remote build: use the project's privacy for repos and recipes
Metadata
Current evaluation
Remote builds now preserve project privacy for repositories and recipes; fixed by merged PR #5238 and released in Snapcraft 8.6.2.
Resolution: closed resolved
Reason: PR #5238 was merged and incorporated canonical/craft-application#615, preventing private remote-build source code from being exposed. The maintainer confirmed the fix would ship in Snapcraft 8.6.2.
Evaluated by: mr-cal-bot
No scores available.
Issue body
### What needs to get done
* bump craft-application, craft-platforms, and craft-providers to bring in https://github.com/canonical/craft-application/pull/615
* update documentation to mention that an ssh key must be added to launchpad for private builds
* manually test that snapcraft can access the host ssh agent when installed as a snap
### Why it needs to get done
To fix an issue where the source code for private builds would be accessible when the remote build is in progress.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Remote builds now preserve project privacy for repositories and recipes; fixed by merged PR #5238 and released in Snapcraft 8.6.2. | |
| stealth/space-bunny-alpha | — | closed resolved | Remote builds now preserve project privacy for repositories and recipes via merged PR #5238 and craft-application#615; released in Snapcraft 8.6.2. | |
| stealth/space-bunny-alpha | — | closed resolved | Remote builds now preserve project privacy for Launchpad repositories and recipes via merged PR #5238; the fix shipped in Snapcraft 8.6.2. | |
| stealth/space-bunny-alpha | — | closed resolved | Fixed by merged PR #5238, preserving project privacy for remote repositories and recipes and released in Snapcraft 8.6.2. | |
| stealth/space-bunny-alpha | — | closed resolved | Fixed by merged PR #5238 (craft-application#615), which uses the project's privacy for remotely created Launchpad repos/recipes so private-build sources stay hidden; shipped in Snapcraft 8.6.2. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged in canonical/snapcraft#5238 using craft-application#615; remote builds now preserve project privacy, with the fix released in Snapcraft 8.6.2. | |
| stealth/space-bunny-alpha | — | closed resolved | Fixed by merged PR #5238, incorporating craft-application#615 so remote-build repositories and recipes honor project privacy; released in Snapcraft 8.6.2. | |
| qwen/qwen3.6-35b-a3b | — | — | Resolved in PR #5238 and released in Snapcraft 8.6.2. Remote builds now enforce project privacy by updating craft dependencies, documenting SSH key requirements, and verifying host agent access to prevent source code exposure. | |
| qwen/qwen3.6-35b-a3b | — | — | Resolved via PR #5238 and released in Snapcraft 8.6.2. The fix updates craft dependencies and documentation to enforce project privacy for remote builds, preventing source code exposure during execution. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Resolved via PR #5238. Remote builds now enforce project privacy settings on repositories and recipes, preventing source code exposure during private builds. Included in Snapcraft 8.6.2. |
Update history
No update history recorded yet.
Related work
-
Likely Fixed By:
snapcraft#5238
(confidence 100%)
Merged fix applying project privacy to remote repositories and recipes.
-
Related To:
canonical/craft-application#615
(confidence 95%)
Upstream privacy change incorporated by Snapcraft PR #5238.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #5238 fix(remotebuild): use the project's privacy for repos and recipes | snapcraft | merged | Merged #5238 incorporated craft-application#615, preserving project privacy for remotely created Launchpad repositories and recipes; the fix shipped in Snapcraft 8.6.2. | |
| #615 fix(launchpad): use the project's privacy for repos and recipes | craft-application | merged | Merged PR #615 in commit b394bdd6, fixing remote-builder uploads so Launchpad repositories and recipes inherit the project's privacy instead of becoming public. | |
| #614 Remote build: Uploaded repository should have the same information type as the project | craft-application | closed | Fixed by merged PR #615 (commit b394bdd6), making remote-build repositories and recipes inherit the project's Launchpad privacy. |