)]}'
{"id":"openstack%2Fironic-python-agent~998479","triplet_id":"openstack%2Fironic-python-agent~master~I595ba9bdc305ea928ac2f6e26ff24338dbd03450","project":"openstack/ironic-python-agent","branch":"master","topic":"security-bootc-master","attention_set":{},"removed_from_attention_set":{"11655":{"account":{"_account_id":11655,"name":"Julia Kreger","email":"juliaashleykreger@gmail.com","username":"jkreger","status":"Flying to the moon with a Jetpack!"},"last_update":"2026-07-23 16:14:49.000000000","reason":"\u003cGERRIT_ACCOUNT_11655\u003e replied on the change","reason_account":{"_account_id":11655,"name":"Julia Kreger","email":"juliaashleykreger@gmail.com","username":"jkreger","status":"Flying to the moon with a Jetpack!"}}},"hashtags":["CVE-2026-54422","ironic-week-prio"],"change_id":"I595ba9bdc305ea928ac2f6e26ff24338dbd03450","subject":"Do not expose registry pull secret to bootc container","status":"MERGED","created":"2026-07-23 14:01:58.000000000","updated":"2026-07-24 04:33:48.000000000","submitted":"2026-07-23 18:01:54.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":1,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"998479-security-bootc-master","meta_rev_id":"5719a5f1e3bd80c687470b3e1e02f20ec02b2e9e","_number":998479,"virtual_id_number":998479,"owner":{"_account_id":11655,"name":"Julia Kreger","email":"juliaashleykreger@gmail.com","username":"jkreger","status":"Flying to the moon with a Jetpack!"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":11655,"name":"Julia Kreger","email":"juliaashleykreger@gmail.com","username":"jkreger","status":"Flying to the moon with a Jetpack!"},{"value":0,"_account_id":35099,"name":"Jakub Jelinek","email":"jakub.jelinek@cern.ch","username":"kubajj"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2026-07-23 18:01:54.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":15519,"name":"Iury Gregory Melo Ferreira","display_name":"Iury Gregory","email":"iurygregory@gmail.com","username":"iurygregory"}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":35099,"name":"Jakub Jelinek","email":"jakub.jelinek@cern.ch","username":"kubajj"},"all":[{"value":0,"_account_id":11655,"name":"Julia Kreger","email":"juliaashleykreger@gmail.com","username":"jkreger","status":"Flying to the moon with a Jetpack!"},{"value":2,"date":"2026-07-23 15:29:26.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":35099,"name":"Jakub Jelinek","email":"jakub.jelinek@cern.ch","username":"kubajj"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":2,"date":"2026-07-23 15:14:52.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":15519,"name":"Iury Gregory Melo Ferreira","display_name":"Iury Gregory","email":"iurygregory@gmail.com","username":"iurygregory"}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":11655,"name":"Julia Kreger","email":"juliaashleykreger@gmail.com","username":"jkreger","status":"Flying to the moon with a Jetpack!"},"all":[{"value":1,"date":"2026-07-23 16:14:49.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":11655,"name":"Julia Kreger","email":"juliaashleykreger@gmail.com","username":"jkreger","status":"Flying to the moon with a Jetpack!"},{"value":0,"_account_id":35099,"name":"Jakub Jelinek","email":"jakub.jelinek@cern.ch","username":"kubajj"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":15519,"name":"Iury Gregory Melo Ferreira","display_name":"Iury Gregory","email":"iurygregory@gmail.com","username":"iurygregory"}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true},"Backport-Candidate":{"all":[{"value":0,"_account_id":11655,"name":"Julia Kreger","email":"juliaashleykreger@gmail.com","username":"jkreger","status":"Flying to the moon with a Jetpack!"},{"value":0,"_account_id":35099,"name":"Jakub Jelinek","email":"jakub.jelinek@cern.ch","username":"kubajj"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":15519,"name":"Iury Gregory Melo Ferreira","display_name":"Iury Gregory","email":"iurygregory@gmail.com","username":"iurygregory"}],"values":{"-1":"Do Not Backport"," 0":"Backport Review Needed","+1":"Should Backport"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"CC":[{"_account_id":4571,"name":"Steve Baker","email":"sbaker@redhat.com","username":"steve-stevebaker"}],"REVIEWER":[{"_account_id":11655,"name":"Julia Kreger","email":"juliaashleykreger@gmail.com","username":"jkreger","status":"Flying to the moon with a Jetpack!"