Skip to content

chore: [StepSecurity] Apply security best practices #5804

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
stepsecurity-app wants to merge 1 commit into from

chore: [StepSecurity] Apply security best practicesSigned-off-by: Ste…

cc6f21d
Select commit
Loading
Failed to load commit list.
Sign in for the full log view
Closed

chore: [StepSecurity] Apply security best practices #5804

chore: [StepSecurity] Apply security best practicesSigned-off-by: Ste…
cc6f21d
Select commit
Loading
Failed to load commit list.
GitHub Actions / Test Results failed Mar 7, 2026 in 0s

3 fail, 32 pass in 5m 12s

 32 files  ±0   64 suites  ±0   5m 12s ⏱️ -13s
 35 tests ±0   32 ✅ ±0  0 💤 ±0  3 ❌ ±0 
164 runs  ±0  161 ✅ ±0  0 💤 ±0  3 ❌ ±0 

Results for commit cc6f21d. ± Comparison against earlier commit 87e2fd9.

Annotations

Check warning on line 0 in Set and unset the KYC flag for the user

See this annotation in the file changed.

@github-actions github-actions / Test Results

Tokens Set and unset the KYC flag for the user (Set and unset the KYC flag for the user) failed 

e2e-tests/cypress/test_results/junit/9f7e953b03011c85471e32f54598cb89.xml [took 0s]
Raw output 
Cannot read properties of undefined (reading 'tokenId')
TypeError: Cannot read properties of undefined (reading 'tokenId')
    at Context.eval (webpack://guardian-e2e-test/./cypress/e2e/api-tests/010_tokens/putGrantRevokeKyc.cy.js:20:51)
    at getRet (http://localhost:41465/__cypress/runner/cypress_runner.js:121066:20)
    at tryCatcher (http://localhost:41465/__cypress/runner/cypress_runner.js:1777:23)
    at Promise.attempt.Promise.try (http://localhost:41465/__cypress/runner/cypress_runner.js:4285:29)
    at Context.thenFn (http://localhost:41465/__cypress/runner/cypress_runner.js:121077:66)
    at Context.then (http://localhost:41465/__cypress/runner/cypress_runner.js:121328:21)
    at wrapped (http://localhost:41465/__cypress/runner/cypress_runner.js:141671:19)
    at <unknown> (http://localhost:41465/__cypress/runner/cypress_runner.js:147616:15)
    at tryCatcher (http://localhost:41465/__cypress/runner/cypress_runner.js:1777:23)

Check warning on line 0 in Freeze and unfreeze transfers of the specified token for the user

See this annotation in the file changed.

@github-actions github-actions / Test Results

Tokens Freeze and unfreeze transfers of the specified token for the user (Freeze and unfreeze transfers of the specified token for the user) failed 

e2e-tests/cypress/test_results/junit/7e4b675f387bfd3077946d36aa3adcd6.xml [took 0s]
Raw output 
Cannot read properties of undefined (reading 'tokenId')
TypeError: Cannot read properties of undefined (reading 'tokenId')
    at Context.eval (webpack://guardian-e2e-test/./cypress/e2e/api-tests/010_tokens/putFreezeUnfreeze.cy.js:20:51)
    at getRet (http://localhost:41465/__cypress/runner/cypress_runner.js:121066:20)
    at tryCatcher (http://localhost:41465/__cypress/runner/cypress_runner.js:1777:23)
    at Promise.attempt.Promise.try (http://localhost:41465/__cypress/runner/cypress_runner.js:4285:29)
    at Context.thenFn (http://localhost:41465/__cypress/runner/cypress_runner.js:121077:66)
    at Context.then (http://localhost:41465/__cypress/runner/cypress_runner.js:121328:21)
    at wrapped (http://localhost:41465/__cypress/runner/cypress_runner.js:141671:19)
    at <unknown> (http://localhost:41465/__cypress/runner/cypress_runner.js:147616:15)
    at tryCatcher (http://localhost:41465/__cypress/runner/cypress_runner.js:1777:23)

Check warning on line 0 in "before all" hook for "Associate and disassociate the user with the provided Hedera token"

See this annotation in the file changed.

