You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
We noticed that Digger backend can still get triggered using commentOps on old merged PRs.
If the merged PRs feature branches are deleted, the backend is not able to read digger.yml (that's fine)
However, when restoring the branch, we can trigger the backend with digger plan or digger apply and it will run successfully, the output will then show that resources will be destroyed which is expected since the old branch doesn't have the latest resources in the main branch. Moreover, digger apply can be run without any restrictions.
This is bad and a serious issue as it can result in the destruction of existing infrastructure
The text was updated successfully, but these errors were encountered:
Hi @raouf-xh for future viewer context you have been onboarded onto next.digger.dev which has a flow of apply after merge by default. Please note that if you move to this repo you need to ensure to uninstall the community edition github app since the new team UI gh app would have been installed on the same repository
We will try to do a better job of explaining it in the next.digger.dev UI. Please let me know if it resolves your issue!
We noticed that Digger backend can still get triggered using commentOps on old merged PRs.
If the merged PRs feature branches are deleted, the backend is not able to read digger.yml (that's fine)
However, when restoring the branch, we can trigger the backend with
digger plan
ordigger apply
and it will run successfully, the output will then show that resources will be destroyed which is expected since the old branch doesn't have the latest resources in the main branch. Moreover,digger apply
can be run without any restrictions.This is bad and a serious issue as it can result in the destruction of existing infrastructure
The text was updated successfully, but these errors were encountered: