Noah S-C

Replaces inlining weaveworks/ignite with interacting with the (forked) direct API surface of ignite-as-a-library. Benefits here, benefits there, yes lol and ok ## Test plan Tested locally, need to reinstate unit...

lookup repo permissions from SRC_ACCESS_TOKEN for LSIF upload

11

This PR allows determining whether a user can upload LSIF for a repository from the SRC_ACCESS_TOKEN, instead of having to provide a Github Access Token ## Test plan TODO: we...

Maek gud ## Test plan

fix: remove module cache in sandbox plugin

4

This module cache came up as problematic with the presence of multiple versions of a package in a given dependency closure. In our case, we have `minipass` 4.2.8 and 7.0.4...

fix: remapping of relative-path imports marked `external` that don't correspond to a filesystem path in sandbox

2

We have a ts_project target part of an npm_package that includes the following snippet: ```ts const postcssConfig = process.env.BAZEL_BINDIR ? require('../../../../../../../../postcss.config') // if in bazel : require('../../../../postcss.config') // if outside...

pass correct apko binary runfiles path to apko_run launcher

2

In https://github.com/sourcegraph/sourcegraph, we've [defined our own apko toolchain](https://github.com/sourcegraph/sourcegraph/pull/60785/files#diff-7fc57714ef13c3325ce2a1130202edced92fcccc0c6db34a72f7b57f60d552a3R350-R356) to integrate a patch to [go-apk](https://github.com/chainguard-dev/go-apk/pull/216) for the apko binary. Due to this, we pass `register = False` to `apko_register_toolchains`. This surfaced...

We started seeing the following errors on all our `apko_image` targets: ``` (10:27:41) ERROR: /mnt/ephemeral/workdir/sourcegraph/sourcegraph/cmd/batcheshelper/BUILD.bazel:78:11: Action cmd/batcheshelper/wolfi_base_apko failed: missing input file '@@batcheshelper_apko_lock//:lockfile_copy' (10:27:41) ERROR: /mnt/ephemeral/workdir/sourcegraph/sourcegraph/cmd/batcheshelper/BUILD.bazel:78:11: Action cmd/batcheshelper/wolfi_base_apko failed: 1 input...

`docker load` fails with lsetxattr com.apple.provenance /manifest.json: operation not supported on Ventura & later

4

### Description Starting with macOS Ventura 13, macOS adds additional xattr metadata to downloaded files. The following article explains this in more detail: https://eclecticlight.co/2023/05/10/how-macos-now-tracks-the-provenance-of-apps/ We've observed on some systems, when...

Keep track of each persons LXD container and running containers

1

Containers can possibly be collected at run time rather than storing. LXD containers can be stored in Consul service discovery?

Incl.: - Project - Containers - PATCH updates (spicy)