docs(security): write down the vulnerability remediation policy #4647
FelixTJDietrichcicd.yml
on: pull_request
Detect changes
14s
Changesets
/
Verify changesets
31s
Matrix: Docker / Agent: Pi / build
Waiting for pending jobs
Matrix: Docker / App Server / build
Waiting for pending jobs
Matrix: Docker / Postgres (pg_partman) / build
Waiting for pending jobs
Matrix: Docker / Webapp / build
Matrix: Quality / quality-gates
Actionlint
0s
Zizmor
26s
Security
/
Dependencies, secrets, and policy
49s
Test
/
App Server: Integration
8m 54s
Test
/
Webapp: Stories
0s
Compose
/
Render compose stacks
41s
Docker
/
Tag unchanged images
29s
CI Status Gate
11s
Annotations
43 warnings
|
Changesets / Verify changesets
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
|
|
Compose / Render compose stacks
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
|
|
Quality / Tooling and Docs
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
|
|
Quality / App Server
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
|
|
Test / App Server: Reactor:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/sync/status/GithubIntegrationSyncRunnerTest.java#L240
unchecked generic array creation for varargs parameter of type java.util.List<de.tum.cit.aet.hephaestus.integration.core.spi.SyncTargetProvider.SyncTarget>[]
|
|
Test / App Server: Reactor:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/sync/status/GithubIntegrationSyncRunnerTest.java#L137
unchecked generic array creation for varargs parameter of type java.util.List<de.tum.cit.aet.hephaestus.integration.core.spi.SyncTargetProvider.SyncTarget>[]
|
|
Test / App Server: Reactor:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L481
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
|
|
Test / App Server: Reactor:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L464
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
|
|
Test / App Server: Reactor:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L441
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
|
|
Test / App Server: Reactor:
server/application/src/test/java/de/tum/cit/aet/hephaestus/core/auth/web/SecurityHeadersIntegrationTest.java#L47
value(java.lang.String,org.hamcrest.Matcher<? super java.lang.String>) in org.springframework.test.web.reactive.server.HeaderAssertions has been deprecated and marked for removal
|
|
Test / App Server: Reactor:
server/application/src/test/java/de/tum/cit/aet/hephaestus/core/auth/dev/DevLoginIntegrationTest.java#L80
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
|
|
Test / App Server: Reactor:
server/application/src/test/java/de/tum/cit/aet/hephaestus/core/audit/ConfigAuditIntegrationTest.java#L414
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
|
|
Test / App Server: Reactor:
server/application/src/test/java/de/tum/cit/aet/hephaestus/core/audit/ConfigAuditIntegrationTest.java#L412
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
|
|
Test / App Server: Reactor:
server/application/src/main/java/de/tum/cit/aet/hephaestus/workspace/WorkspaceService.java#L174
ownerUserId() in de.tum.cit.aet.hephaestus.workspace.dto.CreateWorkspaceRequestDTO has been deprecated and marked for removal
|
|
Test / App Server: Reactor
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
|
|
Docker / Webapp / Build linux/amd64 Docker Image
Please check that the "artifact-metadata:write" permission has been included
|
|
Docker / Webapp / Build linux/amd64 Docker Image
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record
|
|
Docker / Webapp / Build linux/amd64 Docker Image
sentry_project= is not a valid secret
|
|
Docker / Webapp / Build linux/amd64 Docker Image
sentry_org= is not a valid secret
|
|
Docker / Webapp / Build linux/amd64 Docker Image
sentry_auth_token= is not a valid secret
|
|
Docker / Webapp / Scan linux/amd64 Image
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
|
|
Quality / API and Database:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/sync/status/GithubIntegrationSyncRunnerTest.java#L240
unchecked generic array creation for varargs parameter of type java.util.List<de.tum.cit.aet.hephaestus.integration.core.spi.SyncTargetProvider.SyncTarget>[]
|
|
Quality / API and Database:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/sync/status/GithubIntegrationSyncRunnerTest.java#L137
