fix(ci): workflows start with no token permissions and the Maven wrap… #4677
github-merge-queue[bot]cicd.yml
on: push
Detect changes
15s
Changesets
/
Verify changesets
Matrix: Docker / Agent: Pi / build
Matrix: Docker / Postgres (pg_partman) / build
Matrix: Docker / Webapp / build
Matrix: Quality / quality-gates
Waiting for pending jobs
Actionlint
Zizmor
Docker
/
Tag unchanged images
Compose
/
Render compose stacks
Quality
/
Webapp: Stories
Security
/
Dependencies, secrets, and policy
Security
/
New dependency risk
Test
/
App Server: Integration
Test
/
App Server: Unit and architecture
Matrix: Build / App Server image / build
Build
/
App Server: Generated artifacts
Build
/
App Server: Database
Build
/
Webapp: E2E
CI Status Gate
8s
Annotations
40 warnings
|
Docker / Postgres (pg_partman) / Build linux/arm64 Docker Image
sentry_project= is not a valid secret
|
|
Docker / Postgres (pg_partman) / Build linux/arm64 Docker Image
sentry_org= is not a valid secret
|
|
Docker / Postgres (pg_partman) / Build linux/arm64 Docker Image
sentry_auth_token= is not a valid secret
|
|
Docker / Postgres (pg_partman) / Build linux/amd64 Docker Image
sentry_project= is not a valid secret
|
|
Docker / Postgres (pg_partman) / Build linux/amd64 Docker Image
sentry_org= is not a valid secret
|
|
Docker / Postgres (pg_partman) / Build linux/amd64 Docker Image
sentry_auth_token= is not a valid secret
|
|
Docker / Agent: Pi / Build linux/amd64 Docker Image
sentry_project= is not a valid secret
|
|
Docker / Agent: Pi / Build linux/amd64 Docker Image
sentry_org= is not a valid secret
|
|
Docker / Agent: Pi / Build linux/amd64 Docker Image
sentry_auth_token= is not a valid secret
|
|
Docker / Agent: Pi / Build linux/arm64 Docker Image
sentry_project= is not a valid secret
|
|
Docker / Agent: Pi / Build linux/arm64 Docker Image
sentry_org= is not a valid secret
|
|
Docker / Agent: Pi / Build linux/arm64 Docker Image
sentry_auth_token= is not a valid secret
|
|
Docker / Webapp / Build linux/arm64 Docker Image
sentry_project= is not a valid secret
|
|
Docker / Webapp / Build linux/arm64 Docker Image
sentry_org= is not a valid secret
|
|
Docker / Webapp / Build linux/arm64 Docker Image
sentry_auth_token= is not a valid secret
|
|
Docker / Webapp / Build linux/amd64 Docker Image
sentry_project= is not a valid secret
|
|
Docker / Webapp / Build linux/amd64 Docker Image
sentry_org= is not a valid secret
|
|
Docker / Webapp / Build linux/amd64 Docker Image
sentry_auth_token= is not a valid secret
|
|
Docker / Postgres (pg_partman) / Create manifest
Please check that the "artifact-metadata:write" permission has been included
|
|
Docker / Postgres (pg_partman) / Create manifest
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record
|
|
Docker / Agent: Pi / Create manifest
Please check that the "artifact-metadata:write" permission has been included
|
|
Docker / Agent: Pi / Create manifest
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record
|
|
Docker / Webapp / Create manifest
Please check that the "artifact-metadata:write" permission has been included
|
|
Docker / Webapp / Create manifest
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record
|
|
Build / App Server: Package:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/sync/status/GithubIntegrationSyncRunnerTest.java#L240
unchecked generic array creation for varargs parameter of type java.util.List<de.tum.cit.aet.hephaestus.integration.core.spi.SyncTargetProvider.SyncTarget>[]
|
|
Build / App Server: Package:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/sync/status/GithubIntegrationSyncRunnerTest.java#L137
unchecked generic array creation for varargs parameter of type java.util.List<de.tum.cit.aet.hephaestus.integration.core.spi.SyncTargetProvider.SyncTarget>[]
|
|
Build / App Server: Package:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L481
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
|
|
Build / App Server: Package:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L464
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
|
|
