Dev Pipeline

SPSH-698: Personenkontexte bearbeiten: Weitere Zuordnung hinzufügen (… #4348

Sign in to view logs

Triggered via push July 10, 2024 12:37

main

Status Cancelled

Total duration 31m 11s

Artifacts 1

image-and-helm-publish-check-deploy-on-push-scheduled.yml

on: push

branch_meta / branch_meta

create_branch_identifier_for_deletion / convert_branch_name

CodeQL / Analyze CodeQL

Linting / Nest Lint

Tests and Sonarcloud / Tests and Sonarcloud

scan_helm / Kics Helm Chart Scan

Scheduled trivy scan of latest image / Trivy Scan

create_branch_identifier / convert_branch_name

delete_namespace / create_keycloak_db_name

delete_namespace / create_spsh_app_db_name

delete_namespace / create_ticket_nr_variable

Publish image and scan with trivy / Publish image

select_helm_version_generation_and_image_tag_generation

delete_namespace / delete_namespace

Publish image and scan with trivy / pre_scan

release_helm / release

delete_successful

Publish image and scan with trivy / ... / Trivy Scan

deploy / ... / branch_meta

deploy / ... / search_for_helm_tagname

deploy / ... / search_for_helm_tagname

deploy / ... / search_for_helm_tagname

deploy / ... / search_for_helm_tagname

deploy / create_dbildungs_iam_keycloak_db_name

deploy / create_dbildungs_iam_server_db_name

deploy / determine_playwright_branch

deploy / ... / convert_branch_name

deploy / deployment

deploy / ... / run_playwright_end2end_tests

Annotations

2 errors and 16 warnings

deploy / run_playwright_tests / run_playwright_end2end_tests

Canceling since a higher priority waiting request for 'dbildungs-iam-server-refs/heads/main' exists

deploy / run_playwright_tests / run_playwright_end2end_tests

The operation was canceled.

[MEDIUM] Container Running As Root: charts/dbildungs-iam-server/templates/redis-deployment.yaml#L22

Containers should only run as non-root user. This limits the exploitability of security misconfigurations and restricts an attacker's possibilities in case of compromise

[MEDIUM] Container Running As Root: charts/dbildungs-iam-server/templates/ldap-deployment.yaml#L21

Containers should only run as non-root user. This limits the exploitability of security misconfigurations and restricts an attacker's possibilities in case of compromise

[MEDIUM] Container Running With Low UID: charts/dbildungs-iam-server/templates/ldap-deployment.yaml#L21

Check if containers are running with low UID, which might cause conflicts with the host's user table.

[MEDIUM] Container Running With Low UID: charts/dbildungs-iam-server/templates/backend-deployment.yaml#L23

Check if containers are running with low UID, which might cause conflicts with the host's user table.

[MEDIUM] Container Running With Low UID: charts/dbildungs-iam-server/templates/backend-deployment.yaml#L78

Check if containers are running with low UID, which might cause conflicts with the host's user table.

[MEDIUM] Container Running With Low UID: charts/dbildungs-iam-server/templates/backend-deployment.yaml#L23

Check if containers are running with low UID, which might cause conflicts with the host's user table.

[MEDIUM] Container Running With Low UID: charts/dbildungs-iam-server/templates/redis-deployment.yaml#L38

Check if containers are running with low UID, which might cause conflicts with the host's user table.

[MEDIUM] Container Running With Low UID: charts/dbildungs-iam-server/templates/backend-deployment.yaml#L23

Check if containers are running with low UID, which might cause conflicts with the host's user table.

[MEDIUM] Container Running With Low UID: charts/dbildungs-iam-server/templates/redis-deployment.yaml#L34

Check if containers are running with low UID, which might cause conflicts with the host's user table.

[MEDIUM] NET_RAW Capabilities Not Being Dropped: charts/dbildungs-iam-server/templates/redis-deployment.yaml#L22

Containers should drop 'ALL' or at least 'NET_RAW' capabilities

release_helm / release

The following actions uses Node.js version which is deprecated and will be forced to run on node20: azure/setup-helm@5119fcb9089d432beecbf79bb2c7915207344b78. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/

deploy / find_dbildungs_iam_server_helm_chart_tag / search_for_helm_tagname

The following actions uses Node.js version which is deprecated and will be forced to run on node20: cardinalby/git-get-release-action@cedef2faf69cb7c55b285bad07688d04430b7ada. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/

deploy / find_dbildungs_iam_ldap_helm_chart_tag / search_for_helm_tagname

The following actions uses Node.js version which is deprecated and will be forced to run on node20: cardinalby/git-get-release-action@cedef2faf69cb7c55b285bad07688d04430b7ada. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/

deploy / find_dbildungs_iam_keycloak_helm_chart_tag / search_for_helm_tagname

The following actions uses Node.js version which is deprecated and will be forced to run on node20: cardinalby/git-get-release-action@cedef2faf69cb7c55b285bad07688d04430b7ada. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/

deploy / find_schulportal_client_helm_chart_tag / search_for_helm_tagname

The following actions uses Node.js version which is deprecated and will be forced to run on node20: cardinalby/git-get-release-action@cedef2faf69cb7c55b285bad07688d04430b7ada. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/

deploy / run_playwright_tests / run_playwright_end2end_tests

No files were found with the provided path: playwright-report/. No artifacts will be uploaded.

Artifacts

Produced during runtime

Name	Size
test-artifacts Expired	1.05 MB