Skip to content

lock and audit fix #2896

lock and audit fix

lock and audit fix #2896

Triggered via push February 5, 2026 14:51
Status Success
Total duration 16m 14s
Artifacts 8
Set CI/CD metadata
7s
Set CI/CD metadata
Commit stage  /  Scan secrets
11s
Commit stage / Scan secrets
Commit stage  /  Check file format
11s
Commit stage / Check file format
Commit stage  /  Check Markdown format
5s
Commit stage / Check Markdown format
Commit stage  /  Check English usage
8s
Commit stage / Check English usage
Commit stage  /  Check TODO usage
6s
Commit stage / Check TODO usage
Commit stage  /  Trivy Package Scan
9s
Commit stage / Trivy Package Scan
Commit stage  /  Count lines of code
5s
Commit stage / Count lines of code
Commit stage  /  Scan dependencies
39s
Commit stage / Scan dependencies
Commit stage  /  Check for changes to event schema package compared to main branch
5s
Commit stage / Check for changes to event schema package compared to main branch
Commit stage  /  Detect Terraform Changes
6s
Commit stage / Detect Terraform Changes
Commit stage  /  Check event schema version has been updated
Commit stage / Check event schema version has been updated
Commit stage  /  Check for event schemas package version change
Commit stage / Check for event schemas package version change
Commit stage  /  Run terraform-docs
10s
Commit stage / Run terraform-docs
Commit stage  /  Lint Terraform
3s
Commit stage / Lint Terraform
Commit stage  /  Trivy IaC Scan
13s
Commit stage / Trivy IaC Scan
Test stage  /  Check generated dependencies
1m 4s
Test stage / Check generated dependencies
Test stage  /  Pact tests
1m 9s
Test stage / Pact tests
Test stage  /  Linting
2m 47s
Test stage / Linting
Test stage  /  Typecheck
1m 42s
Test stage / Typecheck
Test stage  /  Unit tests
2m 36s
Test stage / Unit tests
Test stage  /  Test coverage
5s
Test stage / Test coverage
Test stage  /  Perform static analysis
59s
Test stage / Perform static analysis
Build stage  /  Build Docs
1m 41s
Build stage / Build Docs
Build stage  /  Create Dynamic Environment
6m 27s
Build stage / Create Dynamic Environment
Matrix: Build stage / artefact-oas-spec
Build stage  /  Build OAS spec for sandbox
57s
Build stage / Build OAS spec for sandbox
Build stage  /  Build SDKs
Build stage / Build SDKs
Build stage  /  Build proxies
2m 0s
Build stage / Build proxies
Acceptance stage  /  Run Acceptance Tests
3m 1s
Acceptance stage / Run Acceptance Tests
Publish stage  /  Publish packages
Publish stage / Publish packages
Publish stage  /  Publish npm packages to npm.pkg.github.com
Publish stage / Publish npm packages to npm.pkg.github.com
Publish stage  /  Publish nuget packages to nuget.pkg.github.com
Publish stage / Publish nuget packages to nuget.pkg.github.com
Matrix: Publish stage / publish-oas-specs
Waiting for pending jobs
Publish stage  /  Success notification
Publish stage / Success notification
Fit to window
Zoom out
Zoom in

Annotations

22 warnings
Test stage / Check generated dependencies
Unexpected input(s) 'node-version', valid inputs are ['GITHUB_TOKEN']
Test stage / Check generated dependencies
Unexpected input(s) 'node-version', valid inputs are ['GITHUB_TOKEN']
Test stage / Pact tests
Unexpected input(s) 'node-version', valid inputs are ['GITHUB_TOKEN']
Test stage / Pact tests
Unexpected input(s) 'node-version', valid inputs are ['GITHUB_TOKEN']
Test stage / Typecheck
Unexpected input(s) 'node-version', valid inputs are ['GITHUB_TOKEN']
Test stage / Typecheck
Unexpected input(s) 'node-version', valid inputs are ['GITHUB_TOKEN']
Test stage / Unit tests
Unexpected input(s) 'node-version', valid inputs are ['GITHUB_TOKEN']
Test stage / Unit tests
Unexpected input(s) 'node-version', valid inputs are ['GITHUB_TOKEN']
Test stage / Linting
Unexpected input(s) 'node-version', valid inputs are ['GITHUB_TOKEN']
Test stage / Linting: lambdas/api-handler/src/utils/common-ids.ts#L5
Prefer default export on a file with single export
Test stage / Linting: lambdas/api-handler/src/handlers/post-mi.ts#L2
Caution: `mi-operations.ts` has a default export `postMI`. This imports `postMI` as `postMIOperation`. Check if you meant to write `import postMI from '../services/mi-operations'` instead
Test stage / Linting: lambdas/api-handler/src/handlers/__tests__/utils/test-utils.ts#L3
Prefer default export on a file with single export
Test stage / Linting: lambdas/api-handler/src/handlers/__tests__/post-mi.test.ts#L7
Caution: `mi-operations.ts` has a default export `postMI`. This imports `postMI` as `postMiOperation`. Check if you meant to write `import postMI from '../../services/mi-operations'` instead
Test stage / Linting: internal/helpers/src/id-ref.ts#L54
Variable Assigned to Object Injection Sink
Test stage / Linting: internal/events/src/events/event-envelope.ts#L94
Found non-literal argument to RegExp Constructor
Test stage / Linting: internal/datastore/src/letter-repository.ts#L76
Variable Assigned to Object Injection Sink
Test stage / Linting
Unexpected input(s) 'node-version', valid inputs are ['GITHUB_TOKEN']
Build stage / Build Docs
Failed to save: <h2>Our services aren't available right now</h2><p>We're working to restore all services as soon as possible. Please check back soon.</p>0yq+EaQAAAABx6+ZNqVGdT7m9RN8W0DT0UEhMMzBFREdFMDEyMgBFZGdl
Build stage / Build Docs
Failed to restore: Cache service responded with 400

Artifacts

Produced during runtime
Name Size Digest
api-oas-specification-internal-dev-sandbox-1.1.2-20260205.145143+a31cec8
20.9 KB
sha256:7de16900fd06ffe8cb98948bfc5b609ae934ed93878e8416d2d970955abfbb04
code-coverage-report
3.15 KB
sha256:5769a0b00bea52badf74f139c86e6017a71bcf6e7b51e9531847b5fc5cc54e66
internal-dev-sandbox-build-output
20.9 KB
sha256:f19dc41313e36b28a668ecd48d0a019ed312f0d9ec19645f573cc7d23f44c300
jekyll-docs-1.1.2-20260205.145143+a31cec8 Expired
1.4 MB
sha256:3e7e81953c76c4db23f96a7c67af86aef797d76a742d226e12150d8262ae5a0d
lines-of-code-report.json.zip
990 Bytes
sha256:7fc023269bdc2ede113787b3bad7aec334093a2eea1d83ad9429248e1848a5ad
sbom-repository-report.json.zip
137 KB
sha256:291bb4f830216d96e2446a901ee0483aa1b694f531fc0eb4975e058275fb3c9c
unit-tests
655 KB
sha256:d7fe14439dbbf0c360b580817e3e3e617d6a0f7072b75e0f05ded1c224a796a8
vulnerabilities-repository-report.json.zip
3.64 KB
sha256:cac7a6410162a841a8a1355d6b1729728e9b6b516ec486de449fe64514a3cd98