| FazBrowse GitHub Viewer | Trending | | Home |
| Tools: [Download Repo ZIP] [Original HTTPS Page] |
Sorry, something went wrong.
|
Semgrep found 2 github-actions-mutable-action-tag findings: GitHub Actions step uses a mutable tag or branch reference. Tags and branch names can be silently repointed by the action owner, enabling supply-chain attacks — as seen in the trivy-action and kics-github-action compromises. Pin the reference to a full 40-character commit SHA instead, e.g. uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608. 🛟 Help? Slack #semgrep-help or go/semgrep-help. Resolution Options:
|
Sorry, something went wrong.
Wrap a transaction's operation spans in a "transaction" pseudo-span, per the OpenTelemetry driver specification. The span is stored on the session's _Transaction and passed as the explicit parent when an operation span starts, rather than read from ambient context, so a concurrently running unrelated session cannot pick up this transaction by accident. with_transaction() pins one span across all of its retries, so a retried call still yields a single span rather than one per attempt. Its retry loop moves into a helper to keep the span bookkeeping readable. A nested with_transaction() call on the same session now raises instead of clobbering and leaking the outer call's span, and a direct-API commit retry starts a fresh span, the previous attempt having already ended its own.
Cut each to the invariant a reader needs, dropping spec references and restatements of the code.
Matches the wording used for the same idea elsewhere in the module.
| Back | FazBrowse Home | New Git URL |
PYTHON-6035
Second of four PRs splitting #2964. Base is PYTHON-5947-otel-1-operations.
Changes in this PR
Wraps a transaction's operation spans in a "transaction" span, per the OpenTelemetry driver specification, so the operations belonging to one transaction group under it instead of appearing as unrelated siblings.
with_transaction's retry loop moves into a helper to keep the span handling readable; diffing with whitespace ignored shows the loop body untouched.
Test Plan
Transaction spans only run on a replica set, which PR 1's expanded Evergreen variant covers in full.
Checklist
Checklist for Author
Checklist for Reviewer