Skip to content

Fix/security workflow permissions#24

Merged
gouthamreddykotapalle merged 2 commits intomainfrom
fix/security-workflow-permissions
Mar 12, 2026
Merged

Fix/security workflow permissions#24
gouthamreddykotapalle merged 2 commits intomainfrom
fix/security-workflow-permissions

Conversation

@gouthamreddykotapalle
Copy link
Collaborator

Description

Fix/security workflow permissions

Related Issue

Fixes #(issue)

Type of change

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • Documentation update
  • Performance improvement
  • Code refactoring

How Has This Been Tested?

  • Unit tests
  • Integration tests
  • Manual testing

Test Configuration:

  • Kubernetes version:
  • Go version:
  • OS:

Checklist

  • My code follows the style guidelines of this project
  • I have performed a self-review of my own code
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation
  • My changes generate no new warnings
  • I have added tests that prove my fix is effective or that my feature works
  • New and existing unit tests pass locally with my changes
  • Any dependent changes have been merged and published

Additional Notes

The Trivy and Gosec jobs need security-events:write permission to upload
SARIF results to GitHub Security. Without this, the upload-sarif step fails
with 'Resource not accessible by integration' error.
…ssions

- Upgrade github/codeql-action from v3 (deprecated Dec 2026) to v4
- Ensure security-events:write and contents:read permissions are set
- Fixes 'Resource not accessible by integration' error on SARIF uploads
@github-actions
Copy link

⚡ Benchmark Results

Benchmark Results

goos: linux
goarch: amd64
pkg: github.com/kube-nexus/kubenexus-scheduler/test/benchmark
cpu: Intel(R) Xeon(R) Platinum 8370C CPU @ 2.80GHz
│ benchmark-base.txt │ benchmark-current.txt │
│ sec/op │ sec/op vs base │
WorkloadClassification/Spark-4 50.36n ± ∞ ¹ 50.37n ± ∞ ¹ ~ (p=1.000 n=1) ²
WorkloadClassification/TensorFlow-4 134.4n ± ∞ ¹ 134.9n ± ∞ ¹ ~ (p=1.000 n=1) ²
WorkloadClassification/Service-4 133.9n ± ∞ ¹ 134.1n ± ∞ ¹ ~ (p=1.000 n=1) ²
WorkloadClassification/BatchJob-4 28.46n ± ∞ ¹ 28.47n ± ∞ ¹ ~ (p=1.000 n=1) ²
WorkloadClassificationParallel-4 31.09n ± ∞ ¹ 31.10n ± ∞ ¹ ~ (p=1.000 n=1) ²
MemoryUsage/Pods_10-4 515.9n ± ∞ ¹ 515.2n ± ∞ ¹ ~ (p=1.000 n=1) ²
MemoryUsage/Pods_100-4 5.179µ ± ∞ ¹ 5.164µ ± ∞ ¹ ~ (p=1.000 n=1) ²
MemoryUsage/Pods_1000-4 53.88µ ± ∞ ¹ 54.09µ ± ∞ ¹ ~ (p=1.000 n=1) ²
MemoryUsage/Pods_10000-4 587.6µ ± ∞ ¹ 589.2µ ± ∞ ¹ ~ (p=1.000 n=1) ²
geomean 741.6n 742.3n +0.09%
¹ need >= 6 samples for confidence interval at level 0.95
² need >= 4 samples to detect a difference at alpha level 0.05

                                │ benchmark-base.txt │        benchmark-current.txt        │
                                │        B/op        │    B/op      vs base                │

WorkloadClassification/Spark-4 0.000 ± ∞ ¹ 0.000 ± ∞ ¹ ~ (p=1.000 n=1) ²
WorkloadClassification/TensorFlow-4 0.000 ± ∞ ¹ 0.000 ± ∞ ¹ ~ (p=1.000 n=1) ²
WorkloadClassification/Service-4 0.000 ± ∞ ¹ 0.000 ± ∞ ¹ ~ (p=1.000 n=1) ²
WorkloadClassification/BatchJob-4 0.000 ± ∞ ¹ 0.000 ± ∞ ¹ ~ (p=1.000 n=1) ²
WorkloadClassificationParallel-4 0.000 ± ∞ ¹ 0.000 ± ∞ ¹ ~ (p=1.000 n=1) ²
MemoryUsage/Pods_10-4 0.000 ± ∞ ¹ 0.000 ± ∞ ¹ ~ (p=1.000 n=1) ²
MemoryUsage/Pods_100-4 0.000 ± ∞ ¹ 0.000 ± ∞ ¹ ~ (p=1.000 n=1) ²
MemoryUsage/Pods_1000-4 0.000 ± ∞ ¹ 0.000 ± ∞ ¹ ~ (p=1.000 n=1) ²
MemoryUsage/Pods_10000-4 0.000 ± ∞ ¹ 0.000 ± ∞ ¹ ~ (p=1.000 n=1) ²
geomean ³ +0.00% ³
¹ need >= 6 samples for confidence interval at level 0.95
² all samples are equal
³ summaries must be >0 to compute geomean

                                │ benchmark-base.txt │        benchmark-current.txt        │
                                │     allocs/op      │  allocs/op   vs base                │

WorkloadClassification/Spark-4 0.000 ± ∞ ¹ 0.000 ± ∞ ¹ ~ (p=1.000 n=1) ²
WorkloadClassification/TensorFlow-4 0.000 ± ∞ ¹ 0.000 ± ∞ ¹ ~ (p=1.000 n=1) ²
WorkloadClassification/Service-4 0.000 ± ∞ ¹ 0.000 ± ∞ ¹ ~ (p=1.000 n=1) ²
WorkloadClassification/BatchJob-4 0.000 ± ∞ ¹ 0.000 ± ∞ ¹ ~ (p=1.000 n=1) ²
WorkloadClassificationParallel-4 0.000 ± ∞ ¹ 0.000 ± ∞ ¹ ~ (p=1.000 n=1) ²
MemoryUsage/Pods_10-4 0.000 ± ∞ ¹ 0.000 ± ∞ ¹ ~ (p=1.000 n=1) ²
MemoryUsage/Pods_100-4 0.000 ± ∞ ¹ 0.000 ± ∞ ¹ ~ (p=1.000 n=1) ²
MemoryUsage/Pods_1000-4 0.000 ± ∞ ¹ 0.000 ± ∞ ¹ ~ (p=1.000 n=1) ²
MemoryUsage/Pods_10000-4 0.000 ± ∞ ¹ 0.000 ± ∞ ¹ ~ (p=1.000 n=1) ²
geomean ³ +0.00% ³
¹ need >= 6 samples for confidence interval at level 0.95
² all samples are equal
³ summaries must be >0 to compute geomean

@gouthamreddykotapalle gouthamreddykotapalle merged commit 54620d8 into main Mar 12, 2026
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant