Skip to content

fix: validate OAuth callback origin against SCM provider domain #33579

fix: validate OAuth callback origin against SCM provider domain

fix: validate OAuth callback origin against SCM provider domain #33579

Triggered via push July 30, 2025 13:32
Status Success
Total duration 19m 31s
Artifacts 2

build.yml

on: push
create-runner  /  Create GCE VM
51s
create-runner / Create GCE VM
Configure job parameters
7s
Configure job parameters
Run workspace integration tests on main branch  /  ...  /  Create GCE VM
Run workspace integration tests on main branch / create-runner / Create GCE VM
Matrix: install-app
Run VS Code update jobs on main branch  /  update
Run VS Code update jobs on main branch / update
Run JetBrains update jobs on main branch  /  update-jetbrains
Run JetBrains update jobs on main branch / update-jetbrains
infrastructure
35s
infrastructure
Run workspace integration tests on main branch  /  Configuration
Run workspace integration tests on main branch / Configuration
Run VS Code update jobs on main branch  /  release-openvscode-server
Run VS Code update jobs on main branch / release-openvscode-server
Install Monitoring Satellite
0s
Install Monitoring Satellite
Run workspace integration tests on main branch  /  infrastructure
Run workspace integration tests on main branch / infrastructure
Run integration test
0s
Run integration test
Run workspace integration tests on main branch  /  Check for regressions
Run workspace integration tests on main branch / Check for regressions
Run workspace integration tests on main branch  /  Delete preview environment
Run workspace integration tests on main branch / Delete preview environment
Run workspace integration tests on main branch  /  ...  /  Delete ephemeral GCE VM
Run workspace integration tests on main branch / delete-runner / Delete ephemeral GCE VM
Notify on scheduled run failure
Notify on scheduled run failure
delete-runner  /  Delete ephemeral GCE VM
50s
delete-runner / Delete ephemeral GCE VM
Fit to window
Zoom out
Zoom in

Annotations

6 warnings
create-runner / Create GCE VM
Overwriting existing environment variable GOOGLE_GHA_CREDS_PATH: - "/home/runner/work/gitpod/gitpod/gha-creds-8eab48df00488673.json" + "/home/runner/work/gitpod/gitpod/gha-creds-ee897d51a5805261.json"
create-runner / Create GCE VM
Overwriting existing environment variable GOOGLE_APPLICATION_CREDENTIALS: - "/home/runner/work/gitpod/gitpod/gha-creds-8eab48df00488673.json" + "/home/runner/work/gitpod/gitpod/gha-creds-ee897d51a5805261.json"
create-runner / Create GCE VM
Overwriting existing environment variable CLOUDSDK_AUTH_CREDENTIAL_FILE_OVERRIDE: - "/home/runner/work/gitpod/gitpod/gha-creds-8eab48df00488673.json" + "/home/runner/work/gitpod/gitpod/gha-creds-ee897d51a5805261.json"
infrastructure
Unexpected input(s) 'name', 'previewctl_hash', 'large_vm', 'preemptible', 'recreate_vm', 'image_repo_base', valid inputs are ['entryPoint', 'args']
Install Gitpod
Unexpected input(s) 'name', 'version', 'with_dedicated_emu', 'analytics', 'workspace_feature_flags', 'image_repo_base', valid inputs are ['entryPoint', 'args']
delete-runner / Delete ephemeral GCE VM
The "create_credentials_file" option is true, but the current GitHub workspace is empty. Did you forget to use "actions/checkout" before this step? If you do not intend to share authentication with future steps in this job, set "create_credentials_file" to false.

Artifacts

Produced during runtime
Name Size Digest
sboms Expired
4.38 MB
sha256:22ec6e037ea1e80bb8abd8e1d303a38d28e60c77922126ff144ec1df3e8987c8
vulnerability-reports Expired
1.62 MB
sha256:035a9e8d9e096f6f8ee082f494c60cf6d13710bf27268188f31ac7ed004bd430