feat(ci): harden the supply chain and build the server once (#1728) #4669
github-merge-queue[bot]cicd.yml
on: push
Detect changes
11s
Changesets
/
Verify changesets
Matrix: Docker / Agent: Pi / build
Matrix: Docker / Postgres (pg_partman) / build
Matrix: Docker / Webapp / build
Matrix: Quality / quality-gates
Waiting for pending jobs
Actionlint
0s
Zizmor
0s
Docker
/
Tag unchanged images
0s
Compose
/
Render compose stacks
Quality
/
Webapp: Stories
Security
/
Dependencies, secrets, and policy
Security
/
New dependency risk
Test
/
App Server: Integration
Test
/
App Server: Unit and architecture
Matrix: Build / App Server image / build
Build
/
App Server: Generated artifacts
0s
Build
/
App Server: Database
0s
Build
/
Webapp: E2E
0s
CI Status Gate
9s
Annotations
40 warnings
|
Docker / Postgres (pg_partman) / Build linux/amd64 Docker Image
sentry_project= is not a valid secret
|
|
Docker / Postgres (pg_partman) / Build linux/amd64 Docker Image
sentry_org= is not a valid secret
|
|
Docker / Postgres (pg_partman) / Build linux/amd64 Docker Image
sentry_auth_token= is not a valid secret
|
|
Docker / Postgres (pg_partman) / Build linux/arm64 Docker Image
sentry_project= is not a valid secret
|
|
Docker / Postgres (pg_partman) / Build linux/arm64 Docker Image
sentry_org= is not a valid secret
|
|
Docker / Postgres (pg_partman) / Build linux/arm64 Docker Image
sentry_auth_token= is not a valid secret
|
|
Docker / Agent: Pi / Build linux/arm64 Docker Image
sentry_project= is not a valid secret
|
|
Docker / Agent: Pi / Build linux/arm64 Docker Image
sentry_org= is not a valid secret
|
|
Docker / Agent: Pi / Build linux/arm64 Docker Image
sentry_auth_token= is not a valid secret
|
|
Docker / Agent: Pi / Build linux/amd64 Docker Image
sentry_project= is not a valid secret
|
|
Docker / Agent: Pi / Build linux/amd64 Docker Image
sentry_org= is not a valid secret
|
|
Docker / Agent: Pi / Build linux/amd64 Docker Image
sentry_auth_token= is not a valid secret
|
|
Docker / Postgres (pg_partman) / Create manifest
Please check that the "artifact-metadata:write" permission has been included
|
|
Docker / Postgres (pg_partman) / Create manifest
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record
|
|
Docker / Agent: Pi / Create manifest
Please check that the "artifact-metadata:write" permission has been included
|
|
Docker / Agent: Pi / Create manifest
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record
|
|
Docker / Webapp / Build linux/arm64 Docker Image
sentry_project= is not a valid secret
|
|
Docker / Webapp / Build linux/arm64 Docker Image
sentry_org= is not a valid secret
|
|
Docker / Webapp / Build linux/arm64 Docker Image
sentry_auth_token= is not a valid secret
|
|
Build / App Server: Package:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/sync/status/GithubIntegrationSyncRunnerTest.java#L240
unchecked generic array creation for varargs parameter of type java.util.List<de.tum.cit.aet.hephaestus.integration.core.spi.SyncTargetProvider.SyncTarget>[]
|
|
Build / App Server: Package:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/sync/status/GithubIntegrationSyncRunnerTest.java#L137
unchecked generic array creation for varargs parameter of type java.util.List<de.tum.cit.aet.hephaestus.integration.core.spi.SyncTargetProvider.SyncTarget>[]
|
|
Build / App Server: Package:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L481
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
|
|
Build / App Server: Package:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L464
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
|
|
Build / App Server: Package:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L441
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
|
|
Build / App Server: Package:
server/application/src/test/java/de/tum/cit/aet/hephaestus/core/auth/web/SecurityHeadersIntegrationTest.java#L47