unchecked generic array creation for varargs parameter of type java.util.List<de.tum.cit.aet.hephaestus.integration.core.spi.SyncTargetProvider.SyncTarget>[]
|
|
Quality / API and Database:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L481
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
|
|
Quality / API and Database:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L464
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
|
|
Quality / API and Database:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L441
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
|
|
Quality / API and Database:
server/application/src/test/java/de/tum/cit/aet/hephaestus/core/auth/web/SecurityHeadersIntegrationTest.java#L47
value(java.lang.String,org.hamcrest.Matcher<? super java.lang.String>) in org.springframework.test.web.reactive.server.HeaderAssertions has been deprecated and marked for removal
|
|
Quality / API and Database:
server/application/src/test/java/de/tum/cit/aet/hephaestus/core/auth/dev/DevLoginIntegrationTest.java#L80
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
|
|
Quality / API and Database:
server/application/src/test/java/de/tum/cit/aet/hephaestus/core/audit/ConfigAuditIntegrationTest.java#L414
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
|
|
Quality / API and Database:
server/application/src/test/java/de/tum/cit/aet/hephaestus/core/audit/ConfigAuditIntegrationTest.java#L412
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
|
|
Quality / API and Database:
server/application/src/main/java/de/tum/cit/aet/hephaestus/workspace/WorkspaceService.java#L174
ownerUserId() in de.tum.cit.aet.hephaestus.workspace.dto.CreateWorkspaceRequestDTO has been deprecated and marked for removal
|
|
Quality / API and Database
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
|
|
Test / App Server: Integration:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/sync/status/GithubIntegrationSyncRunnerTest.java#L240
unchecked generic array creation for varargs parameter of type java.util.List<de.tum.cit.aet.hephaestus.integration.core.spi.SyncTargetProvider.SyncTarget>[]
|
|
Test / App Server: Integration:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/sync/status/GithubIntegrationSyncRunnerTest.java#L137
unchecked generic array creation for varargs parameter of type java.util.List<de.tum.cit.aet.hephaestus.integration.core.spi.SyncTargetProvider.SyncTarget>[]
|
|
Test / App Server: Integration:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L481
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
|
|
Test / App Server: Integration:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L464
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
|
|
Test / App Server: Integration:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L441
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
|
|
Test / App Server: Integration:
server/application/src/test/java/de/tum/cit/aet/hephaestus/core/auth/web/SecurityHeadersIntegrationTest.java#L47
value(java.lang.String,org.hamcrest.Matcher<? super java.lang.String>) in org.springframework.test.web.reactive.server.HeaderAssertions has been deprecated and marked for removal
|
|
Test / App Server: Integration:
server/application/src/test/java/de/tum/cit/aet/hephaestus/core/auth/dev/DevLoginIntegrationTest.java#L80
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
|
|
Test / App Server: Integration:
server/application/src/test/java/de/tum/cit/aet/hephaestus/core/audit/ConfigAuditIntegrationTest.java#L414
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
|
|
Test / App Server: Integration:
server/application/src/test/java/de/tum/cit/aet/hephaestus/core/audit/ConfigAuditIntegrationTest.java#L412
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
|
|
Test / App Server: Integration:
server/application/src/main/java/de/tum/cit/aet/hephaestus/workspace/WorkspaceService.java#L174
ownerUserId() in de.tum.cit.aet.hephaestus.workspace.dto.CreateWorkspaceRequestDTO has been deprecated and marked for removal
|
|
Test / App Server: Integration
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
server-reactor-33535877878-1
Expired
|
255 MB |
sha256:8052bc10e2eb844eb46375ef058ed173d84c5b961f34e28eb96c7548b0b8484b
|
|
|
vulnerability-policy-webapp-linux-amd64
|
22.8 KB |
sha256:ac38f9cae05515373e7b09ca2844fdc2dd6999b6dba137c190ef5e81e0cf8a06
|
|