Skip to main content
← Back to list
01Issue
BugShippedSwamp CLIPublic
Assigneesstack72

Relationships

#1918 verification-attestation report runs as default on every workflow

Opened by stack72 · 8/31/2026· Shipped 8/31/2026

Description

The @swamp/verification-attestation report was added to BUILTIN_WORKFLOW_REPORTS in commit 06b61472 (PR #2212 — feat(verification): pre-PR verification loop with container sandbox and attestation). This causes the attestation report to run as a default report on every workflow execution, not just the pre-PR verification workflow it was designed for.

Steps to reproduce

  1. Run any workflow on a central server: swamp workflow run @swamp/cve/researcher
  2. Observe that a @swamp/verification-attestation report is emitted alongside the workflow output, showing commit/branch as "unknown" since it's not a verification context.

Expected behavior

The verification-attestation report should only run when explicitly required by a workflow (via reports.require in the workflow YAML) or when requested via --report @swamp/verification-attestation. It should not be in the BUILTIN_WORKFLOW_REPORTS default set.

Fix

Remove "@swamp/verification-attestation" from the BUILTIN_WORKFLOW_REPORTS array in src/domain/reports/builtin/mod.ts. Keep the report registered in the report registry so workflows can still explicitly require it.

02Bog Flow
OPENTRIAGEDIN PROGRESSSHIPPED+ 1 MOREASSIGNED+ 2 MOREREVIEW+ 8 MOREPR_MERGED+ 2 MORESESSION_SUMMARIZED

Shipped

8/31/2026, 8:24:58 PM

Click a lifecycle step above to view its details.

03Sludge Pulse
stack72 assigned stack728/31/2026, 7:41:57 PM

Sign in to post a ripple.