@github-actions github-actions / Test Results

Tokens "before all" hook for "Associate and disassociate the user with the provided Hedera token" ("before all" hook for "Associate and disassociate the user with the provided Hedera token") failed 

e2e-tests/cypress/test_results/junit/2e232471d67648bbb43e7b0c8a289cde.xml [took 0s]
Raw output 
`cy.request()` failed on:  http://localhost:3002/policies/69ab807b7724f96ba41cc21e/publish  The response we received from your web server was:    > 500: Internal Server Error  This was considered a failure because the status code was not `2xx` or `3xx`.  If you do not want status codes to cause failures pass the option: `failOnStatusCode: false`  -----------------------------------------------------------  The request we sent was:  Method: PUT URL: http://localhost:3002/policies/69ab807b7724f96ba41cc21e/publish Headers: {   "Connection": "keep-alive",   "authorization": "Bearer eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6IlN0YW5kYXJkUmVnaXN0cnkiLCJkaWQiOiJkaWQ6aGVkZXJhOnRlc3RuZXQ6SDZCWlQya3V2TlFhTktNa05mY1VQYkpIZUtSc1JXNXdGeEU1S0hzNUVMb2JfMC4wLjgxMTA3MTkiLCJyb2xlIjoiU1RBTkRBUkRfUkVHSVNUUlkiLCJleHBpcmVBdCI6MTc3Mjg0Nzg1OTkzNSwiaWF0IjoxNzcyODQ3MjU5fQ.dz3h-x4Rq93MaEsgaepRAcDqhCzo0MAyK88wvYnuME8tZMme4-r1OA0NjxAC5tvpZTdMPgq3-vpqM-l1lTxYOiRvj5bg3luPVHaSHmGU8b2RrymG4Xfetr3ayDKXaoJ0y4X67mX4zYH38rySKsXct1kILlOKeh6ywC9fHInmNrNOZaN5M0VxsWWLqcGStciYkeXbPman7Hhj02wY_bmA2_5DfY8kz8Moaad9NNigI-ANLC4alRPtBwYj0-d0fbHshLpJAujuh80sEkdprc_fWSGO7JfjIdTQiijh3MmoWg8AxXhx2t_WfMpbNC8SVkXCockpm8bgsN43yNfVatPvOQ",   "user-agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/139.0.0.0 Safari/537.36",   "accept": "*/*",   "accept-encoding": "gzip, deflate",   "content-type": "application/json",   "content-length": 25 } Body: {"policyVersion":"1.2.5"}  -----------------------------------------------------------  The response we got was:  Status: 500 - Internal Server Error Headers: {   "content-type": "application/json; charset=utf-8",   "content-length": "137",   "date": "Sat, 07 Mar 2026 01:34:33 GMT",   "connection": "keep-alive",   "keep-alive": "timeout=72" } Body: {   "statusCode": 500,   "message": "receipt for transaction 0.0.8110718@1772847266.312679703 contained error status INSUFFICIENT_PAYER_BALANCE" }   https://on.cypress.io/request  Because this error occurred during a `before all` hook we are skipping the remaining tests in the current suite: `Tokens`
CypressError: `cy.request()` failed on:

http://localhost:3002/policies/69ab807b7724f96ba41cc21e/publish

The response we received from your web server was:

  > 500: Internal Server Error

This was considered a failure because the status code was not `2xx` or `3xx`.

