feat(ci): harden the supply chain and build the server once #4667
FelixTJDietrichcicd.yml
on: pull_request
Detect changes
17s
Changesets
/
Verify changesets
28s
Matrix: Docker / Agent: Pi / build
Matrix: Docker / Postgres (pg_partman) / build
Matrix: Docker / Webapp / build
Matrix: Quality / quality-gates
Actionlint
11s
Zizmor
27s
Quality
/
Webapp: Stories
5m 0s
Security
/
New dependency risk
10s
Security
/
Dependencies, secrets, and policy
43s
Test
/
App Server: Unit and architecture
6m 43s
Test
/
App Server: Integration
8m 55s
Compose
/
Render compose stacks
33s
Docker
/
Tag unchanged images
Matrix: Build / App Server image / build
Build
/
App Server: Generated artifacts
3m 14s
Build
/
App Server: Database
4m 15s
Build
/
Webapp: E2E
2m 51s
CI Status Gate
11s
Annotations
72 warnings and 2 notices
|
Changesets / Verify changesets
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
|
|
OpenSSF Scorecard Warning
npm/node-domexception has an OpenSSF Scorecard of 2.5, which is less than this repository's threshold of 3.
|
|
OpenSSF Scorecard Warning
npm/json-bigint has an OpenSSF Scorecard of 2.3, which is less than this repository's threshold of 3.
|
|
OpenSSF Scorecard Warning
npm/https-proxy-agent has an OpenSSF Scorecard of 2.8, which is less than this repository's threshold of 3.
|
|
OpenSSF Scorecard Warning
npm/http-proxy-agent has an OpenSSF Scorecard of 2.8, which is less than this repository's threshold of 3.
|
|
OpenSSF Scorecard Warning
npm/ecdsa-sig-formatter has an OpenSSF Scorecard of 2.6, which is less than this repository's threshold of 3.
|
|
OpenSSF Scorecard Warning
npm/debug has an OpenSSF Scorecard of 2.6, which is less than this repository's threshold of 3.
|
|
OpenSSF Scorecard Warning
npm/data-uri-to-buffer has an OpenSSF Scorecard of 2, which is less than this repository's threshold of 3.
|
|
OpenSSF Scorecard Warning
npm/buffer-equal-constant-time has an OpenSSF Scorecard of 2.9, which is less than this repository's threshold of 3.
|
|
OpenSSF Scorecard Warning
npm/base64-js has an OpenSSF Scorecard of 2.1, which is less than this repository's threshold of 3.
|
|
OpenSSF Scorecard Warning
npm/agent-base has an OpenSSF Scorecard of 2.8, which is less than this repository's threshold of 3.
|
|
Compose / Render compose stacks
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
|
|
Docker / Agent: Pi / Build linux/amd64 Docker Image
Please check that the "artifact-metadata:write" permission has been included
|
|
Docker / Agent: Pi / Build linux/amd64 Docker Image
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record
|
|
Docker / Agent: Pi / Build linux/amd64 Docker Image
sentry_project= is not a valid secret
|
|
Docker / Agent: Pi / Build linux/amd64 Docker Image
sentry_org= is not a valid secret
|
|
Docker / Agent: Pi / Build linux/amd64 Docker Image
sentry_auth_token= is not a valid secret
|
|
Docker / Postgres (pg_partman) / Build linux/amd64 Docker Image
Please check that the "artifact-metadata:write" permission has been included
|
|
Docker / Postgres (pg_partman) / Build linux/amd64 Docker Image
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record
|
|
Docker / Postgres (pg_partman) / Build linux/amd64 Docker Image
sentry_project= is not a valid secret
|
|
Docker / Postgres (pg_partman) / Build linux/amd64 Docker Image
sentry_org= is not a valid secret
|
|
Docker / Postgres (pg_partman) / Build linux/amd64 Docker Image
sentry_auth_token= is not a valid secret
|
|
Quality / Tooling and Docs
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
|
|
Docker / Agent: Pi / Scan linux/amd64 Image
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
|
|
Docker / Postgres (pg_partman) / Scan linux/amd64 Image
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
|
|
Build / App Server: Package:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/sync/status/GithubIntegrationSyncRunnerTest.java#L240
unchecked generic array creation for varargs parameter of type java.util.List<de.tum.cit.aet.hephaestus.integration.core.spi.SyncTargetProvider.SyncTarget>[]
|
|
Build / App Server: Package:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/sync/status/GithubIntegrationSyncRunnerTest.java#L137
unchecked generic array creation for varargs parameter of type java.util.List<de.tum.cit.aet.hephaestus.integration.core.spi.SyncTargetProvider.SyncTarget>[]
|
|
Build / App Server: Package:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L481
