when !isDefaultCheckout, because default self-checkout resolves to GitHub’s trusted triggering ref/commit.
• 🔴 (03:37) Current workspace changes add a lore-managed ## Long-term Knowledge section to AGENTS.md, directing readers to project-root .lore.md for gotchas, patterns, decisions, and architecture managed through https://github.com/BYK/loreai.
• 🔴 (03:37) Current README.md changes state that the repository is read-only except for release managers and that secret-bearing jobs use the protected production environment, which permits deployments only from main and disallows administrator bypass, thereby protecting environment-scoped credentials from arbitrary workflow refs.
• 🔴 (03:37) Current README.md changes state that SENTRY_INTERNAL_APP_PRIVATE_KEY and SENTRY_RELEASE_BOT_PRIVATE_KEY are organization-level secrets whose availability to other repositories is an organization-wide security concern; this repository cannot narrow that boundary, so Security must manage it separately.
• 🔴 (03:37) Current changes to docs/key_rotation_vault_changes.md reformat Markdown indentation and emphasis without changing the documented credential organization: OSS keys include PyPI Bot, Crates.io, DockerHub, Github (getsentry-bot), NPM Bot, Cocoapods, Nexus, Packagist, RubyGems, Code Signing Certificate, Bintray, Bot Apple ITC, and clojars.org; the SDK Low Security vault lists the SDK Team and remaining SDK-vault items.
• 🔴 (03:37) Current changes to docs/rfc.md are Markdown formatting fixes: nested-list indentation is normalized, a blank line is added before the repository-name/version sublist, and the file receives a final newline; the RFC’s substantive text remains unchanged.