Skip to content
CI/CD

feat(ci): rescan main's images weekly and route drift to a tracking i… #4644

Sign in to view logs

feat(ci): rescan main's images weekly and route drift to a tracking i…

feat(ci): rescan main's images weekly and route drift to a tracking i… #4644

Triggered via push September 1, 2026 16:40
@github-merge-queuegithub-merge-queue[bot]
pushed 63bcaf9
main
Status Success
Total duration 8m 32s
Artifacts 12

cicd.yml

on: push
Detect changes
15s
Detect changes
Changesets  /  Verify changesets
Changesets / Verify changesets
Matrix: Docker / Agent: Pi / build
Matrix: Docker / App Server / build
Matrix: Docker / Postgres (pg_partman) / build
Matrix: Docker / Webapp / build
Matrix: Quality / quality-gates
Waiting for pending jobs
Actionlint
Actionlint
Zizmor
Zizmor
Docker  /  Tag unchanged images
Docker / Tag unchanged images
Compose  /  Render compose stacks
Compose / Render compose stacks
Security  /  Dependencies, secrets, and policy
Security / Dependencies, secrets, and policy
Test  /  App Server: Integration
Test / App Server: Integration
Test  /  Webapp: Stories
Test / Webapp: Stories
Test  /  App Server: Reactor
Test / App Server: Reactor
Docker  /  ...  /  Create manifest
53s
Docker / Agent: Pi / Create manifest
Docker  /  ...  /  Create manifest
35s
Docker / App Server / Create manifest
Docker  /  ...  /  Create manifest
55s
Docker / Postgres (pg_partman) / Create manifest
Docker  /  ...  /  Create manifest
41s
Docker / Webapp / Create manifest
Test  /  Webapp: E2E
Test / Webapp: E2E
Docker  /  ...  /  Scan linux/amd64 Image
44s
Docker / Agent: Pi / Scan linux/amd64 Image
Docker  /  ...  /  Scan linux/amd64 Image
1m 23s
Docker / App Server / Scan linux/amd64 Image
Docker  /  ...  /  Scan linux/amd64 Image
34s
Docker / Postgres (pg_partman) / Scan linux/amd64 Image
Docker  /  ...  /  Scan linux/amd64 Image
42s
Docker / Webapp / Scan linux/amd64 Image
CI Status Gate
8s
CI Status Gate
Fit to window
Zoom out
Zoom in

Annotations

50 warnings
Docker / App Server / Build linux/arm64 Docker Image: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/sync/status/GithubIntegrationSyncRunnerTest.java#L240
unchecked generic array creation for varargs parameter of type java.util.List<de.tum.cit.aet.hephaestus.integration.core.spi.SyncTargetProvider.SyncTarget>[]
Docker / App Server / Build linux/arm64 Docker Image: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/sync/status/GithubIntegrationSyncRunnerTest.java#L137
unchecked generic array creation for varargs parameter of type java.util.List<de.tum.cit.aet.hephaestus.integration.core.spi.SyncTargetProvider.SyncTarget>[]
Docker / App Server / Build linux/arm64 Docker Image: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L481
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
Docker / App Server / Build linux/arm64 Docker Image: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L464
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
Docker / App Server / Build linux/arm64 Docker Image: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L441
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
Docker / App Server / Build linux/arm64 Docker Image: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/auth/web/SecurityHeadersIntegrationTest.java#L47
value(java.lang.String,org.hamcrest.Matcher<? super java.lang.String>) in org.springframework.test.web.reactive.server.HeaderAssertions has been deprecated and marked for removal
Docker / App Server / Build linux/arm64 Docker Image: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/auth/dev/DevLoginIntegrationTest.java#L80
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
Docker / App Server / Build linux/arm64 Docker Image: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/audit/ConfigAuditIntegrationTest.java#L414
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
Docker / App Server / Build linux/arm64 Docker Image: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/audit/ConfigAuditIntegrationTest.java#L412
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
Docker / App Server / Build linux/arm64 Docker Image: server/application/src/main/java/de/tum/cit/aet/hephaestus/workspace/WorkspaceService.java#L174
ownerUserId() in de.tum.cit.aet.hephaestus.workspace.dto.CreateWorkspaceRequestDTO has been deprecated and marked for removal
Docker / Postgres (pg_partman) / Build linux/arm64 Docker Image
sentry_project= is not a valid secret
Docker / Postgres (pg_partman) / Build linux/arm64 Docker Image
sentry_org= is not a valid secret
Docker / Postgres (pg_partman) / Build linux/arm64 Docker Image
sentry_auth_token= is not a valid secret
Docker / Postgres (pg_partman) / Build linux/amd64 Docker Image
sentry_project= is not a valid secret
Docker / Postgres (pg_partman) / Build linux/amd64 Docker Image
sentry_org= is not a valid secret
Docker / Postgres (pg_partman) / Build linux/amd64 Docker Image
sentry_auth_token= is not a valid secret
Docker / App Server / Build linux/amd64 Docker Image: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/sync/status/GithubIntegrationSyncRunnerTest.java#L240
unchecked generic array creation for varargs parameter of type java.util.List<de.tum.cit.aet.hephaestus.integration.core.spi.SyncTargetProvider.SyncTarget>[]
Docker / App Server / Build linux/amd64 Docker Image: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/sync/status/GithubIntegrationSyncRunnerTest.java#L137
unchecked generic array creation for varargs parameter of type java.util.List<de.tum.cit.aet.hephaestus.integration.core.spi.SyncTargetProvider.SyncTarget>[]
Docker / App Server / Build linux/amd64 Docker Image: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L481
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
Docker / App Server / Build linux/amd64 Docker Image: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L464
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
Docker / App Server / Build linux/amd64 Docker Image: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L441
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
Docker / App Server / Build linux/amd64 Docker Image: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/auth/web/SecurityHeadersIntegrationTest.java#L47
value(java.lang.String,org.hamcrest.Matcher<? super java.lang.String>) in org.springframework.test.web.reactive.server.HeaderAssertions has been deprecated and marked for removal
Docker / App Server / Build linux/amd64 Docker Image: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/auth/dev/DevLoginIntegrationTest.java#L80
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
Docker / App Server / Build linux/amd64 Docker Image: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/audit/ConfigAuditIntegrationTest.java#L414
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
Docker / App Server / Build linux/amd64 Docker Image: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/audit/ConfigAuditIntegrationTest.java#L412
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
Docker / App Server / Build linux/amd64 Docker Image: server/application/src/main/java/de/tum/cit/aet/hephaestus/workspace/WorkspaceService.java#L174
ownerUserId() in de.tum.cit.aet.hephaestus.workspace.dto.CreateWorkspaceRequestDTO has been deprecated and marked for removal
Docker / App Server / Create manifest
Please check that the "artifact-metadata:write" permission has been included
Docker / App Server / Create manifest
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record
Docker / Postgres (pg_partman) / Create manifest
Please check that the "artifact-metadata:write" permission has been included
Docker / Postgres (pg_partman) / Create manifest
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record
Docker / Webapp / Build linux/arm64 Docker Image
sentry_project= is not a valid secret
Docker / Webapp / Build linux/arm64 Docker Image
sentry_org= is not a valid secret
Docker / Webapp / Build linux/arm64 Docker Image
sentry_auth_token= is not a valid secret
Docker / Agent: Pi / Build linux/arm64 Docker Image
sentry_project= is not a valid secret
Docker / Agent: Pi / Build linux/arm64 Docker Image
sentry_org= is not a valid secret
Docker / Agent: Pi / Build linux/arm64 Docker Image
sentry_auth_token= is not a valid secret
Docker / Webapp / Build linux/amd64 Docker Image
sentry_project= is not a valid secret
Docker / Webapp / Build linux/amd64 Docker Image
sentry_org= is not a valid secret
Docker / Webapp / Build linux/amd64 Docker Image
sentry_auth_token= is not a valid secret
Docker / Postgres (pg_partman) / Scan linux/amd64 Image
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
Docker / Agent: Pi / Build linux/amd64 Docker Image
sentry_project= is not a valid secret
Docker / Agent: Pi / Build linux/amd64 Docker Image
sentry_org= is not a valid secret
Docker / Agent: Pi / Build linux/amd64 Docker Image
sentry_auth_token= is not a valid secret
Docker / App Server / Scan linux/amd64 Image
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
Docker / Webapp / Create manifest
Please check that the "artifact-metadata:write" permission has been included
Docker / Webapp / Create manifest
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record
Docker / Agent: Pi / Create manifest
Please check that the "artifact-metadata:write" permission has been included
Docker / Agent: Pi / Create manifest
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record
Docker / Webapp / Scan linux/amd64 Image
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
Docker / Agent: Pi / Scan linux/amd64 Image
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON

