What the developer wrote
Authored by Craig Raw
fix debug step for windows
What changed, and why it matters
This commit only adjusts a temporary debugging step in the project's automated build workflow. It makes the debug script more tolerant of Windows paths and failures, and prints extra diagnostic information. There is no change to the wallet application code, no security fix, and no malicious-looking behavior.
No action required. This is a benign CI debugging improvement. Reviewers may optionally verify the debug step does not leak secrets, though the printed env vars are limited to GRADLE/DEVELOCITY/BUILD_SCAN prefixes.
Security signals we found
No security-relevant code changes
CI workflow diagnostic step only
No dependency version changes
No authentication, cryptography, or network trust changes
Evidence from the diff
The change is confined to .github/workflows/package.yaml. It adds continue-on-error: true and set +e to a GitHub Actions debug step, expands filesystem search paths to include Windows locations (C:/Users, D:/a), captures curl output to a temp file, and prints additional environment variables. The step is purely diagnostic, investigating why a specific Maven artifact (opentelemetry-bom-1.55.0.module) may not match Gradle verification metadata. No build logic, dependency resolution, or application code is altered.
Changed components
.github/workflows/package.yamlInspect captured patch +27 / −4
diff --git a/.github/workflows/package.yaml b/.github/workflows/package.yaml
index 82ee14c..8437463 100644
--- a/.github/workflows/package.yaml
+++ b/.github/workflows/package.yaml
@@ -27,17 +27,40 @@ jobs:
run: ./gradlew -v
- name: Debug opentelemetry-bom bytes seen by this runner
shell: bash
+ continue-on-error: true
run: |
+ set +e
+ echo "=== Runner: $RUNNER_OS $RUNNER_ARCH ==="
+ echo ""
echo "=== Any cached copy on the runner (before build downloads anything): ==="
- find ~ /opt -name 'opentelemetry-bom-1.55.0.module' 2>/dev/null | while read f; do
- echo "$f size=$(wc -c < "$f") sha512=$(shasum -a 512 "$f" | cut -d' ' -f1)"
+ for base in "$HOME" /opt /usr/local /Users /home 'C:/Users' 'D:/a'; do
+ [ -d "$base" ] || continue
+ find "$base" -name 'opentelemetry-bom-1.55.0.module' 2>/dev/null | while read f; do
+ echo "$f"
+ echo " size=$(wc -c < "$f" 2>/dev/null | tr -d ' ')"
+ echo " sha512=$(shasum -a 512 "$f" 2>/dev/null | cut -d' ' -f1)"
+ done
done
+ echo ""
echo "=== Fresh download from Maven Central (from this runner): ==="
- curl -sL https://repo1.maven.org/maven2/io/opentelemetry/opentelemetry-bom/1.55.0/opentelemetry-bom-1.55.0.module | shasum -a 512
+ curl -sL https://repo1.maven.org/maven2/io/opentelemetry/opentelemetry-bom/1.55.0/opentelemetry-bom-1.55.0.module -o /tmp/otel.module 2>/dev/null || echo "(curl failed)"
+ if [ -f /tmp/otel.module ]; then
+ echo "size=$(wc -c < /tmp/otel.module | tr -d ' ')"
+ echo "sha512=$(shasum -a 512 /tmp/otel.module | cut -d' ' -f1)"
+ fi
+ echo ""
echo "=== Pinned in verification-metadata.xml: ==="
grep -A2 'opentelemetry-bom-1.55.0.module' gradle/verification-metadata.xml | head -3
+ echo ""
echo "=== Gradle init scripts present: ==="
- find ~ /opt -path '*gradle*init.d*' -type f 2>/dev/null | head -20
+ for base in "$HOME/.gradle" /opt /usr/local 'C:/Users' 'D:/a'; do
+ [ -d "$base" ] || continue
+ find "$base" -path '*init.d*' -type f 2>/dev/null | head -10
+ done
+ echo ""
+ echo "=== GRADLE_* / DEVELOCITY_* env: ==="
+ env | grep -iE '^(GRADLE|DEVELOCITY|BUILD_SCAN)' || echo "(none)"
+ exit 0
- name: Build with Gradle
run: ./gradlew jpackage
- name: Codesign, package and notarize macOS distribution
Why this scored 12/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.