Shrink operation privileges evaluation (#3716) #18
MaciejMierzwarelease-drafter.yml
on: push
update_release_draft
1m 1s
Annotations
2 errors
|
update_release_draft
Resource not accessible by integration
{
name: 'HttpError',
id: '6983292607',
status: 403,
response: {
url: 'https://api.github.com/repos/MaciejMierzwa/security/releases',
status: 403,
headers: {
'access-control-allow-origin': '*',
'access-control-expose-headers': 'ETag, Link, Location, Retry-After, X-GitHub-OTP, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Used, X-RateLimit-Resource, X-RateLimit-Reset, X-OAuth-Scopes, X-Accepted-OAuth-Scopes, X-Poll-Interval, X-GitHub-Media-Type, X-GitHub-SSO, X-GitHub-Request-Id, Deprecation, Sunset',
connection: 'close',
'content-encoding': 'gzip',
'content-security-policy': "default-src 'none'",
'content-type': 'application/json; charset=utf-8',
date: 'Fri, 24 Nov 2023 17:03:31 GMT',
'referrer-policy': 'origin-when-cross-origin, strict-origin-when-cross-origin',
server: 'GitHub.com',
'strict-transport-security': 'max-age=31536000; includeSubdomains; preload',
'transfer-encoding': 'chunked',
vary: 'Accept-Encoding, Accept, X-Requested-With',
'x-accepted-github-permissions': 'contents=write; contents=write,workflows=write',
'x-content-type-options': 'nosniff',
'x-frame-options': 'deny',
'x-github-api-version-selected': '2022-11-28',
'x-github-media-type': 'github.v3; format=json',
'x-github-request-id': '2401:896F:133A6FE:1414CCA:6560D762',
'x-ratelimit-limit': '1000',
'x-ratelimit-remaining': '992',
'x-ratelimit-reset': '1700847349',
'x-ratelimit-resource': 'core',
'x-ratelimit-used': '8',
'x-xss-protection': '0'
},
data: {
message: 'Resource not accessible by integration',
documentation_url: 'https://docs.github.com/rest/releases/releases#create-a-release'
}
},
request: {
method: 'POST',
url: 'https://api.github.com/repos/MaciejMierzwa/security/releases',
headers: {
accept: 'application/vnd.github.v3+json',
'user-agent': 'probot/12.2.5 octokit-core.js/3.5.1 Node.js/16.20.2 (linux; x64)',
authorization: 'token [REDACTED]',
'content-type': 'application/json; charset=utf-8'
},
body: '{"target_commitish":"refs/heads/main","name":"Version (set version here)","tag_name":"","body":"Compatible with OpenSearch (set version here).\\n* No changes\\n","draft":true,"prerelease":false,"make_latest":"true"}',
request: {}
},
event: {
id: '6983292607',
name: 'push',
payload: {
after: '3c01fdea5f91286e908cd9c150a1a0edfa09a0ce',
base_ref: null,
before: '5b7531941cca59673aa3e809b0afe3c20dae86d9',
commits: [
{
author: {
email: '[email protected]',
name: 'Craig Perkins',
username: 'cwperks'
},
committer: {
email: '[email protected]',
name: 'GitHub',
username: 'web-flow'
},
distinct: false,
id: 'b7f47b1f516bee03a7dfaeec3a9133e4eafa3a73',
message: 'Use BytesRestResponse constructor with contentType in asRestResponse (#3717)\n' +
'\n' +
'### Description\r\n' +
'\r\n' +
'Modifies `SecurityResponse.asRestResponse` to use the corresponding\r\n' +
'constructor for `BytesRestResponse` if the `SecurityResponse` contains\r\n' +
'the content-type header. This adds a test that fails before the change\r\n' +
'and demonstrates how using the constructor of BytesRestResponse without\r\n' +
'content-type defaults to text/plain\r\n' +
'\r\n' +
'---------\r\n' +
'\r\n' +
'Signed-off-by: Craig Perkins <[email protected]>\r\n' +