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
|
|
Build / App Server: Package:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L464
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
|
|
Build / App Server: Package:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L441
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
|
|
Build / App Server: Package:
server/application/src/test/java/de/tum/cit/aet/hephaestus/core/auth/web/SecurityHeadersIntegrationTest.java#L47
value(java.lang.String,org.hamcrest.Matcher<? super java.lang.String>) in org.springframework.test.web.reactive.server.HeaderAssertions has been deprecated and marked for removal
|
|
Build / App Server: Package:
server/application/src/test/java/de/tum/cit/aet/hephaestus/core/auth/dev/DevLoginIntegrationTest.java#L80
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
|
|
Build / App Server: Package:
server/application/src/test/java/de/tum/cit/aet/hephaestus/core/audit/ConfigAuditIntegrationTest.java#L414
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
|
|
Build / App Server: Package:
server/application/src/test/java/de/tum/cit/aet/hephaestus/core/audit/ConfigAuditIntegrationTest.java#L412
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
|
|
Build / App Server: Package:
server/application/src/main/java/de/tum/cit/aet/hephaestus/workspace/WorkspaceService.java#L174
ownerUserId() in de.tum.cit.aet.hephaestus.workspace.dto.CreateWorkspaceRequestDTO has been deprecated and marked for removal
|
|
Docker / Webapp / Build linux/amd64 Docker Image
Please check that the "artifact-metadata:write" permission has been included
|
|
Docker / Webapp / Build linux/amd64 Docker Image
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record
|
|
Docker / Webapp / Build linux/amd64 Docker Image
sentry_project= is not a valid secret
|
|
Docker / Webapp / Build linux/amd64 Docker Image
sentry_org= is not a valid secret
|
|
Docker / Webapp / Build linux/amd64 Docker Image
sentry_auth_token= is not a valid secret
|
|
Docker / Webapp / Scan linux/amd64 Image
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
|
|
Quality / App Server
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
|
|
Quality / Webapp
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
|
|
Build / Webapp: E2E
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
|
|
Quality / Webapp: Stories
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
|
|
Build / App Server: Generated artifacts
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
|
|
Build / App Server image / Build linux/amd64 Docker Image
Please check that the "artifact-metadata:write" permission has been included
|
|
Build / App Server image / Build linux/amd64 Docker Image
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record
|
|
Build / App Server: Database
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
|
|
Build / App Server image / Scan linux/amd64 Image
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
|
|
Test / App Server: Unit and architecture:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/sync/status/GithubIntegrationSyncRunnerTest.java#L240
unchecked generic array creation for varargs parameter of type java.util.List<de.tum.cit.aet.hephaestus.integration.core.spi.SyncTargetProvider.SyncTarget>[]
|
|
Test / App Server: Unit and architecture:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/sync/status/GithubIntegrationSyncRunnerTest.java#L137
unchecked generic array creation for varargs parameter of type java.util.List<de.tum.cit.aet.hephaestus.integration.core.spi.SyncTargetProvider.SyncTarget>[]
|
|
Test / App Server: Unit and architecture:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L481
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
|
|
Test / App Server: Unit and architecture:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L464
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
|
|
Test / App Server: Unit and architecture:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L441
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
|
|
Test / App Server: Unit and architecture:
server/application/src/test/java/de/tum/cit/aet/hephaestus/core/auth/web/SecurityHeadersIntegrationTest.java#L47
value(java.lang.String,org.hamcrest.Matcher<? super java.lang.String>) in org.springframework.test.web.reactive.server.HeaderAssertions has been deprecated and marked for removal
