Skip to content

Merge remote-tracking branch 'origin/main' into SPSH-1034 #4333

Merge remote-tracking branch 'origin/main' into SPSH-1034

Merge remote-tracking branch 'origin/main' into SPSH-1034 #4333

Re-run triggered November 27, 2024 15:33
Status Failure
Total duration 1m 6s
Artifacts 1
branch_meta  /  branch_meta
0s
branch_meta / branch_meta
Publish image and scan with trivy  /  Publish image
52s
Publish image and scan with trivy / Publish image
create_branch_identifier_for_deletion  /  convert_branch_name
create_branch_identifier_for_deletion / convert_branch_name
select_helm_version_generation_and_image_tag_generation
0s
select_helm_version_generation_and_image_tag_generation
CodeQL  /  Analyze CodeQL
1m 7s
CodeQL / Analyze CodeQL
Linting  /  Nest Lint
1m 5s
Linting / Nest Lint
Tests and Sonarcloud  /  Tests and Sonarcloud
2m 21s
Tests and Sonarcloud / Tests and Sonarcloud
scan_helm  /  Kics Helm Chart Scan
25s
scan_helm / Kics Helm Chart Scan
Scheduled trivy scan of latest image  /  Trivy Scan
Scheduled trivy scan of latest image / Trivy Scan
create_branch_identifier  /  convert_branch_name
0s
create_branch_identifier / convert_branch_name
Publish image and scan with trivy  /  pre_scan
0s
Publish image and scan with trivy / pre_scan
delete_namespace  /  create_dbildungs_iam_keycloak_db_name
delete_namespace / create_dbildungs_iam_keycloak_db_name
delete_namespace  /  create_dbildungs_iam_server_db_name
delete_namespace / create_dbildungs_iam_server_db_name
delete_namespace  /  create_ticket_nr_variable
delete_namespace / create_ticket_nr_variable
release_helm  /  release
43s
release_helm / release
Publish image and scan with trivy  /  ...  /  Trivy Scan
Publish image and scan with trivy / Trivy scan for uploaded image / Trivy Scan
delete_namespace  /  delete_databases_and_namespace
delete_namespace / delete_databases_and_namespace
wait_for_helm_chart_to_get_published
1m 1s
wait_for_helm_chart_to_get_published
delete_successful
0s
delete_successful
deploy  /  ...  /  branch_meta
deploy / create_ingress_prefix / branch_meta
deploy  /  create_dbildungs_iam_keycloak_db_name
deploy / create_dbildungs_iam_keycloak_db_name
deploy  /  create_dbildungs_iam_server_db_name
deploy / create_dbildungs_iam_server_db_name
deploy  /  ...  /  search_for_helm_tagname
deploy / find_dbildungs_iam_keycloak_helm_chart_tag / search_for_helm_tagname
deploy  /  ...  /  search_for_helm_tagname
deploy / find_dbildungs_iam_ldap_helm_chart_tag / search_for_helm_tagname
deploy  /  ...  /  search_for_helm_tagname
deploy / find_dbildungs_iam_server_helm_chart_tag / search_for_helm_tagname
deploy  /  ...  /  search_for_helm_tagname
deploy / find_schulportal_client_helm_chart_tag / search_for_helm_tagname
deploy  /  determine_playwright_branch
deploy / determine_playwright_branch
deploy  /  ...  /  convert_branch_name
deploy / create_lowercase_ingress_prefix / convert_branch_name
deploy  /  deployment
deploy / deployment
deploy  /  ...  /  run_playwright_end2end_tests
deploy / run_playwright_tests / run_playwright_end2end_tests
Fit to window
Zoom out
Zoom in

Annotations

1 error and 10 warnings
Publish image and scan with trivy / Publish image
buildx failed with: ERROR: failed to solve: process "/bin/sh -c npm run build" did not complete successfully: exit code: 1
[MEDIUM] Container Running With Low UID: charts/schulportal-client/templates/deployment.yaml#L30
Check if containers are running with low UID, which might cause conflicts with the host's user table.
[LOW] Container Requests Not Equal To It's Limits: charts/schulportal-client/templates/deployment.yaml#L25
Containers must have the same resource requests set as limits. This is recommended to avoid resource DDoS of the node during spikes and means that 'requests.memory' and 'requests.cpu' must equal 'limits.memory' and 'limits.cpu', respectively
[LOW] Container Requests Not Equal To It's Limits: charts/schulportal-client/templates/deployment.yaml#L25
Containers must have the same resource requests set as limits. This is recommended to avoid resource DDoS of the node during spikes and means that 'requests.memory' and 'requests.cpu' must equal 'limits.memory' and 'limits.cpu', respectively
[LOW] Image Without Digest: charts/schulportal-client/templates/deployment.yaml#L27
Images should be specified together with their digests to ensure integrity
[LOW] Liveness Probe Is Not Defined: charts/schulportal-client/templates/deployment.yaml#L25
In case of an unresponsive container, a Liveness Probe can help your application become more available since it restarts the container. However, it can lead to cascading failures. Define one if you really need it
[LOW] Missing AppArmor Profile: charts/schulportal-client/templates/deployment.yaml#L18
Containers should be configured with an AppArmor profile to enforce fine-grained access control over low-level system resources
[LOW] Pod or Container Without LimitRange: charts/schulportal-client/templates/deployment.yaml#L5
Each namespace should have a LimitRange policy associated to ensure that resource allocations of Pods, Containers and PersistentVolumeClaims do not exceed the defined boundaries
[LOW] Pod or Container Without ResourceQuota: charts/schulportal-client/templates/deployment.yaml#L5
Each namespace should have a ResourceQuota policy associated to limit the total amount of resources Pods, Containers and PersistentVolumeClaims can consume
[LOW] Root Container Not Mounted Read-only: charts/schulportal-client/templates/deployment.yaml#L30
Check if the root container filesystem is not being mounted read-only.