},{"_account_id":15519,"name":"Iury Gregory Melo Ferreira","display_name":"Iury Gregory","email":"iurygregory@gmail.com","username":"iurygregory"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":35099,"name":"Jakub Jelinek","email":"jakub.jelinek@cern.ch","username":"kubajj"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-07-23 14:01:58.000000000","updated_by":{"_account_id":11655,"name":"Julia Kreger","email":"juliaashleykreger@gmail.com","username":"jkreger","status":"Flying to the moon with a Jetpack!"},"reviewer":{"_account_id":4571,"name":"Steve Baker","email":"sbaker@redhat.com","username":"steve-stevebaker"},"state":"CC"},{"updated":"2026-07-23 14:30:34.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"CC"},{"updated":"2026-07-23 15:14:52.000000000","updated_by":{"_account_id":15519,"name":"Iury Gregory Melo Ferreira","display_name":"Iury Gregory","email":"iurygregory@gmail.com","username":"iurygregory"},"reviewer":{"_account_id":15519,"name":"Iury Gregory Melo Ferreira","display_name":"Iury Gregory","email":"iurygregory@gmail.com","username":"iurygregory"},"state":"REVIEWER"},{"updated":"2026-07-23 15:26:39.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2026-07-23 15:29:26.000000000","updated_by":{"_account_id":35099,"name":"Jakub Jelinek","email":"jakub.jelinek@cern.ch","username":"kubajj"},"reviewer":{"_account_id":35099,"name":"Jakub Jelinek","email":"jakub.jelinek@cern.ch","username":"kubajj"},"state":"REVIEWER"}],"messages":[{"id":"92353ac19b4d8f433e0503aa89f82db152721e9f","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":11655,"name":"Julia Kreger","email":"juliaashleykreger@gmail.com","username":"jkreger","status":"Flying to the moon with a Jetpack!"},"date":"2026-07-23 14:01:58.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"4f7d6b7b1342299730279b37bf5df4ecaacfa14d","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-07-23 14:30:34.000000000","message":"Patch Set 1:\n\nBuild succeeded (ARM64 pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/a6f79b48cc0843ac8221558c52e9cfd2\n\n- openstack-tox-py311-arm64 https://zuul.opendev.org/t/openstack/build/5b537095b723453595d656308b58b290 : SUCCESS in 7m 19s (non-voting)\n- openstack-tox-py313-arm64 https://zuul.opendev.org/t/openstack/build/0c5aeac502634e71bc1047fb00f5ccb3 : SUCCESS in 5m 25s (non-voting)\n- openstack-tox-py314-arm64 https://zuul.opendev.org/t/openstack/build/c2708809a5ba4da7a97aeda132fe1f7d : SUCCESS in 14m 18s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"b25d604f5e55e1428c318e8ed412d7dd7ed82951","tag":"autogenerated:gerrit:setHashtag","author":{"_account_id":11655,"name":"Julia Kreger","email":"juliaashleykreger@gmail.com","username":"jkreger","status":"Flying to the moon with a Jetpack!"},"date":"2026-07-23 14:54:25.000000000","message":"Hashtag added: ironic-week-prio","accounts_in_message":[],"_revision_number":1},{"id":"549bbf7cb203434caa1e1a2320d53ee4d8b61b6b","author":{"_account_id":15519,"name":"Iury Gregory Melo Ferreira","display_name":"Iury Gregory","email":"iurygregory@gmail.com","username":"iurygregory"},"date":"2026-07-23 15:14:52.000000000","message":"Patch Set 1: Code-Review+2","accounts_in_message":[],"_revision_number":1},{"id":"2be2a9902582a2b55fdabd20af73a4ca17ccd44d","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-07-23 15:26:39.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/0849953630ad419bae73c453f83664ba\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/7621e76feeb0455cba94f4e0a9f4468b : SUCCESS in 4m 04s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/83a277a3afdf4c8f8d5f8578e312691c : SUCCESS in 4m 40s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/370367a77df04cae84017edcfe18aa2a : SUCCESS in 4m 34s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/919a749b11b743029b2fb468865ec76d : SUCCESS in 4m 07s\n- openstack-tox-py314 https://zuul.opendev.org/t/openstack/build/884b697ca7064db1a822adcacb4c5818 : SUCCESS in 6m 36s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/42b06a7e74da466c8cc939ab20fcf82a : SUCCESS in 9m 09s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/8955e26366e044abac62a2160b08fb62 : SUCCESS in 6m 24s\n- openstack-tox-functional https://zuul.opendev.org/t/openstack/build/1c2895c2d40d4c81a9d248f7fdbe38c1 : SUCCESS in 4m 36s\n- ipa-tox-bandit