remote build: use the project's privacy for repos and recipes
Metadata
Current evaluation
Resolved in PR #5238 and released in Snapcraft 8.6.2. Remote builds now enforce project privacy by updating craft dependencies, documenting SSH key requirements, and verifying host agent access to prevent source code exposure.
Suggested action: —
No scores available.
Issue body
### What needs to get done
* bump craft-application, craft-platforms, and craft-providers to bring in https://github.com/canonical/craft-application/pull/615
* update documentation to mention that an ssh key must be added to launchpad for private builds
* manually test that snapcraft can access the host ssh agent when installed as a snap
### Why it needs to get done
To fix an issue where the source code for private builds would be accessible when the remote build is in progress.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | — | Resolved in PR #5238 and released in Snapcraft 8.6.2. Remote builds now enforce project privacy by updating craft dependencies, documenting SSH key requirements, and verifying host agent access to prevent source code exposure. | |
| qwen/qwen3.6-35b-a3b | — | — | Resolved via PR #5238 and released in Snapcraft 8.6.2. The fix updates craft dependencies and documentation to enforce project privacy for remote builds, preventing source code exposure during execution. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Resolved via PR #5238. Remote builds now enforce project privacy settings on repositories and recipes, preventing source code exposure during private builds. Included in Snapcraft 8.6.2. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Fixed in PR #5238 and released in Snapcraft 8.6.2. Remote builds now enforce project privacy for repositories and recipes, preventing source code exposure. Dependencies updated and docs adjusted to require SSH keys. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #5238 fix(remotebuild): use the project's privacy for repos and recipes | snapcraft | merged | Merged PR resolves #5221 by ensuring the remote-builder respects project privacy for repositories and recipes. Incorporates a fix from craft-application PR #615. Approved by three reviewers, passed CI, and modified six files. | |
| #615 fix(launchpad): use the project's privacy for repos and recipes | craft-application | merged | Merged fix ensuring the remote-builder respects project privacy when creating repositories and recipes. The backward-compatible change adds a deprecation warning for public projects and resolves issue #614 after passing CI and two approvals. |