From 3941b800076fa12bd33e19e941b4583fa2bc9456 Mon Sep 17 00:00:00 2001 From: oppiliappan Date: Mon, 11 Aug 2025 08:33:13 +0100 Subject: [PATCH] spindle: ensure that event source is identical to the repo's knot thanks @winter.bsky.social for the report! Signed-off-by: oppiliappan --- spindle/server.go | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/spindle/server.go b/spindle/server.go index 59e52fe2..f04b2068 100644 --- a/spindle/server.go +++ b/spindle/server.go @@ -242,6 +242,10 @@ func (s *Spindle) processPipeline(ctx context.Context, src eventconsumer.Source, return fmt.Errorf("no repo data found") } + if src.Key() != tpl.TriggerMetadata.Repo.Knot { + return fmt.Errorf("repo knot does not match event source: %s != %s", src.Key(), tpl.TriggerMetadata.Repo.Knot) + } + // filter by repos _, err = s.db.GetRepo( tpl.TriggerMetadata.Repo.Knot, -- 2.51.2