Fix command injection vulnerability in HelmInstallService #479
Annotations
3 errors and 1 warning
|
Run release-drafter/release-drafter@v6
Resource not accessible by integration
{
name: 'HttpError',
id: '12393081885',
status: 403,
response: {
url: 'https://api.github.com/repos/InseeFrLab/onyxia-api/issues/539/labels',
status: 403,
headers: {
'access-control-allow-origin': '*',
'access-control-expose-headers': 'ETag, Link, Location, Retry-After, X-GitHub-OTP, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Used, X-RateLimit-Resource, X-RateLimit-Reset, X-OAuth-Scopes, X-Accepted-OAuth-Scopes, X-Poll-Interval, X-GitHub-Media-Type, X-GitHub-SSO, X-GitHub-Request-Id, Deprecation, Sunset',
connection: 'close',
'content-encoding': 'gzip',
'content-security-policy': "default-src 'none'",
'content-type': 'application/json; charset=utf-8',
date: 'Wed, 18 Dec 2024 13:13:34 GMT',
'referrer-policy': 'origin-when-cross-origin, strict-origin-when-cross-origin',
server: 'github.com',
'strict-transport-security': 'max-age=31536000; includeSubdomains; preload',
'transfer-encoding': 'chunked',
vary: 'Accept-Encoding, Accept, X-Requested-With',
'x-accepted-github-permissions': 'issues=write; pull_requests=write',
'x-content-type-options': 'nosniff',
'x-frame-options': 'deny',
'x-github-api-version-selected': '2022-11-28',
'x-github-media-type': 'github.v3; format=json',
'x-github-request-id': '9C45:1A0A2D:4B41382:9516E13:6762CA7E',
'x-ratelimit-limit': '5000',
'x-ratelimit-remaining': '4995',
'x-ratelimit-reset': '1734531214',
'x-ratelimit-resource': 'core',
'x-ratelimit-used': '5',
'x-xss-protection': '0'
},
data: {
message: 'Resource not accessible by integration',
documentation_url: 'https://docs.github.com/rest/issues/labels#add-labels-to-an-issue',
status: '403'
}
},
request: {
method: 'POST',
url: 'https://api.github.com/repos/InseeFrLab/onyxia-api/issues/539/labels',
headers: {
accept: 'application/vnd.github.v3+json',
'user-agent': 'probot/12.2.5 octokit-core.js/3.5.1 Node.js/20.18.0 (linux; x64)',
authorization: 'token [REDACTED]',
'content-type': 'application/json; charset=utf-8'
},
body: '{"labels":["bug","helm-wrapper"]}',
request: {}
},
event: {
id: '12393081885',
name: 'pull_request',
payload: {
action: 'synchronize',
after: '519ccfb01ce52921811d38d1bf8d4ae01ba3353a',
before: 'dfe46345806a5f2ab8ca4a2c6204322760fa2da4',
number: 539,
organization: {
avatar_url: 'https://avatars.githubusercontent.com/u/56802548?v=4',
description: 'Lab de @InseeFr ',
events_url: 'https://api.github.com/orgs/InseeFrLab/events',
hooks_url: 'https://api.github.com/orgs/InseeFrLab/hooks',
id: 56802548,
issues_url: 'https://api.github.com/orgs/InseeFrLab/issues',
login: 'InseeFrLab',
members_url: 'https://api.github.com/orgs/InseeFrLab/members{/member}',
node_id: 'MDEyOk9yZ2FuaXphdGlvbjU2ODAyNTQ4',
public_members_url: 'https://api.github.com/orgs/InseeFrLab/public_members{/member}',
repos_url: 'https://api.github.com/orgs/InseeFrLab/repos',
url: 'https://api.github.com/orgs/InseeFrLab'
},
pull_request: {
_links: {
comments: {
href: 'https://api.github.com/repos/InseeFrLab/onyxia-api/issues/539/comments'
},
commits: {
href: 'https://api.github.com/repos/InseeFrLab/onyxia-api/pulls/539/commits'
},
html: { href: 'https://github.com/InseeFrLab/onyxia-api/pull/539' },
issue: {
href: 'https://api.github.com/repos/InseeFrLab/onyxia-api/issues/539'
},
review_comment: {
href: 'https://api.github.com/repos/InseeFrLab/onyxia-api/pulls/comments{/number}'
},
review_comments: {
href: 'https://api.github.com/repos/InseeFrLab/onyxia-api/pulls/539/comments'
},
self: {
