Skip to content

raised thresholds #5263

raised thresholds

raised thresholds #5263

Triggered via push February 24, 2025 13:29
Status Failure
Total duration 11m 39s
Artifacts 1
branch_meta  /  branch_meta
0s
branch_meta / branch_meta
create_branch_identifier_for_deletion  /  convert_branch_name
create_branch_identifier_for_deletion / convert_branch_name
Check deployment clearance
3s
Check deployment clearance
Scheduled trivy scan of latest image  /  Trivy Scan
Scheduled trivy scan of latest image / Trivy Scan
CodeQL  /  Analyze CodeQL
1m 46s
CodeQL / Analyze CodeQL
Linting  /  Nest Lint
1m 27s
Linting / Nest Lint
Tests and Sonarcloud  /  Tests and Sonarcloud
1m 52s
Tests and Sonarcloud / Tests and Sonarcloud
scan_helm  /  Kics Helm Chart Scan
25s
scan_helm / Kics Helm Chart Scan
create_branch_identifier  /  convert_branch_name
0s
create_branch_identifier / convert_branch_name
delete_namespace  /  create_dbildungs_iam_keycloak_db_name
delete_namespace / create_dbildungs_iam_keycloak_db_name
delete_namespace  /  create_dbildungs_iam_server_db_name
delete_namespace / create_dbildungs_iam_server_db_name
delete_namespace  /  create_ticket_nr_variable
delete_namespace / create_ticket_nr_variable
select_helm_version_generation_and_image_tag_generation
0s
select_helm_version_generation_and_image_tag_generation
trivy_scan_rocketchat_notification
0s
trivy_scan_rocketchat_notification
Publish image and scan with trivy  /  Publish image
1m 5s
Publish image and scan with trivy / Publish image
delete_namespace  /  delete_databases_and_namespace
delete_namespace / delete_databases_and_namespace
release_helm  /  release
55s
release_helm / release
Publish image and scan with trivy  /  pre_scan
0s
Publish image and scan with trivy / pre_scan
delete_successful
0s
delete_successful
wait_for_helm_chart_to_get_published
1m 2s
wait_for_helm_chart_to_get_published
Publish image and scan with trivy  /  ...  /  Trivy Scan
30s
Publish image and scan with trivy / Trivy scan for uploaded image / Trivy Scan
deploy  /  ...  /  search_for_helm_tagname
15s
deploy / find_dbildungs_iam_server_helm_chart_tag / search_for_helm_tagname
deploy  /  ...  /  search_for_helm_tagname
3s
deploy / find_schulportal_client_helm_chart_tag / search_for_helm_tagname
deploy  /  ...  /  search_for_helm_tagname
18s
deploy / find_dbildungs_iam_keycloak_helm_chart_tag / search_for_helm_tagname
deploy  /  ...  /  search_for_helm_tagname
22s
deploy / find_dbildungs_iam_ldap_helm_chart_tag / search_for_helm_tagname
deploy  /  recreate_dbildungs_iam_keycloak_db_name
0s
deploy / recreate_dbildungs_iam_keycloak_db_name
deploy  /  recreate_dbildungs_iam_server_db_name
0s
deploy / recreate_dbildungs_iam_server_db_name
deploy  /  determine_playwright_branch
2s
deploy / determine_playwright_branch
deploy  /  ...  /  run_playwright_end2end_tests
4m 23s
deploy / run_playwright_tests / run_playwright_end2end_tests
Fit to window
Zoom out
Zoom in

Annotations

1 error and 14 warnings
Tests and Sonarcloud / Tests and Sonarcloud
Process completed with exit code 1.
[MEDIUM] Container Running With Low UID: charts/schulportal-client/templates/deployment.yaml#L30
Check if containers are running with low UID, which might cause conflicts with the host's user table.
[LOW] Container Requests Not Equal To It's Limits: charts/schulportal-client/templates/deployment.yaml#L25
Containers must have the same resource requests set as limits. This is recommended to avoid resource DDoS of the node during spikes and means that 'requests.memory' and 'requests.cpu' must equal 'limits.memory' and 'limits.cpu', respectively
[LOW] Container Requests Not Equal To It's Limits: charts/schulportal-client/templates/deployment.yaml#L25
Containers must have the same resource requests set as limits. This is recommended to avoid resource DDoS of the node during spikes and means that 'requests.memory' and 'requests.cpu' must equal 'limits.memory' and 'limits.cpu', respectively
[LOW] Image Without Digest: charts/schulportal-client/templates/deployment.yaml#L27
Images should be specified together with their digests to ensure integrity
[LOW] Liveness Probe Is Not Defined: charts/schulportal-client/templates/deployment.yaml#L25
In case of an unresponsive container, a Liveness Probe can help your application become more available since it restarts the container. However, it can lead to cascading failures. Define one if you really need it
[LOW] Missing AppArmor Profile: charts/schulportal-client/templates/deployment.yaml#L18
Containers should be configured with an AppArmor profile to enforce fine-grained access control over low-level system resources
[LOW] Pod or Container Without LimitRange: charts/schulportal-client/templates/deployment.yaml#L5
Each namespace should have a LimitRange policy associated to ensure that resource allocations of Pods, Containers and PersistentVolumeClaims do not exceed the defined boundaries
[LOW] Pod or Container Without ResourceQuota: charts/schulportal-client/templates/deployment.yaml#L5
Each namespace should have a ResourceQuota policy associated to limit the total amount of resources Pods, Containers and PersistentVolumeClaims can consume
[LOW] Root Container Not Mounted Read-only: charts/schulportal-client/templates/deployment.yaml#L30
Check if the root container filesystem is not being mounted read-only.
Linting / Nest Lint: src/views/admin/PersonDetailsView.spec.ts#L393
Expected alertButton to have a type annotation

Artifacts

Produced during runtime
Name Size
playwright-report
225 KB