Skip to content

Bump slackapi/slack-github-action from 1.23.0 to 1.27.0 #7900

Bump slackapi/slack-github-action from 1.23.0 to 1.27.0

Bump slackapi/slack-github-action from 1.23.0 to 1.27.0 #7900

Status Failure
Total duration 1h 31m 45s
Artifacts
Matrix: Build
login-to-amazon-ecr
2s
login-to-amazon-ecr
Cypress E2E Tests
0s
Cypress E2E Tests
Get Latest Workflow Run Number
0s
Get Latest Workflow Run Number
Testing Reports
0s
Testing Reports
Matrix: Deploy
Notify Failure
0s
Notify Failure
Fit to window
Zoom out
Zoom in

Annotations

18 errors and 20 warnings
Run Jenkins CI
Credentials could not be loaded, please check your action inputs: Could not load credentials from any providers
login-to-amazon-ecr
Credentials could not be loaded, please check your action inputs: Could not load credentials from any providers
Security Audit
Security advisory: Title: qs vulnerable to Prototype Pollution Module name: qs Dependency: node-libcurl Path: node-libcurl>node-gyp>request>qs Severity: high Details: https://github.com/advisories/GHSA-hrpp-h998-j3pp
Security Audit
Security advisory: Title: tough-cookie Prototype Pollution vulnerability Module name: tough-cookie Dependency: node-libcurl Path: node-libcurl>node-gyp>request>tough-cookie Severity: moderate Details: https://github.com/advisories/GHSA-72xf-g2v4-qvf3
Security Audit
Security advisory: Title: qs vulnerable to Prototype Pollution Module name: qs Dependency: express Path: express>qs Severity: high Details: https://github.com/advisories/GHSA-hrpp-h998-j3pp
Security Audit
Security advisory: Title: Command Injection in moment-timezone Module name: moment-timezone Dependency: moment-timezone Path: moment-timezone Severity: low Details: https://github.com/advisories/GHSA-56x4-j7p9-fcf9
Security Audit
Security advisory: Title: Cleartext Transmission of Sensitive Information in moment-timezone Module name: moment-timezone Dependency: moment-timezone Path: moment-timezone Severity: moderate Details: https://github.com/advisories/GHSA-v78c-4p63-2j6c
Security Audit
Security advisory: Title: json-schema is vulnerable to Prototype Pollution Module name: json-schema Dependency: node-libcurl Path: node-libcurl>node-gyp>request>http-signature>jsprim>json-schema Severity: critical Details: https://github.com/advisories/GHSA-896r-f27r-55mw
Security Audit
Security advisory: Title: Moment.js vulnerable to Inefficient Regular Expression Complexity Module name: moment Dependency: moment Path: moment Severity: high Details: https://github.com/advisories/GHSA-wc69-rhjr-hc9g
Security Audit
Security advisory: Title: Express.js Open Redirect in malformed URLs Module name: express Dependency: express Path: express Severity: moderate Details: https://github.com/advisories/GHSA-rv95-896h-c2vc
Security Audit
Security advisory: Title: Vercel ms Inefficient Regular Expression Complexity vulnerability Module name: ms Dependency: metalsmith-markdownit Path: metalsmith-markdownit>debug>ms Severity: moderate Details: https://github.com/advisories/GHSA-w9mr-4mfr-499f
Security Audit
Security advisory: Title: debug Inefficient Regular Expression Complexity vulnerability Module name: debug Dependency: metalsmith-markdownit Path: metalsmith-markdownit>debug Severity: high Details: https://github.com/advisories/GHSA-9vvw-cc9w-f27h
Unit Tests
❌ Failed to create checks using the provided token. (HttpError: Resource not accessible by integration)
Build (vagovprod)
User: arn:aws-us-gov:sts::***:assumed-role/dsva-vagov-content-build-gha-runner-role/i-0678fb94e2ba72ead is not authorized to perform: sts:TagSession on resource: ***
Build (vagovdev)
The job was canceled because "vagovprod" failed.
Build (vagovdev)
The operation was canceled.
Build (vagovstaging)
The job was canceled because "vagovprod" failed.
Build (vagovstaging)
The operation was canceled.
Run Jenkins CI
The following actions use a deprecated Node.js version and will be forced to run on node20: aws-actions/configure-aws-credentials@e1e17a757e536f70e52b5a12b2e8d1d1c60e04ef. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
Security Audit
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c, actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8, nick-invision/retry@943e742917ac94714d2f408a0e8320f2d1fcafcd. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
Unit Tests
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c, actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8, nick-invision/retry@943e742917ac94714d2f408a0e8320f2d1fcafcd, mikepenz/action-junit-report@959aefb7f095e717eb407fe917238d61ca323ff3. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
Unit Tests
⚠️ This usually indicates insufficient permissions. More details: https://github.com/mikepenz/action-junit-report/issues/23
Linting
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c, actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8, nick-invision/retry@943e742917ac94714d2f408a0e8320f2d1fcafcd. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
Linting: config/webpack.config.js#L31
config/webpack.config.js:31:22:Use an object spread instead of `Object.assign` eg: `{ ...foo }`.
Linting: script/pr-check.js#L122
script/pr-check.js:122:7:Use array destructuring.
Linting: script/pr-check.js#L129
script/pr-check.js:129:7:Unary operator '++' used.
Linting: script/pr-check.js#L134
script/pr-check.js:134:7:Unary operator '++' used.
Linting: script/run-unit-test.js#L2
script/run-unit-test.js:2:35:Unexpected use of file extension "js" for "./run-unit-test-help.js"
Linting: script/serve.js#L2
script/serve.js:2:25:`command-line-args` import should occur before import of `./utils`
Linting: src/platform/testing/e2e/cypress/support/commands/keyboard.js#L8
src/platform/testing/e2e/cypress/support/commands/keyboard.js:8:33:Unary operator '++' used.
Linting: src/platform/testing/unit/axe-plugin.js#L1
src/platform/testing/unit/axe-plugin.js:1:18:Unexpected unnamed function.
Linting: src/platform/testing/unit/axe-plugin.js#L5
src/platform/testing/unit/axe-plugin.js:5:59:Unexpected unnamed function.
Linting: src/platform/testing/unit/renameKey.unit.spec.js#L8
src/platform/testing/unit/renameKey.unit.spec.js:8:3:Cypress E2E tests must include at least one axeCheck call. Documentation for adding checks and understanding errors can be found here: https://depo-platform-documentation.scrollhelp.site/developer-docs/A11y-Testing.1935409178.html
Drupal Cache Test
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c, actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8, nick-invision/retry@943e742917ac94714d2f408a0e8320f2d1fcafcd. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
Build (vagovprod)
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c, actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8, nick-invision/retry@943e742917ac94714d2f408a0e8320f2d1fcafcd, aws-actions/configure-aws-credentials@e1e17a757e536f70e52b5a12b2e8d1d1c60e04ef, department-of-veterans-affairs/action-inject-ssm-secrets@d8e6de3bde4dd728c9d732baef58b3c854b8c4bb. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
Build (vagovprod)
Failed to restore: "/usr/bin/tar" failed with error: The process '/usr/bin/tar' failed with exit code 2
Build (vagovdev)
Failed to restore: "/usr/bin/tar" failed with error: The process '/usr/bin/tar' failed with exit code 2
Build (vagovstaging)
Failed to restore: "/usr/bin/tar" failed with error: The process '/usr/bin/tar' failed with exit code 2