Artifacts

Produced during runtime
Name Size Digest
digests-hephaestus-build-agent-pi-linux-amd64 Expired
244 Bytes
sha256:2990714fddd365e7e4abb47a38fe71317111d15c6ebde1641704d8a6acb6c59c
digests-hephaestus-build-agent-pi-linux-arm64 Expired
244 Bytes
sha256:f37640f3434efeb4c2d47df5e24dd1585ed412563dfb22ce7879217d1e80ce6e
digests-hephaestus-build-application-server-linux-amd64 Expired
244 Bytes
sha256:ffcc4fc8e6762a86ab853a19c4a6d66f9d6550cdca79999dc9c450f33cdee273
digests-hephaestus-build-application-server-linux-arm64 Expired
244 Bytes
sha256:6175259e90c3db4261e8b8e555dd96b8fb3435fcd0e3762953c9a2425bce9752
digests-hephaestus-build-postgres-linux-amd64 Expired
244 Bytes
sha256:957620214390d2f735f32b9b4935bd7443de81176cd771b2b90005788f84351d
digests-hephaestus-build-postgres-linux-arm64 Expired
244 Bytes
sha256:cb5263de3a154efbb51595f914fce11d1a24d7041fa91f8d6755b722a5858e1d
digests-hephaestus-build-webapp-linux-amd64 Expired
244 Bytes
sha256:8360c23ccd67c6f3e432328c86b63fcfd89faf55ab5f9bcc32cb15c9eb164bae
digests-hephaestus-build-webapp-linux-arm64 Expired
244 Bytes
sha256:131f79503909525b4fd3a6657025673da1a8e16192a6f5437149c50ddfb5eb11
vulnerability-policy-agent-pi-linux-amd64
207 KB
sha256:48e640937af44f9fc501e739f03aa5db4416e585bcc2b83884f85a273d907326
vulnerability-policy-application-server-linux-amd64
57.3 KB
sha256:89b0d949093e640a4df7b5fe43409c15373b2bebc7f9fba99750271db6f3e8cf
vulnerability-policy-postgres-linux-amd64
297 KB
sha256:558d55d2bb722c269dca3194e2d06de0fc23486ef27dd5ca127b05f2f626973c
vulnerability-policy-webapp-linux-amd64
22.7 KB
sha256:f9a73622d8c95fafce23cd57e9e8f32861b4d0b8dbd89a4a147e93dfd38afb8c