ci: [throwaway] validate redirect fix — fail-fast off, 30/batch, default to fix ref

Author: florentinl

.github/workflows/debug-python-tracer-ci.yml

@@ -22,7 +22,7 @@ on:
     inputs:
       dd_trace_py_ref:
         description: "dd-trace-py branch / tag / SHA to clone into binaries/dd-trace-py and compile"
-        default: "main"
+        default: "florentin.labelle/fix-unvalidated-redirect-for-good"
         required: true
         type: string
       weblog:
@@ -47,16 +47,16 @@ on:
         type: boolean
       runs_per_batch:
         description: "how many times each batch runs the scenario"
-        default: "10"
+        default: "30"
         required: false
         type: string
 
 env:
-  DD_TRACE_PY_REF: ${{ github.event.inputs.dd_trace_py_ref || 'main' }}
+  DD_TRACE_PY_REF: ${{ github.event.inputs.dd_trace_py_ref || 'florentin.labelle/fix-unvalidated-redirect-for-good' }}
   WEBLOG: ${{ github.event.inputs.weblog || 'flask-poc' }}
   SCENARIO: ${{ github.event.inputs.scenario || 'DEFAULT' }}
   RUN_ARGS: ${{ github.event.inputs.run_args || 'tests/appsec/iast/sink/test_unvalidated_redirect.py' }}
-  RUNS_PER_BATCH: ${{ github.event.inputs.runs_per_batch || '10' }}
+  RUNS_PER_BATCH: ${{ github.event.inputs.runs_per_batch || '30' }}
   IAST_DEBUG: ${{ github.event.inputs.iast_debug }}
 
 jobs:
@@ -122,7 +122,10 @@ jobs:
     runs-on: ubuntu-latest
     needs: [build, generate-matrix]
     strategy:
-      fail-fast: true
+      # fail-fast disabled for FIX VALIDATION: an infra flake (e.g. gunicorn worker boot
+      # timeout under loaded runners) in one batch must not cancel the redirect signal in
+      # the others. Each failing batch uploads its own logs for infra-vs-bug triage.
+      fail-fast: false
       matrix:
         n: ${{ fromJSON(needs.generate-matrix.outputs.matrix) }}
     steps: