https://hyc-runtimes-jenkins.swg-devops.com/job/test.getDependency/ is failing SHA256 verification for multiple jtreg tarballs
- Dominant language
- Java
- Stars
- 22
- Forks
- 114
- Avg merge
- 4d 2h
- Merged PRs (30d)
- 8
Description
https://hyc-runtimes-jenkins.swg-devops.com/job/test.getDependency/ is failing for multiple jtreg tarballs.
SHA256 verification for multiple jtreg tarballs pulled from ci.adoptium.net/job/dependency_pipeline/lastSuccessfulBuild. In each case, the downloaded tarball is internally self-consistent (its own .sha256sum.txt from the same build matches the actual bytes), but doesn't match the hash pinned in the script.
**Impact:**
This breaks https://hyc-runtimes-jenkins.swg-devops.com/job/test.getDependency/ and any downstream pipeline that calls getDependencies.pl has a checksum failure, since the artifact at lastSuccessfulBuild isn't or may not be stable for a version-pinned dependency name.
Contributor guide
Research direction
Start with getDependencies.pl and the test.getDependency job, then compare the pinned SHA256 values with the jtreg tarballs and .sha256sum.txt produced by dependency_pipeline/lastSuccessfulBuild. Confirm whether the version-pinned artifact reference is stable and update the dependency handling so the downstream pipeline completes without checksum failures.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- perl
- Domain
- build-system, ci-cd
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Active
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100