elixir-secure-coding icon indicating copy to clipboard operation
elixir-secure-coding copied to clipboard

"Race Condition" potential in setup flow

Open houllette opened this issue 1 year ago • 0 comments

If the purposed architecture for autograding is to have the grader run on all MRs to main branch, it will block folks who are trying to make adjustments to the curriculum before having engineers in their company run it themselves.

So a break glass would need to be made in the grader job to allow for bypassing it (which is also useful for bugs in grading to not cause undo problems on participants), but we need to be careful not to introduce a hole so folks who aren't passing the test can just bypass it without completing the training (especially if the training is being used for compliance purposes).

houllette avatar Sep 01 '22 17:09 houllette