Skip to content

fix(ci): workflows start with no token permissions and the Maven wrapper ships no jar #4672

fix(ci): workflows start with no token permissions and the Maven wrapper ships no jar

fix(ci): workflows start with no token permissions and the Maven wrapper ships no jar #4672

Triggered via pull request September 2, 2026 11:09
Status Success
Total duration 9m 31s
Artifacts 6

cicd.yml

on: pull_request
Detect changes
13s
Detect changes
Changesets  /  Verify changesets
34s
Changesets / Verify changesets
Matrix: Docker / Agent: Pi / build
Matrix: Docker / Postgres (pg_partman) / build
Matrix: Docker / Webapp / build
Build  /  App Server: Package
2m 14s
Build / App Server: Package
Matrix: Quality / quality-gates
Actionlint
14s
Actionlint
Zizmor
26s
Zizmor
Quality  /  Webapp: Stories
5m 12s
Quality / Webapp: Stories
Security  /  New dependency risk
5s
Security / New dependency risk
Security  /  Dependencies, secrets, and policy
47s
Security / Dependencies, secrets, and policy
Test  /  App Server: Unit and architecture
6m 57s
Test / App Server: Unit and architecture
Test  /  App Server: Integration
9m 1s
Test / App Server: Integration
Compose  /  Render compose stacks
28s
Compose / Render compose stacks
Docker  /  Tag unchanged images
Docker / Tag unchanged images
Docker  /  ...  /  Create manifest
Docker / Agent: Pi / Create manifest
Docker  /  ...  /  Create manifest
Docker / Postgres (pg_partman) / Create manifest
Docker  /  ...  /  Create manifest
Docker / Webapp / Create manifest
Matrix: Build / App Server image / build
Build  /  App Server: Generated artifacts
2m 53s
Build / App Server: Generated artifacts
Build  /  App Server: Database
3m 55s
Build / App Server: Database
Build  /  Webapp: E2E
Build / Webapp: E2E
Docker  /  ...  /  Scan linux/amd64 Image
41s
Docker / Agent: Pi / Scan linux/amd64 Image
Docker  /  ...  /  Scan linux/amd64 Image
50s
Docker / Postgres (pg_partman) / Scan linux/amd64 Image
Docker  /  ...  /  Scan linux/amd64 Image
41s
Docker / Webapp / Scan linux/amd64 Image
Build  /  ...  /  Create manifest
0s
Build / App Server image / Create manifest
Build  /  ...  /  Scan linux/amd64 Image
1m 3s
Build / App Server image / Scan linux/amd64 Image
CI Status Gate
7s
CI Status Gate
Fit to window
Zoom out
Zoom in

