metadata: annotations: prow.k8s.io/context: pull-verify-pr-content-policy prow.k8s.io/job: pull-verify-pr-content-policy creationTimestamp: "2026-04-13T09:54:33Z" generation: 10 labels: component: jenkins created-by-prow: "true" env: cicd event-GUID: c472cb00-371e-11f1-97b9-7f9a4fa1e298 owner: wei_zheng prow.k8s.io/build-id: "2043628901095182336" prow.k8s.io/context: pull-verify-pr-content-policy prow.k8s.io/id: 939bf74a-5418-4195-8092-ca190bda916b prow.k8s.io/is-optional: "false" prow.k8s.io/job: pull-verify-pr-content-policy prow.k8s.io/refs.base_ref: main prow.k8s.io/refs.org: PingCAP-QE prow.k8s.io/refs.pull: "4477" prow.k8s.io/refs.repo: ci prow.k8s.io/type: presubmit team: qe name: 939bf74a-5418-4195-8092-ca190bda916b namespace: apps resourceVersion: "1776074090866671001" uid: 91cf3240-9189-4a96-a6c9-75f0c5137c8a spec: agent: kubernetes cluster: default context: pull-verify-pr-content-policy decoration_config: gcs_configuration: bucket: gs://prow-tidb-logs path_strategy: explicit gcs_credentials_secret: gcs-credentials utility_images: clonerefs: gcr.io/k8s-prow/clonerefs:v20230601-43eb1068e4 entrypoint: gcr.io/k8s-prow/entrypoint:v20230601-43eb1068e4 initupload: gcr.io/k8s-prow/initupload:v20230601-43eb1068e4 sidecar: gcr.io/k8s-prow/sidecar:v20230601-43eb1068e4 job: pull-verify-pr-content-policy max_concurrency: 1 namespace: prow-test-pods pod_spec: containers: - args: - | .ci/check-pr-content-policy.sh --base-sha "${PULL_BASE_SHA:?missing PULL_BASE_SHA}" command: - bash - -ceo - pipefail image: ghcr.io/pingcap-qe/cd/utils/release:v2026.3.29-14-g90ae7ef name: main resources: limits: cpu: 200m memory: 128Mi prowjob_defaults: tenant_id: GlobalDefaultID refs: base_link: https://github.com/PingCAP-QE/ci/commit/0fe868603100be22ed7bb0b73d8a30411acc7ad3 base_ref: main base_sha: 0fe868603100be22ed7bb0b73d8a30411acc7ad3 org: PingCAP-QE pulls: - author: wuhuizuo author_link: https://github.com/wuhuizuo commit_link: https://github.com/PingCAP-QE/ci/pull/4477/commits/dfdab3715aa1a12402763b50dd1522869e21fef8 head_ref: ci-architect/audit-private-clone-cred-exposure link: https://github.com/PingCAP-QE/ci/pull/4477 number: 4477 sha: dfdab3715aa1a12402763b50dd1522869e21fef8 title: 'security: avoid persisting GitHub SSH keys in PR pipelines' repo: ci repo_link: https://github.com/PingCAP-QE/ci report: true rerun_command: /test pull-verify-pr-content-policy type: presubmit status: build_id: "2043628901095182336" completionTime: "2026-04-13T09:54:49Z" description: Job succeeded. pendingTime: "2026-04-13T09:54:33Z" pod_name: 939bf74a-5418-4195-8092-ca190bda916b prev_report_states: gcsk8sreporter: success gcsreporter: success github-reporter: success startTime: "2026-04-13T09:54:33Z" state: success url: https://prow.tidb.net/view/gs/prow-tidb-logs/pr-logs/pull/PingCAP-QE_ci/4477/pull-verify-pr-content-policy/2043628901095182336