|
|
Test / App Server: Unit and architecture:
server/application/src/test/java/de/tum/cit/aet/hephaestus/core/auth/dev/DevLoginIntegrationTest.java#L80
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
|
|
Test / App Server: Unit and architecture:
server/application/src/test/java/de/tum/cit/aet/hephaestus/core/audit/ConfigAuditIntegrationTest.java#L414
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
|
|
Test / App Server: Unit and architecture:
server/application/src/test/java/de/tum/cit/aet/hephaestus/core/audit/ConfigAuditIntegrationTest.java#L412
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
|
|
Test / App Server: Unit and architecture:
server/application/src/main/java/de/tum/cit/aet/hephaestus/workspace/WorkspaceService.java#L174
ownerUserId() in de.tum.cit.aet.hephaestus.workspace.dto.CreateWorkspaceRequestDTO has been deprecated and marked for removal
|
|
Test / App Server: Unit and architecture
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
|
|
Test / App Server: Integration:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/sync/status/GithubIntegrationSyncRunnerTest.java#L240
unchecked generic array creation for varargs parameter of type java.util.List<de.tum.cit.aet.hephaestus.integration.core.spi.SyncTargetProvider.SyncTarget>[]
|
|
Test / App Server: Integration:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/sync/status/GithubIntegrationSyncRunnerTest.java#L137
unchecked generic array creation for varargs parameter of type java.util.List<de.tum.cit.aet.hephaestus.integration.core.spi.SyncTargetProvider.SyncTarget>[]
|
|
Test / App Server: Integration:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L481
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
|
|
Test / App Server: Integration:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L464
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
|
|
Test / App Server: Integration:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L441
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
|
|
Test / App Server: Integration:
server/application/src/test/java/de/tum/cit/aet/hephaestus/core/auth/web/SecurityHeadersIntegrationTest.java#L47
value(java.lang.String,org.hamcrest.Matcher<? super java.lang.String>) in org.springframework.test.web.reactive.server.HeaderAssertions has been deprecated and marked for removal
|
|
Test / App Server: Integration:
server/application/src/test/java/de/tum/cit/aet/hephaestus/core/auth/dev/DevLoginIntegrationTest.java#L80
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
|
|
Test / App Server: Integration:
server/application/src/test/java/de/tum/cit/aet/hephaestus/core/audit/ConfigAuditIntegrationTest.java#L414
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
|
|
Test / App Server: Integration:
server/application/src/test/java/de/tum/cit/aet/hephaestus/core/audit/ConfigAuditIntegrationTest.java#L412
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
|
|
Test / App Server: Integration:
server/application/src/main/java/de/tum/cit/aet/hephaestus/workspace/WorkspaceService.java#L174
ownerUserId() in de.tum.cit.aet.hephaestus.workspace.dto.CreateWorkspaceRequestDTO has been deprecated and marked for removal
|
|
Test / App Server: Integration
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
|
|
Changesets / Verify changesets
This PR contains Liquibase changesets — the release notes will flag the migration automatically. If the operator must act, add **Operators:** to its changeset and a matching .migration fragment.
|
|
🎭 Playwright Run Summary
2 skipped
2 passed (28.7s)
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
server-build-33612190729
|
255 MB |
sha256:bb59c792dd3b91d986ce711c923800fef11758aa5c7e066bc94a3aff149cdbdf
|
|
|
test-metrics-webapp-unit
|
995 Bytes |
sha256:9fc5efb6f7e539e1ba7bd79be5e32595fe8419a0a7cfa0938481a3ef5e8c0821
|
|
|
vulnerability-policy-agent-pi-linux-amd64
|
208 KB |
sha256:d024da51c30abaab19053810d4cdd459dced1174b87b5b42604b8605584325a3
|
|
|
vulnerability-policy-application-server-linux-amd64
|
57.4 KB |
sha256:6ef6402c6e4b0ec0ca33e74656d05384b1e34f17eb1e83669ea3f57cdc77f3c7
|
|
|
vulnerability-policy-postgres-linux-amd64
|
297 KB |
sha256:1387ceae5f0e8f810d84bdb8fe54867be24a5dd9d1cbbbb3c7336dfeff698ce8
|
|
|
vulnerability-policy-webapp-linux-amd64
|
22.8 KB |
sha256:be2847cdfdfddbc9df93c73fe45659fa6b210318406bb3ddd547e4b3ebd096b9
|
|