href: 'https://api.github.com/repos/InseeF
|
|
Run release-drafter/release-drafter@v6
Resource not accessible by integration
{
name: 'HttpError',
id: '12393081885',
status: 403,
response: {
url: 'https://api.github.com/repos/InseeFrLab/onyxia-api/releases',
status: 403,
headers: {
'access-control-allow-origin': '*',
'access-control-expose-headers': 'ETag, Link, Location, Retry-After, X-GitHub-OTP, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Used, X-RateLimit-Resource, X-RateLimit-Reset, X-OAuth-Scopes, X-Accepted-OAuth-Scopes, X-Poll-Interval, X-GitHub-Media-Type, X-GitHub-SSO, X-GitHub-Request-Id, Deprecation, Sunset',
connection: 'close',
'content-encoding': 'gzip',
'content-security-policy': "default-src 'none'",
'content-type': 'application/json; charset=utf-8',
date: 'Wed, 18 Dec 2024 13:13:36 GMT',
'referrer-policy': 'origin-when-cross-origin, strict-origin-when-cross-origin',
server: 'github.com',
'strict-transport-security': 'max-age=31536000; includeSubdomains; preload',
'transfer-encoding': 'chunked',
vary: 'Accept-Encoding, Accept, X-Requested-With',
'x-accepted-github-permissions': 'contents=write; contents=write,workflows=write',
'x-content-type-options': 'nosniff',
'x-frame-options': 'deny',
'x-github-api-version-selected': '2022-11-28',
'x-github-media-type': 'github.v3; format=json',
'x-github-request-id': '9C47:1A9C1F:4EE3D7B:9C22C1F:6762CA80',
'x-ratelimit-limit': '5000',
'x-ratelimit-remaining': '4994',
'x-ratelimit-reset': '1734531214',
'x-ratelimit-resource': 'core',
'x-ratelimit-used': '6',
'x-xss-protection': '0'
},
data: {
message: 'Resource not accessible by integration',
documentation_url: 'https://docs.github.com/rest/releases/releases#create-a-release',
status: '403'
}
},
request: {
method: 'POST',
url: 'https://api.github.com/repos/InseeFrLab/onyxia-api/releases',
headers: {
accept: 'application/vnd.github.v3+json',
'user-agent': 'probot/12.2.5 octokit-core.js/3.5.1 Node.js/20.18.0 (linux; x64)',
authorization: 'token [REDACTED]',
'content-type': 'application/json; charset=utf-8'
},
body: '{"target_commitish":"main","name":"v4.2.0","tag_name":"v4.2.0","body":"## Changes\\n\\n* Allow JMX debug (#536) @olevitt\\n* Further options for filtering catalog services (#532) @mmwinther\\n* Fabric8 k8s client : revert to OkHTTPClient (#535) @olevitt\\n* Add username to logs (#526) @olevitt\\n\\n## :racehorse: Performance\\n\\n* Performance : mutualize kubernetes client (#537) @olevitt\\n\\n## :package: Dependencies\\n\\n* chore(deps): update fabric8-kubernetes-client monorepo to v7 (major) (#531) @renovate\\n","draft":true,"prerelease":false,"make_latest":"true"}',
request: { retryCount: 1 }
},
event: {
id: '12393081885',
name: 'pull_request',
payload: {
action: 'synchronize',
after: '519ccfb01ce52921811d38d1bf8d4ae01ba3353a',
before: 'dfe46345806a5f2ab8ca4a2c6204322760fa2da4',
number: 539,
organization: {
avatar_url: 'https://avatars.githubusercontent.com/u/56802548?v=4',
description: 'Lab de @InseeFr ',
events_url: 'https://api.github.com/orgs/InseeFrLab/events',
hooks_url: 'https://api.github.com/orgs/InseeFrLab/hooks',
id: 56802548,
issues_url: 'https://api.github.com/orgs/InseeFrLab/issues',
login: 'InseeFrLab',
members_url: 'https://api.github.com/orgs/InseeFrLab/members{/member}',
node_id: 'MDEyOk9yZ2FuaXphdGlvbjU2ODAyNTQ4',
public_members_url: 'https://api.github.com/orgs/InseeFrLab/public_members{/member}',
repos_url: 'https://api.github.com/orgs/InseeFrLab/repos',
url: 'https://api.github.com/orgs/InseeFrLab'
},
pull_request: {
_links: {
comments: {
href: 'https://api.github.com/repos/InseeFrLab/onyxia-api/issues/539/comments'
