Skip to content

fix(docker): patch OS packages in digest-pinned images #4616

fix(docker): patch OS packages in digest-pinned images

fix(docker): patch OS packages in digest-pinned images #4616

Triggered via pull request September 1, 2026 14:04
Status Success
Total duration 10m 2s
Artifacts 2

cicd.yml

on: pull_request
Detect changes
16s
Detect changes
Changesets  /  Verify changesets
28s
Changesets / Verify changesets
Matrix: Docker / Agent: Pi / build
Matrix: Docker / App Server / build
Waiting for pending jobs
Matrix: Docker / Postgres (pg_partman) / build
Matrix: Docker / Webapp / build
Matrix: Quality / quality-gates
Actionlint
Actionlint
Zizmor
25s
Zizmor
Security  /  Dependencies, secrets, and policy
37s
Security / Dependencies, secrets, and policy
Test  /  App Server: Integration
9m 0s
Test / App Server: Integration
Test  /  Webapp: Stories
5m 0s
Test / Webapp: Stories
Compose  /  Render compose stacks
34s
Compose / Render compose stacks
Docker  /  Tag unchanged images
21s
Docker / Tag unchanged images
Test  /  App Server: Reactor
5m 46s
Test / App Server: Reactor
Docker  /  ...  /  Create manifest
0s
Docker / Agent: Pi / Create manifest
Docker  /  ...  /  Create manifest
Docker / App Server / Create manifest
Docker  /  ...  /  Create manifest
0s
Docker / Postgres (pg_partman) / Create manifest
Docker  /  ...  /  Create manifest
0s
Docker / Webapp / Create manifest
CI Status Gate
8s
CI Status Gate
Fit to window
Zoom out
Zoom in