https://zuul.opendev.org/t/openstack/build/b684190641044ddab51a742eb3e0a7cc : SUCCESS in 3m 32s\n- ipa-tempest-bios-ipmi-direct-src https://zuul.opendev.org/t/openstack/build/f36c4584b3ed463c82acb53586f77217 : SUCCESS in 1h 14m 19s\n- ipa-tempest-uefi-redfish-vmedia-src https://zuul.opendev.org/t/openstack/build/c3886429f4ad4ddbb06d0da85647eb0e : SUCCESS in 1h 18m 37s\n- ironic-standalone-ipa-src https://zuul.opendev.org/t/openstack/build/3ad5e991410f4479ad59253c7e6860c8 : SUCCESS in 54m 12s\n- ironic-python-agent-check-image-dib-centos9 https://zuul.opendev.org/t/openstack/build/9e585e4919d84baca7200fc01bc03d01 : SUCCESS in 10m 35s (non-voting)\n- ironic-python-agent-check-image-dib-centos10 https://zuul.opendev.org/t/openstack/build/1300ce7e00f24d37af1b1082e5800958 : SUCCESS in 9m 12s (non-voting)\n- ironic-python-agent-check-image-dib-debian https://zuul.opendev.org/t/openstack/build/0cc6086c430c4c3c82c5622f94a4ab03 : SUCCESS in 9m 05s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"2a015379c67fbc628a75fd08322f6b4d589e19e1","author":{"_account_id":35099,"name":"Jakub Jelinek","email":"jakub.jelinek@cern.ch","username":"kubajj"},"date":"2026-07-23 15:29:26.000000000","message":"Patch Set 1: Code-Review+2","accounts_in_message":[],"_revision_number":1},{"id":"d79f80bfbf0d2061658e04067a10431dbf48299e","author":{"_account_id":11655,"name":"Julia Kreger","email":"juliaashleykreger@gmail.com","username":"jkreger","status":"Flying to the moon with a Jetpack!"},"date":"2026-07-23 16:14:49.000000000","message":"Patch Set 1: Workflow+1\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"e319bec93128bb303c8cb12eb6a3d378b3fee327","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-07-23 16:15:23.000000000","message":"Patch Set 1: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":1},{"id":"6fb4c8ed7346b02e30d0ad0f9f0bde8119653448","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-07-23 18:01:54.000000000","message":"Patch Set 1: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/9522a3126ff840299d24b97ef790c613\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/5139593e7e55429f937cb5c66a5e566e : SUCCESS in 4m 03s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/2d2d908777114cda84721a17bf03f9fb : SUCCESS in 6m 02s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/bce494696df24ee5871021e6a4c8f531 : SUCCESS in 3m 57s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/34d8cf5cbb58476c9019a05e5437c1a6 : SUCCESS in 7m 50s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/d204939a9baa40d3b3988d3a0db8becb : SUCCESS in 5m 20s\n- openstack-tox-functional https://zuul.opendev.org/t/openstack/build/8c7a4a2f8ef24bc89c454340fc105268 : SUCCESS in 3m 23s\n- ipa-tox-bandit https://zuul.opendev.org/t/openstack/build/d86f8892c92740d087c82d2a533f886d : SUCCESS in 3m 37s\n- ipa-tempest-bios-ipmi-direct-src https://zuul.opendev.org/t/openstack/build/2fe5de33870e4fc4871b4ce8691d26b6 : SUCCESS in 53m 48s\n- ipa-tempest-uefi-redfish-vmedia-src https://zuul.opendev.org/t/openstack/build/2cd82db9443d440d8e3da8922e05dcdc : SUCCESS in 1h 40m 36s\n- ironic-standalone-ipa-src https://zuul.opendev.org/t/openstack/build/f2f0b578dd9d4ee88277a0261ae49747 : SUCCESS in 1h 00m 22s","accounts_in_message":[],"_revision_number":1},{"id":"185287c1bed718e687bcd4cfdabf7754f7d9e527","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-07-23 18:01:54.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":1},{"id":"dd02dcb170d5652da9a705d0b9a0b8b1a3ef0164","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-07-23 18:03:27.000000000","message":"Patch Set 1:\n\nBuild succeeded (promote pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/cd44e6b7a317485baae14705253d8d53\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/60fbb28e90a744eda9a1d9a9b502fab2 : SUCCESS in 47s\n- promote-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/8a4392229bd544859d3b57ca718e9db8 : SUCCESS in 1m 06s","accounts_in_message":[],"_revision_number":1},{"id":"5719a5f1e3bd80c687470b3e1e02f20ec02b2e9e","tag":"autogenerated:gerrit:setHashtag","author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"date":"2026-07-24 04:33:48.000000000","message":"Hashtag added: CVE-2026-54422","accounts_in_message":[],"_revision_number":1}],"current_revision_number":1,"current_revision":"38e81fdd46ee7b8af770c5f47a627e89806f100d","revisions":{"38e81fdd46ee7b8af770c5f47a627e89806f100d":{"kind":"REWORK","_number":1,"created":"2026-07-23 14:01:58.000000000","uploader":{"_account_id":11655,"name":"Julia Kreger","email":"juliaashleykreger@gmail.com","username":"jkreger","status":"Flying to the moon with a Jetpack!"