skills/dotnet__skills
1
0
Fork 0
mirror of https://github.com/dotnet/skills.git synced 2026-09-20 09:49:54 +08:00
Code Issues Packages Projects Releases Wiki Activity

Run secondary-judge adapter from trusted staged copy

Browse Source 
The dual-judge re-score invoked node eng/vally-adapter/adapt.mjs from the
repo checkout, which a fork PR could tamper with. Route it through the
trusted staged copy (\/trusted-validator-src/...) like the
primary adapt.mjs call, restoring the fork-checkout trust boundary that
test_fork_checkout_is_blocked_and_adapter_code_is_trusted enforces.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Copilot-Session: e23e5efe-713f-4898-a158-8970f70fdcaf
This commit is contained in:
Abhitej John
2026-08-11 10:39:32 -07:00
parent 0a34b56326
commit 1105254fa7
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/evaluation-run.yml
+1 -1
View File
@@ -802,7 +802,7 @@ jobs:
if [ -n "$JUDGE2_MODEL" ] && [ "$JUDGE2_MODEL" != "$JUDGE_MODEL" ]; then
RESULTS_DIR2="${RESULTS_DIR/\/vally\//\/vally-crossjudge\/}"
echo "Re-scoring $PLUGIN transcripts with secondary judge $JUDGE2_MODEL -> $RESULTS_DIR2"
node eng/vally-adapter/adapt.mjs \
node "$RUNNER_TEMP/trusted-validator-src/eng/vally-adapter/adapt.mjs" \
--experiment-dir "$RUN_DIR" \
--output-root "$RESULTS_DIR2" \
--vally "vally" \