Build / App Server: Package:
server/application/src/test/java/de/tum/cit/aet/hephaestus/integration/scm/github/feedback/GithubSummaryChannelTest.java#L441
unchecked generic array creation for varargs parameter of type reactor.core.publisher.Mono<org.springframework.graphql.client.ClientGraphQlResponse>[]
|
|
Build / App Server: Package:
server/application/src/test/java/de/tum/cit/aet/hephaestus/core/auth/web/SecurityHeadersIntegrationTest.java#L47
value(java.lang.String,org.hamcrest.Matcher<? super java.lang.String>) in org.springframework.test.web.reactive.server.HeaderAssertions has been deprecated and marked for removal
|
|
Build / App Server: Package:
server/application/src/test/java/de/tum/cit/aet/hephaestus/core/auth/dev/DevLoginIntegrationTest.java#L80
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
|
|
Build / App Server: Package:
server/application/src/test/java/de/tum/cit/aet/hephaestus/core/audit/ConfigAuditIntegrationTest.java#L414
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
|
|
Build / App Server: Package:
server/application/src/test/java/de/tum/cit/aet/hephaestus/core/audit/ConfigAuditIntegrationTest.java#L412
<T>value(org.hamcrest.Matcher<? super T>) in org.springframework.test.web.reactive.server.JsonPathAssertions has been deprecated and marked for removal
|
|
Build / App Server: Package:
server/application/src/main/java/de/tum/cit/aet/hephaestus/workspace/WorkspaceService.java#L174
ownerUserId() in de.tum.cit.aet.hephaestus.workspace.dto.CreateWorkspaceRequestDTO has been deprecated and marked for removal
|
|
Docker / Agent: Pi / Scan linux/amd64 Image
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
|
|
Docker / Postgres (pg_partman) / Scan linux/amd64 Image
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
|
|
Docker / Webapp / Scan linux/amd64 Image
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
|
|
Build / App Server image / Create manifest
Please check that the "artifact-metadata:write" permission has been included
|
|
Build / App Server image / Create manifest
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record
|
|
Build / App Server image / Scan linux/amd64 Image
Unable to determine the installed runtime versions: Unexpected token 'W', "[WARN] Usin"... is not valid JSON
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
digests-hephaestus-build-agent-pi-linux-amd64
|
244 Bytes |
sha256:e42489a85d177ba3a236a379816b17be802ce0c089a041f4c1a5e09ba76cfe17
|
|
|
digests-hephaestus-build-agent-pi-linux-arm64
|
244 Bytes |
sha256:c7f36d78af706ce1c9362257031159391db270f355d6ee54b6f009cceaf48ad4
|
|
|
digests-hephaestus-build-application-server-linux-amd64
|
244 Bytes |
sha256:8392d5ab65159cdc81f80a54c82d3e9708bf3eb798988b9d35cfee1a99c93143
|
|
|
digests-hephaestus-build-application-server-linux-arm64
|
244 Bytes |
sha256:ad224be44401dd3f9e4a2a258a1449dc4c691bed217023814025f04d325853c5
|
|
|
digests-hephaestus-build-postgres-linux-amd64
|
244 Bytes |
sha256:627eb914c2e117a3f1a5909a5e3a282037cdb348b4994e37877942ea460b7132
|
|
|
digests-hephaestus-build-postgres-linux-arm64
|
244 Bytes |
sha256:e08c845f02d4d930910481bb3069d9ed4c1e2ff8160decfc04f7c949678f681e
|
|
|
digests-hephaestus-build-webapp-linux-amd64
|
244 Bytes |
sha256:970756160fa81128b2385b29b5689e3526bf726c41a656773494e2cf5949e2b4
|
|
|
digests-hephaestus-build-webapp-linux-arm64
|
244 Bytes |
sha256:37187bb484c16e09ca378771ac26dbfa99527a7bdf8f6060f9148c94ffcfb682
|
|
|
server-build-33625984237
|
255 MB |
sha256:2084b64446eaed5b71030c7bbcf6f68192655684df4ea723a292c5e157faa5b5
|
|
|
vulnerability-policy-agent-pi-linux-amd64
|
207 KB |
sha256:df707b85b6632010cd014d4f7858a5dfdad2ddde2d6a7e0846321ac75744c18d
|
|
|
vulnerability-policy-application-server-linux-amd64
|
57.4 KB |
sha256:5d3f85b75c7f4a45dd5dc03c6807f06928bd885dd4fc143ce915777baa75c378
|
|
|
vulnerability-policy-postgres-linux-amd64
|
297 KB |
sha256:cc74431349177e55fbd3b258219c680bfe6e6a97fec11f082a41a728fddc48d7
|
|
|
vulnerability-policy-webapp-linux-amd64
|
22.7 KB |
sha256:f3fa1323679124692275a8de70c07387267a7c127c399a606724d01044458668
|
|