If you do not want status codes to cause failures pass the option: `failOnStatusCode: false`

-----------------------------------------------------------

The request we sent was:

Method: PUT
URL: http://localhost:3002/policies/69ab807b7724f96ba41cc21e/publish
Headers: {
  "Connection": "keep-alive",
  "authorization": "Bearer eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6IlN0YW5kYXJkUmVnaXN0cnkiLCJkaWQiOiJkaWQ6aGVkZXJhOnRlc3RuZXQ6SDZCWlQya3V2TlFhTktNa05mY1VQYkpIZUtSc1JXNXdGeEU1S0hzNUVMb2JfMC4wLjgxMTA3MTkiLCJyb2xlIjoiU1RBTkRBUkRfUkVHSVNUUlkiLCJleHBpcmVBdCI6MTc3Mjg0Nzg1OTkzNSwiaWF0IjoxNzcyODQ3MjU5fQ.dz3h-x4Rq93MaEsgaepRAcDqhCzo0MAyK88wvYnuME8tZMme4-r1OA0NjxAC5tvpZTdMPgq3-vpqM-l1lTxYOiRvj5bg3luPVHaSHmGU8b2RrymG4Xfetr3ayDKXaoJ0y4X67mX4zYH38rySKsXct1kILlOKeh6ywC9fHInmNrNOZaN5M0VxsWWLqcGStciYkeXbPman7Hhj02wY_bmA2_5DfY8kz8Moaad9NNigI-ANLC4alRPtBwYj0-d0fbHshLpJAujuh80sEkdprc_fWSGO7JfjIdTQiijh3MmoWg8AxXhx2t_WfMpbNC8SVkXCockpm8bgsN43yNfVatPvOQ",
  "user-agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/139.0.0.0 Safari/537.36",
  "accept": "*/*",
  "accept-encoding": "gzip, deflate",
  "content-type": "application/json",
  "content-length": 25
}
Body: {"policyVersion":"1.2.5"}

-----------------------------------------------------------

The response we got was:

Status: 500 - Internal Server Error
Headers: {
  "content-type": "application/json; charset=utf-8",
  "content-length": "137",
  "date": "Sat, 07 Mar 2026 01:34:33 GMT",
  "connection": "keep-alive",
  "keep-alive": "timeout=72"
}
Body: {
  "statusCode": 500,
  "message": "receipt for transaction 0.0.8110718@1772847266.312679703 contained error status INSUFFICIENT_PAYER_BALANCE"
}


https://on.cypress.io/request

Because this error occurred during a `before all` hook we are skipping the remaining tests in the current suite: `Tokens`
    at <unknown> (http://localhost:41465/__cypress/runner/cypress_runner.js:136469:72)
    at tryCatcher (http://localhost:41465/__cypress/runner/cypress_runner.js:1777:23)
    at Promise._settlePromiseFromHandler (http://localhost:41465/__cypress/runner/cypress_runner.js:1489:31)
    at Promise._settlePromise (http://localhost:41465/__cypress/runner/cypress_runner.js:1546:18)
    at Promise._settlePromise0 (http://localhost:41465/__cypress/runner/cypress_runner.js:1591:10)
    at Promise._settlePromises (http://localhost:41465/__cypress/runner/cypress_runner.js:1671:18)
    at _drainQueueStep (http://localhost:41465/__cypress/runner/cypress_runner.js:2377:12)
    at _drainQueue (http://localhost:41465/__cypress/runner/cypress_runner.js:2370:9)
    at Async._drainQueues (http://localhost:41465/__cypress/runner/cypress_runner.js:2386:5)
    at Async.drainQueues (http://localhost:41465/__cypress/runner/cypress_runner.js:2256:14)
From Your Spec Code:
    at Context.eval (webpack://guardian-e2e-test/./cypress/e2e/api-tests/010_tokens/putDissociateAssociate.cy.js:20:16)
    at getRet (http://localhost:41465/__cypress/runner/cypress_runner.js:121066:20)
    at tryCatcher (http://localhost:41465/__cypress/runner/cypress_runner.js:1777:23)
    at Promise.attempt.Promise.try (http://localhost:41465/__cypress/runner/cypress_runner.js:4285:29)
    at Context.thenFn (http://localhost:41465/__cypress/runner/cypress_runner.js:121077:66)
    at Context.then (http://localhost:41465/__cypress/runner/cypress_runner.js:121328:21)
    at wrapped (http://localhost:41465/__cypress/runner/cypress_runner.js:141671:19)
View more details on GitHub Actions