Annotations

55 warnings and 1 notice
Changesets / Verify changesets
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
Compose / Render compose stacks
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
Quality / Tooling and Docs
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
Quality / App Server
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
Quality / Webapp
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
Test / Webapp: Stories
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
Docker / Postgres (pg_partman) / Build linux/amd64 Docker Image
Please check that the "artifact-metadata:write" permission has been included
Docker / Postgres (pg_partman) / Build linux/amd64 Docker Image
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record
Docker / Postgres (pg_partman) / Build linux/amd64 Docker Image
sentry_project= is not a valid secret
Docker / Postgres (pg_partman) / Build linux/amd64 Docker Image
sentry_org= is not a valid secret
Docker / Postgres (pg_partman) / Build linux/amd64 Docker Image
sentry_auth_token= is not a valid secret
Test / App Server: Reactor: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/sync/status/GithubIntegrationSyncRunnerTest.java#L240
unchecked generic array creation for varargs parameter of type java.util.List<de.tum.cit.aet.hephaestus.integration.core.spi.SyncTargetProvider.SyncTarget>[]
Test / App Server: Reactor: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/sync/status/GithubIntegrationSyncRunnerTest.java#L137
unchecked generic array creation for varargs parameter of type java.util.List<de.tum.cit.aet.hephaestus.integration.core.spi.SyncTargetProvider.SyncTarget>[]
Test / App Server: Reactor: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L481
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
Test / App Server: Reactor: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L464
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
Test / App Server: Reactor: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L441
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
Test / App Server: Reactor: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/auth/web/SecurityHeadersIntegrationTest.java#L47
value(java.lang.String,org.hamcrest.Matcher<? super java.lang.String>) in org.springframework.test.web.reactive.server.HeaderAssertions has been deprecated and marked for removal
Test / App Server: Reactor: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/auth/dev/DevLoginIntegrationTest.java#L80
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
Test / App Server: Reactor: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/audit/ConfigAuditIntegrationTest.java#L414
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
Test / App Server: Reactor: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/audit/ConfigAuditIntegrationTest.java#L412
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
Test / App Server: Reactor: server/application/src/main/java/de/tum/cit/aet/hephaestus/workspace/WorkspaceService.java#L174
ownerUserId() in de.tum.cit.aet.hephaestus.workspace.dto.CreateWorkspaceRequestDTO has been deprecated and marked for removal
Test / App Server: Reactor
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
Docker / Webapp / Build linux/amd64 Docker Image
Please check that the "artifact-metadata:write" permission has been included
Docker / Webapp / Build linux/amd64 Docker Image
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record
Docker / Webapp / Build linux/amd64 Docker Image
sentry_project= is not a valid secret
Docker / Webapp / Build linux/amd64 Docker Image
sentry_org= is not a valid secret
Docker / Webapp / Build linux/amd64 Docker Image
sentry_auth_token= is not a valid secret
Docker / Agent: Pi / Build linux/amd64 Docker Image
Please check that the "artifact-metadata:write" permission has been included
Docker / Agent: Pi / Build linux/amd64 Docker Image
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record
Docker / Agent: Pi / Build linux/amd64 Docker Image
sentry_project= is not a valid secret
Docker / Agent: Pi / Build linux/amd64 Docker Image
sentry_org= is not a valid secret
Docker / Agent: Pi / Build linux/amd64 Docker Image
sentry_auth_token= is not a valid secret
Quality / API and Database: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/sync/status/GithubIntegrationSyncRunnerTest.java#L240
unchecked generic array creation for varargs parameter of type java.util.List<de.tum.cit.aet.hephaestus.integration.core.spi.SyncTargetProvider.SyncTarget>[]
Quality / API and Database: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/sync/status/GithubIntegrationSyncRunnerTest.java#L137
unchecked generic array creation for varargs parameter of type java.util.List<de.tum.cit.aet.hephaestus.integration.core.spi.SyncTargetProvider.SyncTarget>[]
Quality / API and Database: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L481
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
Quality / API and Database: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L464
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
Quality / API and Database: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L441
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
Quality / API and Database: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/auth/web/SecurityHeadersIntegrationTest.java#L47
value(java.lang.String,org.hamcrest.Matcher<? super java.lang.String>) in org.springframework.test.web.reactive.server.HeaderAssertions has been deprecated and marked for removal
Quality / API and Database: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/auth/dev/DevLoginIntegrationTest.java#L80
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
Quality / API and Database: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/audit/ConfigAuditIntegrationTest.java#L414
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
Quality / API and Database: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/audit/ConfigAuditIntegrationTest.java#L412
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
Quality / API and Database: server/application/src/main/java/de/tum/cit/aet/hephaestus/workspace/WorkspaceService.java#L174
ownerUserId() in de.tum.cit.aet.hephaestus.workspace.dto.CreateWorkspaceRequestDTO has been deprecated and marked for removal
Quality / API and Database
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
Test / App Server: Integration: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/sync/status/GithubIntegrationSyncRunnerTest.java#L240
unchecked generic array creation for varargs parameter of type java.util.List<de.tum.cit.aet.hephaestus.integration.core.spi.SyncTargetProvider.SyncTarget>[]
Test / App Server: Integration: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/sync/status/GithubIntegrationSyncRunnerTest.java#L137
unchecked generic array creation for varargs parameter of type java.util.List<de.tum.cit.aet.hephaestus.integration.core.spi.SyncTargetProvider.SyncTarget>[]
Test / App Server: Integration: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L481
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
Test / App Server: Integration: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L464
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
Test / App Server: Integration: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L441
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
Test / App Server: Integration: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/auth/web/SecurityHeadersIntegrationTest.java#L47
value(java.lang.String,org.hamcrest.Matcher<? super java.lang.String>) in org.springframework.test.web.reactive.server.HeaderAssertions has been deprecated and marked for removal
Test / App Server: Integration: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/auth/dev/DevLoginIntegrationTest.java#L80
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
Test / App Server: Integration: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/audit/ConfigAuditIntegrationTest.java#L414
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
Test / App Server: Integration: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/audit/ConfigAuditIntegrationTest.java#L412
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
Test / App Server: Integration: server/application/src/main/java/de/tum/cit/aet/hephaestus/workspace/WorkspaceService.java#L174
ownerUserId() in de.tum.cit.aet.hephaestus.workspace.dto.CreateWorkspaceRequestDTO has been deprecated and marked for removal
Test / App Server: Integration
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
Test / Webapp: E2E
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
🎭 Playwright Run Summary
2 skipped 2 passed (27.7s)

Artifacts

Produced during runtime
Name Size Digest
server-reactor-33517297755-1 Expired
254 MB
sha256:a410db325cb4dd3b746497d50bf2a6b90563e856181226a08edc9b3da8132e5c
test-metrics-webapp-unit
1011 Bytes
sha256:3a96d9357b0cde59a3f86d18d7d3ae2e63d29ca1f716f768c7f3a9f8cfbf8ce5