value(java.lang.String,org.hamcrest.Matcher<? super java.lang.String>) in org.springframework.test.web.reactive.server.HeaderAssertions has been deprecated and marked for removal
|
|
Build / App Server: Package:
server/application/src/test/java/de/tum/cit/aet/hephaestus/core/auth/dev/DevLoginIntegrationTest.java#L80
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
|
|
Build / App Server: Package:
server/application/src/test/java/de/tum/cit/aet/hephaestus/core/audit/ConfigAuditIntegrationTest.java#L414
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
|
|
Build / App Server: Package:
server/application/src/test/java/de/tum/cit/aet/hephaestus/core/audit/ConfigAuditIntegrationTest.java#L412
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
|
|
Build / App Server: Package:
server/application/src/main/java/de/tum/cit/aet/hephaestus/workspace/WorkspaceService.java#L174
ownerUserId() in de.tum.cit.aet.hephaestus.workspace.dto.CreateWorkspaceRequestDTO has been deprecated and marked for removal
|
|
Docker / Postgres (pg_partman) / Scan linux/amd64 Image
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
|
|
Docker / Agent: Pi / Scan linux/amd64 Image
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
|
|
Docker / Webapp / Build linux/amd64 Docker Image
sentry_project= is not a valid secret
|
|
Docker / Webapp / Build linux/amd64 Docker Image
sentry_org= is not a valid secret
|
|
Docker / Webapp / Build linux/amd64 Docker Image
sentry_auth_token= is not a valid secret
|
|
Docker / Webapp / Create manifest
Please check that the "artifact-metadata:write" permission has been included
|
|
Docker / Webapp / Create manifest
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record
|
|
Docker / Webapp / Scan linux/amd64 Image
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
|
|
Build / App Server image / Create manifest
Please check that the "artifact-metadata:write" permission has been included
|
|
Build / App Server image / Create manifest
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record
|
|
Build / App Server image / Scan linux/amd64 Image
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
digests-hephaestus-build-agent-pi-linux-amd64
|
244 Bytes |
sha256:ee77665eec0b1c3e1e4dc0b319dac915dc4a577440e233f3da1ccd370ca6e37c
|
|
|
digests-hephaestus-build-agent-pi-linux-arm64
|
244 Bytes |
sha256:9e41e7707f3972c4802e0471f187857fbdbf08aaa4fc9735a95359f80e1e9d99
|
|
|
digests-hephaestus-build-application-server-linux-amd64
|
244 Bytes |
sha256:46be507b4c1f16d18dfefdd1f65d5d37930817ea50e77115c669e57b90c6c48d
|
|
|
digests-hephaestus-build-application-server-linux-arm64
|
244 Bytes |
sha256:690224543e2099acf3fc9c329e18969dcab6ade4d4e35a1ca117d743771bce9e
|
|
|
digests-hephaestus-build-postgres-linux-amd64
|
244 Bytes |
sha256:544a7cb1b3234fe18fd63bb3d0e16a56b5bfc7cbc9838da668825b6abe86d80a
|
|
|
digests-hephaestus-build-postgres-linux-arm64
|
244 Bytes |
sha256:a9f1ea7b58be39ec9c0c7227960d7ea23152c5923538f531d91348405077e7a9
|
|
|
digests-hephaestus-build-webapp-linux-amd64
|
244 Bytes |
sha256:67b7aaeb3d3bee3896f8716ba45a5da05850e4e7f20db54f61c2a4648ecb9a96
|
|
|
digests-hephaestus-build-webapp-linux-arm64
|
244 Bytes |
sha256:0c2574365980850d320d4fdb68b1750050cd39adbe381818467deefa643987cc
|
|
|
server-build-33614829361
|
255 MB |
sha256:1640dc0138829be2a5778d14461ee6d7c6254c958448cf7073b94dd82c9387d3
|
|
|
vulnerability-policy-agent-pi-linux-amd64
|
207 KB |
sha256:e3adccf1eedb6fd68e34fa7af6370198834903c411726d813e8b7faa6295c430
|
|
|
vulnerability-policy-application-server-linux-amd64
|
57.4 KB |
sha256:0e6beb87aed7603c79d16d3175da059929e58e852877e1f89ea43f6c7b51cb7d
|
|
|
vulnerability-policy-postgres-linux-amd64
|
297 KB |
sha256:8435887e82c0d2a91b905e296dc99572bc84106bd39d2ae227ef8814e776250c
|
|
|
vulnerability-policy-webapp-linux-amd64
|
22.7 KB |
sha256:277fe5d8bd25beba7a764d907f92f6b98c4015471500783ba3b179a7fd3ceb51
|
|