'Signed-off-by: Stephen Crawford <[email protected]>\r\n' +
'Signed-off-by: Craig Perkins <[email protected]>\r\n' +
'Co-authored-by: Stephen Crawford <[email protected]>\r\n' +
'Co-authored-by: Stephen Crawford <[email protected]>',
times
|
|
update_release_draft
HttpError: Resource not accessible by integration
at /home/runner/work/_actions/release-drafter/release-drafter/v5/dist/index.js:8462:21
at processTicksAndRejections (node:internal/process/task_queues:96:5)
at async Job.doExecute (/home/runner/work/_actions/release-drafter/release-drafter/v5/dist/index.js:30793:18)
{
name: 'AggregateError',
event: {
id: '6983292607',
name: 'push',
payload: {
after: '3c01fdea5f91286e908cd9c150a1a0edfa09a0ce',
base_ref: null,
before: '5b7531941cca59673aa3e809b0afe3c20dae86d9',
commits: [
{
author: {
email: '[email protected]',
name: 'Craig Perkins',
username: 'cwperks'
},
committer: {
email: '[email protected]',
name: 'GitHub',
username: 'web-flow'
},
distinct: false,
id: 'b7f47b1f516bee03a7dfaeec3a9133e4eafa3a73',
message: 'Use BytesRestResponse constructor with contentType in asRestResponse (#3717)\n' +
'\n' +
'### Description\r\n' +
'\r\n' +
'Modifies `SecurityResponse.asRestResponse` to use the corresponding\r\n' +
'constructor for `BytesRestResponse` if the `SecurityResponse` contains\r\n' +
'the content-type header. This adds a test that fails before the change\r\n' +
'and demonstrates how using the constructor of BytesRestResponse without\r\n' +
'content-type defaults to text/plain\r\n' +
'\r\n' +
'---------\r\n' +
'\r\n' +
'Signed-off-by: Craig Perkins <[email protected]>\r\n' +
'Signed-off-by: Stephen Crawford <[email protected]>\r\n' +
'Signed-off-by: Craig Perkins <[email protected]>\r\n' +
'Co-authored-by: Stephen Crawford <[email protected]>\r\n' +
'Co-authored-by: Stephen Crawford <[email protected]>',
timestamp: '2023-11-16T10:09:52-05:00',
tree_id: 'bfa5f45d83f4a15c3ca656d35745bd789224df44',
url: 'https://github.com/MaciejMierzwa/security/commit/b7f47b1f516bee03a7dfaeec3a9133e4eafa3a73'
},
{
author: {
email: '[email protected]',
name: 'Prabhas Kurapati',
username: 'prabhask5'
},
committer: {
email: '[email protected]',
name: 'GitHub',
username: 'web-flow'
},
distinct: false,
id: 'deff84265cd22badf9cca02a3240aeb000acb439',
message: '[Feature-2188] AuditMessage validation in tests should be more useful / removed (#3596)\n' +
'\n' +
'Changed validateMsgs in AbstractAuditlogUnitTest.java to throw\r\n' +
'exceptions with descriptions instead of just returning true or false.\r\n' +
'\r\n' +
'Signed-off-by: Prabhas Kurapati <[email protected]>',
timestamp: '2023-11-16T12:46:22-06:00',
tree_id: 'e6cbfeaeb6a70f1343e3deb972282e6e8fd16bbf',
url: 'https://github.com/MaciejMierzwa/security/commit/deff84265cd22badf9cca02a3240aeb000acb439'
},
{
author: {
email: '[email protected]',
name: 'Darshit Chanpura',
username: 'DarshitChanpura'
},
committer: {
email: '[email protected]',
name: 'GitHub',
username: 'web-flow'
},
distinct: false,
id: '17748b9e7edb143ff108d45483e2333f70ab15df',
message: 'Extracts demo configuration script to a java tool (#3669)\n' +
'\n' +
'This change extracts the core demo configuration install script to java\r\n' +
'tool to allow re-usability while leveraging that OpenSearch itself is\r\n' +
'JAVA process. All other tools shipped by security are java tools, and\r\n' +
'now with this PR
|