},
commits: {
href: 'https://api.github.com/repos/InseeFrLab/onyxia-api/pulls/539/commits
|
|
Run release-drafter/release-drafter@v6
HttpError: Resource not accessible by integration
at /home/runner/work/_actions/release-drafter/release-drafter/v6/dist/index.js:8462:21
at process.processTicksAndRejections (node:internal/process/task_queues:95:5)
at async Job.doExecute (/home/runner/work/_actions/release-drafter/release-drafter/v6/dist/index.js:30793:18)
HttpError: Resource not accessible by integration
at /home/runner/work/_actions/release-drafter/release-drafter/v6/dist/index.js:8462:21
at process.processTicksAndRejections (node:internal/process/task_queues:95:5)
at async Job.doExecute (/home/runner/work/_actions/release-drafter/release-drafter/v6/dist/index.js:30793:18)
{
name: 'AggregateError',
event: {
id: '12393081885',
name: 'pull_request',
payload: {
action: 'synchronize',
after: '519ccfb01ce52921811d38d1bf8d4ae01ba3353a',
before: 'dfe46345806a5f2ab8ca4a2c6204322760fa2da4',
number: 539,
organization: {
avatar_url: 'https://avatars.githubusercontent.com/u/56802548?v=4',
description: 'Lab de @InseeFr ',
events_url: 'https://api.github.com/orgs/InseeFrLab/events',
hooks_url: 'https://api.github.com/orgs/InseeFrLab/hooks',
id: 56802548,
issues_url: 'https://api.github.com/orgs/InseeFrLab/issues',
login: 'InseeFrLab',
members_url: 'https://api.github.com/orgs/InseeFrLab/members{/member}',
node_id: 'MDEyOk9yZ2FuaXphdGlvbjU2ODAyNTQ4',
public_members_url: 'https://api.github.com/orgs/InseeFrLab/public_members{/member}',
repos_url: 'https://api.github.com/orgs/InseeFrLab/repos',
url: 'https://api.github.com/orgs/InseeFrLab'
},
pull_request: {
_links: {
comments: {
href: 'https://api.github.com/repos/InseeFrLab/onyxia-api/issues/539/comments'
},
commits: {
href: 'https://api.github.com/repos/InseeFrLab/onyxia-api/pulls/539/commits'
},
html: { href: 'https://github.com/InseeFrLab/onyxia-api/pull/539' },
issue: {
href: 'https://api.github.com/repos/InseeFrLab/onyxia-api/issues/539'
},
review_comment: {
href: 'https://api.github.com/repos/InseeFrLab/onyxia-api/pulls/comments{/number}'
},
review_comments: {
href: 'https://api.github.com/repos/InseeFrLab/onyxia-api/pulls/539/comments'
},
self: {
href: 'https://api.github.com/repos/InseeFrLab/onyxia-api/pulls/539'
},
statuses: {
href: 'https://api.github.com/repos/InseeFrLab/onyxia-api/statuses/519ccfb01ce52921811d38d1bf8d4ae01ba3353a'
}
},
active_lock_reason: null,
additions: 10,
assignee: null,
assignees: [],
author_association: 'NONE',
auto_merge: null,
base: {
label: 'InseeFrLab:main',
ref: 'main',
repo: {
allow_auto_merge: false,
allow_forking: true,
allow_merge_commit: false,
allow_rebase_merge: true,
allow_squash_merge: true,
allow_update_branch: false,
archive_url: 'https://api.github.com/repos/InseeFrLab/onyxia-api/{archive_format}{/ref}',
archived: false,
assignees_url: 'https://api.github.com/repos/InseeFrLab/onyxia-api/assignees{/user}',
blobs_url: 'https://api.github.com/repos/InseeFrLab/onyxia-api/git/blobs{/sha}',
branches_url: 'https://api.github.com/repos/InseeFrLab/onyxia-api/branches{/branch}',
clone_url: 'https://github.com/InseeFrLab/onyxia-api.git',
collaborators_url: 'https://api.github.com/repos/InseeFrLab/onyxia-api/collaborators{/collaborator}',
comments_url: 'https://api.github.com/repos/InseeFrLab/onyxia-api/comments{/number}',
commits_url: 'https://api.github.com/repos/InseeFrLab/onyxia-api/commits{/sha}',
compare_url: 'https://api.github.com/repos/InseeFrLab/on
|
|
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
Loading