},"ref":"refs/changes/79/998479/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/ironic-python-agent","ref":"refs/changes/79/998479/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/ironic-python-agent refs/changes/79/998479/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/ironic-python-agent refs/changes/79/998479/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/ironic-python-agent refs/changes/79/998479/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/ironic-python-agent refs/changes/79/998479/1"}}},"commit":{"parents":[{"commit":"bd3c0cf1bec133bcd51926b4570f35f5ce5f6e5e","subject":"Merge \"Enable centos10 publish job\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/ironic-python-agent/commit/bd3c0cf1bec133bcd51926b4570f35f5ce5f6e5e"}]}],"author":{"name":"Steve Baker","email":"sbaker@redhat.com","date":"2026-06-11 22:39:18.000000000","tz":0},"committer":{"name":"Julia Kreger","email":"juliaashleykreger@gmail.com","date":"2026-07-07 13:52:44.000000000","tz":-420},"subject":"Do not expose registry pull secret to bootc container","message":"Do not expose registry pull secret to bootc container\n\nDuring bootc deployment, the registry pull secret (authfile) was\nwritten to a well-known path on the host and passed to\n\u0027podman run --privileged --pid\u003dhost --authfile\u003d...\u0027. Because the\ncontainer runs with host PID namespace visibility, tenant-controlled\ncode in the bootc image could read the credential via\n/proc/1/root/\u003cauthfile-path\u003e.\n\nWhen the pull secret originates from an operator/admin source\n(driver_info.image_pull_secret, [deploy] image_server_user/password,\nor [oci] authentication_config) rather than the tenant\u0027s own\ninstance_info.image_pull_secret, this constitutes a cross-boundary\ncredential disclosure: a project-scoped node owner member recovers\nthe operator\u0027s registry credential, which may be shared across\nnodes, projects, or the entire conductor.\n\nFix by splitting the authenticated image pull from the container\nexecution:\n\n1. Write the auth file to a random temporary path (not the\n   well-known ~/.config/containers/auth.json).\n2. Run \u0027podman pull --authfile\u003d\u003ctmpfile\u003e\u0027 to fetch and cache the\n   image in the local store.\n3. Delete the auth file in a finally block, guaranteeing cleanup\n   even on pull failure.\n4. Run \u0027podman run\u0027 without --authfile. The image is already\n   cached locally and --skip-fetch-check is already in use, so\n   no registry credential is needed at runtime.\n\nBy the time tenant container code executes, the credential file\nno longer exists on the host filesystem and cannot be read via\n/proc/1/root.\n\nCloses-Bug: #2155826\nAssisted-By: Opencode - Claude Opus 4.6\nSigned-off-by: Steve Baker \u003csbaker@redhat.com\u003e\nChange-Id: I595ba9bdc305ea928ac2f6e26ff24338dbd03450\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/ironic-python-agent/commit/38e81fdd46ee7b8af770c5f47a627e89806f100d"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/ironic-python-agent/commit/38e81fdd46ee7b8af770c5f47a627e89806f100d"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":35099,"name":"Jakub Jelinek","email":"jakub.jelinek@cern.ch","username":"kubajj"}},{"label":"Workflow","status":"MAY","applied_by":{"_account_id":11655,"name":"Julia Kreger","email":"juliaashleykreger@gmail.com","username":"jkreger","status":"Flying to the moon with a Jetpack!"}},{"label":"Backport-Candidate","status":"MAY"}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dMAX"],"failing_atoms":["label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Backport-Candidate","description":"Backport candidate status","status":"NOT_APPLICABLE","is_legacy":false,"applicability_expression_result":{"fulfilled":false,"status":"FAIL"},"submittability_expression_result":{"expression":"is:true","fulfilled":true,"status":"NOT_EVALUATED","passing_atoms":[],"failing_atoms":[],"atom_explanations":{}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dMAX"],"failing_atoms":["label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}