Skip to content

[Security] Access constraints are not enforced for Java endpoints (#6… #4873

[Security] Access constraints are not enforced for Java endpoints (#6…

[Security] Access constraints are not enforced for Java endpoints (#6… #4873

Triggered via push July 13, 2026 14:01
Status Success
Total duration 2h 10m 12s
Artifacts 8

build.yml

on: push
Matrix: tests
integration-tests-h2
2h 2m
integration-tests-h2
integration-tests-postgresql
1h 57m
integration-tests-postgresql
code-style
52s
code-style
Matrix: build-deploy
build-deploy-manifest
18s
build-deploy-manifest
Scan Docker image using Docker Scout
1m 32s
Scan Docker image using Docker Scout
Perform DAST testing using ZAP
3m 17s
Perform DAST testing using ZAP
Fit to window
Zoom out
Zoom in

Annotations

20 errors and 11 warnings
integration-tests-postgresql
Argument of type 'CmisObject' is not assignable to parameter of type 'Folder | Document'.
integration-tests-postgresql
Argument of type 'CmisObject' is not assignable to parameter of type 'Folder | Document'.
integration-tests-postgresql
Argument of type 'CmisObject' is not assignable to parameter of type 'Folder | Document'.
integration-tests-postgresql
There is no resource at path '/registry/public/service-publisher/publisher.js'.
integration-tests-postgresql
Cannot read the array length because "buf" is null
integration-tests-postgresql
Cannot read the array length because "buf" is null
integration-tests-postgresql
There is no resource at path '/registry/public/perspective-processes/dialogs/bpm-process-context-details.html'.
integration-tests-postgresql
Cannot read the array length because "buf" is null
integration-tests-postgresql
Could not read resource content.
integration-tests-postgresql
Cannot read the array length because "buf" is null
integration-tests-h2
Cannot find module '@aerokit/sdk/http/rs' or its corresponding type declarations.
integration-tests-h2
Cannot read the array length because "buf" is null
integration-tests-h2
There is no resource at path '/registry/public/application/css/app.css'.
integration-tests-h2
Cannot read the array length because "buf" is null
integration-tests-h2
Argument of type 'CmisObject' is not assignable to parameter of type 'Folder | Document'.
integration-tests-h2
Argument of type 'CmisObject' is not assignable to parameter of type 'Folder | Document'.
integration-tests-h2
Argument of type 'CmisObject' is not assignable to parameter of type 'Folder | Document'.
integration-tests-h2
Argument of type 'CmisObject' is not assignable to parameter of type 'Folder | Document'.
integration-tests-h2
Cannot read the array length because "buf" is null
integration-tests-h2
Cannot read the array length because "buf" is null
code-style
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-java@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
tests (ubuntu)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/checkout@v4, actions/setup-java@v4, actions/setup-node@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
tests (windows)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/checkout@v4, actions/setup-java@v4, actions/setup-node@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
integration-tests-postgresql
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/checkout@v4, actions/setup-java@v4, actions/setup-node@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
integration-tests-h2
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/checkout@v4, actions/setup-java@v4, actions/setup-node@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
build-deploy (ubuntu-latest, amd64)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/checkout@v4, actions/setup-java@v4, actions/setup-node@v4, actions/upload-artifact@v4, docker/build-push-action@v6, docker/login-action@v3, docker/setup-buildx-action@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
build-deploy (ubuntu-24.04-arm, arm64)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/checkout@v4, actions/setup-java@v4, actions/setup-node@v4, actions/upload-artifact@v4, docker/build-push-action@v6, docker/login-action@v3, docker/setup-buildx-action@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
build-deploy-manifest
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/download-artifact@v4, docker/login-action@v3, docker/setup-buildx-action@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Scan Docker image using Docker Scout
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/upload-artifact@v4, docker/login-action@v3, github/codeql-action/upload-sarif@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Scan Docker image using Docker Scout
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
Perform DAST testing using ZAP
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, zaproxy/action-full-scan@v0.12.0. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
dast_zap_report
24.9 KB
sha256:8fdceb9d8a2d440d0e5ef08f719317d97770bc48202d099edf083aac1cc56658
digests-amd64 Expired
244 Bytes
sha256:f8ac16994d11ae696b256ceb08c606c8cc90bfcaa69dab2578c682a69b029eaa
digests-arm64 Expired
244 Bytes
sha256:1d3eb5e6b0579dd535bd3e380f28f65194a4f7605177bddd13c4841ef0aae8dd
eclipse-dirigible~dirigible~0KMX4Q.dockerbuild
39.5 KB
sha256:c8b136896219ae9174acd384515d291c1098a922590471f5d15b21ebdebba67c
eclipse-dirigible~dirigible~VJWJDE.dockerbuild
38.5 KB
sha256:79ace9a3f36284cdcb8a8f9be13e7c7c67b001f29e09bb7bf10802d0c98fa0a1
sast_docker_scout_sarif.json
23.6 KB
sha256:dc5b4db02bc1fdc1539a7619bd1d8909a0e2eeb6ced9240756cad6308dfe79f4
selenide-screenshots-20260713_155900.zip Expired
338 KB
sha256:9d64565fea6184db567d7b1bac82ba11165345147fc330e0c43fd6376910a1fa
selenide-screenshots-20260713_160413.zip Expired
338 KB
sha256:f34460385f147e0630914ec3827200fc0d310f2161c36f3287d0703a8dcb4583