From f443323a2adc783e085dbc0f5f93fb3968ff08fb Mon Sep 17 00:00:00 2001
From: Andrew Halberstadt <ahal@mozilla.com>
Date: Mon, 27 Jul 2026 12:05:48 -0400
Subject: [PATCH 1/2] ci: stop writing Decision task to index

The Decision task no longer has scopes to write here for security reasons. See:
https://bugzilla.mozilla.org/show_bug.cgi?id=2058191
---
 .taskcluster.yml | 7 +------
 1 file changed, 1 insertion(+), 6 deletions(-)

diff --git a/.taskcluster.yml b/.taskcluster.yml
index bfbe3cd..3390967 100644
--- a/.taskcluster.yml
+++ b/.taskcluster.yml
@@ -169,12 +169,7 @@ tasks:
                                   then:
                                       kind: cron-task
                       routes:
-                          $flatten:
-                              - checks
-                              - $if: 'tasks_for == "github-push"'
-                                then:
-                                    - "index.${trustDomain}.v2.${project}.revision.${head_sha}.taskgraph.decision"
-                                else: []
+                        - checks
                       scopes:
                           $if: 'tasks_for == "github-push"'
                           then:

From 609b75245ca5ddb222f2681185944ddf99330958 Mon Sep 17 00:00:00 2001
From: Andrew Halberstadt <ahal@mozilla.com>
Date: Tue, 28 Jul 2026 11:09:05 -0400
Subject: [PATCH 2/2] ci: set `privateRepo: false` in tc.yml

---
 .taskcluster.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.taskcluster.yml b/.taskcluster.yml
index 3390967..c3dd52d 100644
--- a/.taskcluster.yml
+++ b/.taskcluster.yml
@@ -6,7 +6,7 @@ policy:
 tasks:
     - $let:
           # XXX Set to `true` for private repos
-          privateRepo: true
+          privateRepo: false
           # XXX Use
           # `system` for system add-on,
           # `privileged` for AMO or self-hosted privileged add-on,