Skip to content

Restrict file permissions in integration tests - #482

Open
danth wants to merge 1 commit into
eclipse-score:mainfrom
etas-contrib:file-attributes
Open

Restrict file permissions in integration tests#482
danth wants to merge 1 commit into
eclipse-score:mainfrom
etas-contrib:file-attributes

Conversation

@danth

@danth danth commented Aug 17, 2026 •
edited
Loading

Copy link
Copy Markdown
Member

This verifies that the config / binary are not written to during execution, and that the config is only read by the user which the launch manager is running under.

@danth
danth deployed to workflow-approval August 17, 2026 12:48 — with GitHub Actions Active
@danth
danth deployed to workflow-approval August 17, 2026 12:48 — with GitHub Actions Active
@github-actions

github-actions Bot commented Aug 17, 2026 •
edited
Loading

Copy link
Copy Markdown

License Check Results

🚀 The license check job ran with the Bazel command:

bazel run --lockfile_mode=error //:license-check

Status: ⚠️ Needs Review

Click to expand output 
[License Check Output]
Extracting Bazel installation...
Starting local Bazel server (8.6.0) and connecting to it...
INFO: Invocation ID: 99b950a9-27fb-4581-8d57-edf1bf7adc91
Computing main repo mapping: 
Computing main repo mapping: 
Loading: 
Loading: 0 packages loaded
Loading: 0 packages loaded
Loading: 0 packages loaded
Loading: 0 packages loaded
    currently loading: 
Loading: 0 packages loaded
    currently loading: 
Loading: 0 packages loaded
    currently loading: 
Loading: 0 packages loaded
    currently loading: 
Loading: 0 packages loaded
    currently loading: 
Loading: 0 packages loaded
    currently loading: 
Analyzing: target //:license-check (1 packages loaded, 0 targets configured)
Analyzing: target //:license-check (1 packages loaded, 0 targets configured)

Analyzing: target //:license-check (35 packages loaded, 10 targets configured)

Analyzing: target //:license-check (87 packages loaded, 10 targets configured)

Analyzing: target //:license-check (144 packages loaded, 2449 targets configured)

Analyzing: target //:license-check (161 packages loaded, 6278 targets configured)

Analyzing: target //:license-check (165 packages loaded, 6294 targets configured)

Analyzing: target //:license-check (169 packages loaded, 6334 targets configured)

Analyzing: target //:license-check (172 packages loaded, 9450 targets configured)

Analyzing: target //:license-check (176 packages loaded, 11463 targets configured)

INFO: Analyzed target //:license-check (177 packages loaded, 11589 targets configured).
[7 / 16] Creating runfiles tree bazel-out/k8-opt-exec-ST-d57f47055a04/bin/external/score_tooling+/dash/tool/formatters/dash_format_converter.runfiles [for tool]; 0s local
INFO: Found 1 target...
Target //:license.check.license_check up-to-date:
  bazel-bin/license.check.license_check
  bazel-bin/license.check.license_check.jar
INFO: Elapsed time: 25.107s, Critical Path: 0.50s
INFO: 16 processes: 4 disk cache hit, 12 internal.
INFO: Build completed successfully, 16 total actions
INFO: Running command line: bazel-bin/license.check.license_check ./formatted.txt <args omitted>
usage: org.eclipse.dash.licenses.cli.Main [-batch <int>] [-cd <url>]
       [-confidence <int>] [-ef <url>] [-excludeSources <sources>] [-help] [-lic
       <url>] [-project <shortname>] [-repo <url>] [-review] [-summary <file>]
       [-timeout <seconds>] [-token <token>]

@danth
danth deployed to workflow-approval August 17, 2026 13:07 — with GitHub Actions Active
@danth
danth deployed to workflow-approval August 17, 2026 13:07 — with GitHub Actions Active
@github-actions

github-actions Bot commented Aug 17, 2026

Copy link
Copy Markdown

The created documentation from the pull request is available at: docu-html

@danth
Restrict file permissions in integration tests
5161249 
This verifies that the config / binary are not written to during
execution.
MaciejKaszynski
MaciejKaszynski approved these changes Aug 17, 2026
View reviewed changes

@MaciejKaszynski MaciejKaszynski left a comment •
edited
Loading

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good

@danth
danth requested a deployment to workflow-approval August 17, 2026 13:21 — with GitHub Actions Waiting
@danth
danth requested a deployment to workflow-approval August 17, 2026 13:21 — with GitHub Actions Waiting
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@MaciejKaszynski MaciejKaszynski MaciejKaszynski approved these changes
@NicolasFussberger NicolasFussberger Awaiting requested review from NicolasFussberger NicolasFussberger is a code owner
@pawelrutkaq pawelrutkaq Awaiting requested review from pawelrutkaq pawelrutkaq is a code owner
@ramceb ramceb Awaiting requested review from ramceb ramceb is a code owner
@FScholPer FScholPer Awaiting requested review from FScholPer FScholPer is a code owner
@antonkri antonkri Awaiting requested review from antonkri antonkri is a code owner
@anmittag anmittag Awaiting requested review from anmittag anmittag is a code owner

Assignees

No one assigned

Labels

None yet

Projects

LCM - Lifecycle & Health FT
Status: Backlog

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@danth @MaciejKaszynski