Annotations

61 warnings
Changesets / Verify changesets
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
Compose / Render compose stacks
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
Quality / Tooling and Docs
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
Docker / Postgres (pg_partman) / Build linux/amd64 Docker Image
Please check that the "artifact-metadata:write" permission has been included
Docker / Postgres (pg_partman) / Build linux/amd64 Docker Image
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record
Docker / Postgres (pg_partman) / Build linux/amd64 Docker Image
sentry_project= is not a valid secret
Docker / Postgres (pg_partman) / Build linux/amd64 Docker Image
sentry_org= is not a valid secret
Docker / Postgres (pg_partman) / Build linux/amd64 Docker Image
sentry_auth_token= is not a valid secret
Docker / Agent: Pi / Build linux/amd64 Docker Image
Please check that the "artifact-metadata:write" permission has been included
Docker / Agent: Pi / Build linux/amd64 Docker Image
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record
Docker / Agent: Pi / Build linux/amd64 Docker Image
sentry_project= is not a valid secret
Docker / Agent: Pi / Build linux/amd64 Docker Image
sentry_org= is not a valid secret
Docker / Agent: Pi / Build linux/amd64 Docker Image
sentry_auth_token= is not a valid secret
Docker / Webapp / Build linux/amd64 Docker Image
Please check that the "artifact-metadata:write" permission has been included
Docker / Webapp / Build linux/amd64 Docker Image
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record
Docker / Webapp / Build linux/amd64 Docker Image
sentry_project= is not a valid secret
Docker / Webapp / Build linux/amd64 Docker Image
sentry_org= is not a valid secret
Docker / Webapp / Build linux/amd64 Docker Image
sentry_auth_token= is not a valid secret
Docker / Postgres (pg_partman) / Scan linux/amd64 Image
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
Docker / Agent: Pi / Scan linux/amd64 Image
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
Build / App Server: Package: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/sync/status/GithubIntegrationSyncRunnerTest.java#L240
unchecked generic array creation for varargs parameter of type java.util.List<de.tum.cit.aet.hephaestus.integration.core.spi.SyncTargetProvider.SyncTarget>[]
Build / App Server: Package: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/sync/status/GithubIntegrationSyncRunnerTest.java#L137
unchecked generic array creation for varargs parameter of type java.util.List<de.tum.cit.aet.hephaestus.integration.core.spi.SyncTargetProvider.SyncTarget>[]
Build / App Server: Package: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L481
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
Build / App Server: Package: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L464
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
Build / App Server: Package: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L441
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
Build / App Server: Package: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/auth/web/SecurityHeadersIntegrationTest.java#L47
value(java.lang.String,org.hamcrest.Matcher<? super java.lang.String>) in org.springframework.test.web.reactive.server.HeaderAssertions has been deprecated and marked for removal
Build / App Server: Package: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/auth/dev/DevLoginIntegrationTest.java#L80
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
Build / App Server: Package: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/audit/ConfigAuditIntegrationTest.java#L414
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
Build / App Server: Package: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/audit/ConfigAuditIntegrationTest.java#L412
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
Build / App Server: Package: server/application/src/main/java/de/tum/cit/aet/hephaestus/workspace/WorkspaceService.java#L174
ownerUserId() in de.tum.cit.aet.hephaestus.workspace.dto.CreateWorkspaceRequestDTO has been deprecated and marked for removal
Docker / Webapp / Scan linux/amd64 Image
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
Quality / App Server
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
Build / App Server: Generated artifacts
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
Quality / Webapp: Stories
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
Quality / Webapp
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
Build / App Server image / Build linux/amd64 Docker Image
Please check that the "artifact-metadata:write" permission has been included
Build / App Server image / Build linux/amd64 Docker Image
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record
Build / App Server: Database
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
Build / App Server image / Scan linux/amd64 Image
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
Test / App Server: Unit and architecture: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/sync/status/GithubIntegrationSyncRunnerTest.java#L240
unchecked generic array creation for varargs parameter of type java.util.List<de.tum.cit.aet.hephaestus.integration.core.spi.SyncTargetProvider.SyncTarget>[]
Test / App Server: Unit and architecture: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/sync/status/GithubIntegrationSyncRunnerTest.java#L137
unchecked generic array creation for varargs parameter of type java.util.List<de.tum.cit.aet.hephaestus.integration.core.spi.SyncTargetProvider.SyncTarget>[]
Test / App Server: Unit and architecture: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L481
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
Test / App Server: Unit and architecture: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L464
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
Test / App Server: Unit and architecture: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L441
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
Test / App Server: Unit and architecture: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/auth/web/SecurityHeadersIntegrationTest.java#L47
value(java.lang.String,org.hamcrest.Matcher<? super java.lang.String>) in org.springframework.test.web.reactive.server.HeaderAssertions has been deprecated and marked for removal
Test / App Server: Unit and architecture: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/auth/dev/DevLoginIntegrationTest.java#L80
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
Test / App Server: Unit and architecture: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/audit/ConfigAuditIntegrationTest.java#L414
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
Test / App Server: Unit and architecture: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/audit/ConfigAuditIntegrationTest.java#L412
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
Test / App Server: Unit and architecture: server/application/src/main/java/de/tum/cit/aet/hephaestus/workspace/WorkspaceService.java#L174
ownerUserId() in de.tum.cit.aet.hephaestus.workspace.dto.CreateWorkspaceRequestDTO has been deprecated and marked for removal
Test / App Server: Unit and architecture
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
Test / App Server: Integration: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/sync/status/GithubIntegrationSyncRunnerTest.java#L240
unchecked generic array creation for varargs parameter of type java.util.List<de.tum.cit.aet.hephaestus.integration.core.spi.SyncTargetProvider.SyncTarget>[]
Test / App Server: Integration: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/sync/status/GithubIntegrationSyncRunnerTest.java#L137
unchecked generic array creation for varargs parameter of type java.util.List<de.tum.cit.aet.hephaestus.integration.core.spi.SyncTargetProvider.SyncTarget>[]
Test / App Server: Integration: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L481
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
Test / App Server: Integration: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L464
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
Test / App Server: Integration: server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L441
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
Test / App Server: Integration: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/auth/web/SecurityHeadersIntegrationTest.java#L47
value(java.lang.String,org.hamcrest.Matcher<? super java.lang.String>) in org.springframework.test.web.reactive.server.HeaderAssertions has been deprecated and marked for removal
Test / App Server: Integration: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/auth/dev/DevLoginIntegrationTest.java#L80
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
Test / App Server: Integration: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/audit/ConfigAuditIntegrationTest.java#L414
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
Test / App Server: Integration: server/application/src/test/java/de/tum/cit/aet/hephaestus/core/audit/ConfigAuditIntegrationTest.java#L412
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
Test / App Server: Integration: server/application/src/main/java/de/tum/cit/aet/hephaestus/workspace/WorkspaceService.java#L174
ownerUserId() in de.tum.cit.aet.hephaestus.workspace.dto.CreateWorkspaceRequestDTO has been deprecated and marked for removal
Test / App Server: Integration
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON

Artifacts

Produced during runtime
Name Size Digest
server-build-33623145704
255 MB
sha256:eed617595293335afa25a91c9500bb3e8158180a4f1019ebd7ee96235342321b
test-metrics-webapp-unit
1002 Bytes
sha256:d4308602ce47f52f10f88869dad4a40ee04f74426fc974070a2fe12d0633ca87
vulnerability-policy-agent-pi-linux-amd64
208 KB
sha256:2dc750e7d428b2c79611625a1992f9ef8f37415e55f16bda07aa5ee69652e3ee
vulnerability-policy-application-server-linux-amd64
57.4 KB
sha256:e4cf3f42113b431a8c12100272e38eb9205aaed154526be6fc1da8edff96b3aa
vulnerability-policy-postgres-linux-amd64
297 KB
sha256:5ffe00d6cecb64b94f8649cc3043613bcc8a16d6bab4d232c258ede08fd73c9d
vulnerability-policy-webapp-linux-amd64
22.8 KB
sha256:c502813c981fd5d6e6c1fecf780daaddd66112b40016debb184a64b1274b43a0