Make the hackbot action apply path safe to repeat and hard to poison - #6529

[taskcluster 2026-08-06T19:57:55.090Z] Worker Type (proj-bugbug/batch) settings:
[taskcluster 2026-08-06T19:57:55.090Z]   {
[taskcluster 2026-08-06T19:57:55.090Z]     "generic-worker": {
[taskcluster 2026-08-06T19:57:55.090Z]       "config": {
[taskcluster 2026-08-06T19:57:55.090Z]         "headlessTasks": false
[taskcluster 2026-08-06T19:57:55.090Z]       },
[taskcluster 2026-08-06T19:57:55.090Z]       "engine": "multiuser",
[taskcluster 2026-08-06T19:57:55.090Z]       "go-arch": "amd64",
[taskcluster 2026-08-06T19:57:55.090Z]       "go-os": "linux",
[taskcluster 2026-08-06T19:57:55.090Z]       "go-version": "go1.26.2",
[taskcluster 2026-08-06T19:57:55.090Z]       "release": "https://github.com/taskcluster/taskcluster/releases/tag/v99.1.0",
[taskcluster 2026-08-06T19:57:55.090Z]       "revision": "c76d61efe4bdc1a05bcec848739cd41ebf061f01",
[taskcluster 2026-08-06T19:57:55.090Z]       "source": "https://github.com/taskcluster/taskcluster/commits/c76d61efe4bdc1a05bcec848739cd41ebf061f01",
[taskcluster 2026-08-06T19:57:55.090Z]       "version": "99.1.0"
[taskcluster 2026-08-06T19:57:55.090Z]     },
[taskcluster 2026-08-06T19:57:55.090Z]     "image": "projects/community-tc-workers/global/images/generic-worker-ubuntu-24-04-aaynirqnxlbwcojgnbeo",
[taskcluster 2026-08-06T19:57:55.090Z]     "instance-id": "5516423236006008916",
[taskcluster 2026-08-06T19:57:55.090Z]     "instance-type": "projects/757942385826/machineTypes/n2-standard-2",
[taskcluster 2026-08-06T19:57:55.090Z]     "local-ipv4": "10.142.0.5",
[taskcluster 2026-08-06T19:57:55.090Z]     "machine-setup": {

...(61 lines hidden)...

[INFO] Initializing environment for https://github.com/pre-commit/mirrors-prettier.
[INFO] Initializing environment for https://github.com/pre-commit/mirrors-prettier:prettier@3.1.0.
[INFO] Initializing environment for https://github.com/astral-sh/ruff-pre-commit.
[INFO] Initializing environment for https://github.com/pre-commit/pre-commit-hooks.
[INFO] Initializing environment for https://github.com/codespell-project/codespell.
[INFO] Initializing environment for https://github.com/marco-c/taskcluster_yml_validator.
[INFO] Initializing environment for https://github.com/asottile/yesqa.
[INFO] Initializing environment for https://github.com/pre-commit/mirrors-mypy.
[INFO] Initializing environment for https://github.com/pre-commit/mirrors-mypy:types-pkg_resources==0.1.2,types-python-dateutil==2.9.0.20260716,types-PyYAML==6.0.12.20260724,types-orjson==3.6.2,types-tabulate==0.10.0.20260508,types-requests==2.33.0.20260712.
[INFO] Initializing environment for https://github.com/pre-commit/mirrors-mypy:types-pkg_resources==0.1.2,types-requests==2.33.0.20260712,types-Flask==1.1.6,types-redis==4.6.0.20241004,types-python-dateutil==2.9.0.20260716,types-orjson==3.6.2,types-tabulate==0.10.0.20260508.
[INFO] Installing environment for https://github.com/pre-commit/mirrors-prettier.
[INFO] Once installed this environment will be reused.
[INFO] This may take a few minutes...
[INFO] Installing environment for https://github.com/astral-sh/ruff-pre-commit.
[INFO] Once installed this environment will be reused.
[INFO] This may take a few minutes...
[INFO] Installing environment for https://github.com/pre-commit/pre-commit-hooks.
[INFO] Once installed this environment will be reused.
[INFO] This may take a few minutes...
[INFO] Installing environment for https://github.com/codespell-project/codespell.
[INFO] Once installed this environment will be reused.
[INFO] This may take a few minutes...
[INFO] Installing environment for https://github.com/marco-c/taskcluster_yml_validator.
[INFO] Once installed this environment will be reused.
[INFO] This may take a few minutes...
[INFO] Installing environment for https://github.com/asottile/yesqa.
[INFO] Once installed this environment will be reused.
[INFO] This may take a few minutes...
[INFO] Installing environment for https://github.com/pre-commit/mirrors-mypy.
[INFO] Once installed this environment will be reused.
[INFO] This may take a few minutes...
[INFO] Installing environment for https://github.com/pre-commit/mirrors-mypy.
[INFO] Once installed this environment will be reused.
[INFO] This may take a few minutes...
prettier.................................................................Passed
ruff check...............................................................Passed
ruff format..............................................................Passed
check python ast.........................................................Passed
check docstring is first.................................................Passed
check that executables have shebangs.....................................Passed
check for merge conflicts................................................Passed
check for broken symlinks............................(no files to check)Skipped
debug statements (python)................................................Passed
trim trailing whitespace.................................................Passed
check yaml...............................................................Passed
mixed line ending........................................................Passed
python tests naming......................................................Passed
check json...............................................................Passed
check vcs permalinks.....................................................Passed
codespell................................................................Passed
taskcluster_yml..........................................................Passed
Strip unnecessary `# noqa`s..............................................Passed
mypy-bugbug..............................................................Passed
mypy-bugbug-http.........................................................Passed
Check for useless excludes...............................................Passed
[taskcluster 2026-08-06T20:00:20.562Z]                        Exit Code: 0
[taskcluster 2026-08-06T20:00:20.562Z]                        User Time: 39.343ms
[taskcluster 2026-08-06T20:00:20.562Z]                      Kernel Time: 35.536ms
[taskcluster 2026-08-06T20:00:20.562Z]                        Wall Time: 2m0.992594437s
[taskcluster 2026-08-06T20:00:20.562Z]  Average Available System Memory: 6.27 GiB
[taskcluster 2026-08-06T20:00:20.562Z]       Average System Memory Used: 1.48 GiB
[taskcluster 2026-08-06T20:00:20.562Z]          Peak System Memory Used: 1.81 GiB
[taskcluster 2026-08-06T20:00:20.562Z]              Total System Memory: 7.75 GiB
[taskcluster 2026-08-06T20:00:20.562Z]                           Result: SUCCEEDED
[taskcluster 2026-08-06T20:00:20.562Z] === Task Finished ===
[taskcluster 2026-08-06T20:00:20.562Z] Task Duration: 2m0.993113735s