fix(deps): update dependency software.amazon.awssdk:bom to v2.54.6 #8101
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "[Core] CI" | |
| # Continuous Integration pipeline. | |
| # Container vulnerability findings are reported but intentionally never block Core CI. | |
| # ⚠️ Branch-protection status check: "pipeline / ✅ Pipeline Gate" | |
| on: | |
| push: | |
| branches: [main, testing-xtm-one] | |
| tags: | |
| - "[0-9]*.[0-9]*.[0-9]*" | |
| pull_request: | |
| branches: [main] | |
| permissions: | |
| contents: read | |
| actions: read | |
| packages: write | |
| jobs: | |
| pipeline: | |
| uses: ./.github/workflows/_ci-pipeline.yml | |
| with: | |
| # ── API Tests: 7 balanced shards + catch-all ── | |
| # Patterns live in .github/shards/api-<n>.txt, balanced from measured | |
| # per-class runtimes; "remaining" runs whatever no shard file claims, so a | |
| # new package is never silently untested. | |
| api-matrix: > | |
| [ | |
| {"shard":"1","shard_name":"1","search_engine":"elasticsearch","engine_selector":"elk","artifact_suffix":"","includes":"shardfile","excludes":""}, | |
| {"shard":"2","shard_name":"2","search_engine":"elasticsearch","engine_selector":"elk","artifact_suffix":"","includes":"shardfile","excludes":""}, | |
| {"shard":"3","shard_name":"3","search_engine":"elasticsearch","engine_selector":"elk","artifact_suffix":"","includes":"shardfile","excludes":""}, | |
| {"shard":"4","shard_name":"4","search_engine":"elasticsearch","engine_selector":"elk","artifact_suffix":"","includes":"shardfile","excludes":""}, | |
| {"shard":"5","shard_name":"5","search_engine":"elasticsearch","engine_selector":"elk","artifact_suffix":"","includes":"shardfile","excludes":""}, | |
| {"shard":"6","shard_name":"6","search_engine":"elasticsearch","engine_selector":"elk","artifact_suffix":"","includes":"shardfile","excludes":""}, | |
| {"shard":"7","shard_name":"7","search_engine":"elasticsearch","engine_selector":"elk","artifact_suffix":"","includes":"shardfile","excludes":""}, | |
| {"shard":"8","shard_name":"remaining","search_engine":"elasticsearch","engine_selector":"elk","artifact_suffix":"","includes":"catchall","excludes":""} | |
| ] | |
| # ── E2E Tests: standard image only, chrome/chromium × 3 shards + infra ── | |
| # ubi9 and webkit are nightly-only: they exercise the same JAR and were | |
| # doubling the critical path. Shards mirror the API split — two explicit | |
| # buckets plus a catch-all that picks up any newly added spec. | |
| e2e-matrix: > | |
| [ | |
| {"browser":"chrome","project":"chrome","docker_image":"openaev-image-amd64","variant":"std-amd64","runner":"ubuntu-latest","search_engine":"elasticsearch","shard_name":"arsenals","includes":"tests_e2e/tests/threat-arsenals","excludes":"","artifact_suffix":"-std-amd64-arsenals"}, | |
| {"browser":"chrome","project":"chrome","docker_image":"openaev-image-amd64","variant":"std-amd64","runner":"ubuntu-latest","search_engine":"elasticsearch","shard_name":"multitenant","includes":"tests_e2e/tests/multitenant","excludes":"","artifact_suffix":"-std-amd64-multitenant"}, | |
| {"browser":"chrome","project":"chrome","docker_image":"openaev-image-amd64","variant":"std-amd64","runner":"ubuntu-latest","search_engine":"elasticsearch","shard_name":"remaining","includes":"catchall","excludes":"tests_e2e/tests/threat-arsenals\ntests_e2e/tests/multitenant\ntests_e2e/tests/infra","artifact_suffix":"-std-amd64-remaining"}, | |
| {"browser":"chromium","project":"chromium","docker_image":"openaev-image-arm64","variant":"std-arm64","runner":"ubuntu-24.04-arm","search_engine":"elasticsearch","shard_name":"arsenals","includes":"tests_e2e/tests/threat-arsenals","excludes":"","artifact_suffix":"-std-arm64-arsenals"}, | |
| {"browser":"chromium","project":"chromium","docker_image":"openaev-image-arm64","variant":"std-arm64","runner":"ubuntu-24.04-arm","search_engine":"elasticsearch","shard_name":"multitenant","includes":"tests_e2e/tests/multitenant","excludes":"","artifact_suffix":"-std-arm64-multitenant"}, | |
| {"browser":"chromium","project":"chromium","docker_image":"openaev-image-arm64","variant":"std-arm64","runner":"ubuntu-24.04-arm","search_engine":"elasticsearch","shard_name":"remaining","includes":"catchall","excludes":"tests_e2e/tests/threat-arsenals\ntests_e2e/tests/multitenant\ntests_e2e/tests/infra","artifact_suffix":"-std-arm64-remaining"}, | |
| {"browser":"chromium","project":"infra-chromium","docker_image":"openaev-image-amd64","variant":"std-amd64","runner":"ubuntu-latest","search_engine":"elasticsearch","shard_name":"infra-agent","includes":"tests_e2e/tests/infra/agent-implant\\.spec\\.ts","excludes":"","artifact_suffix":"-std-amd64-infra-agent"}, | |
| {"browser":"chromium","project":"infra-chromium","docker_image":"openaev-image-amd64","variant":"std-amd64","runner":"ubuntu-latest","search_engine":"elasticsearch","shard_name":"infra-multitenant","includes":"tests_e2e/tests/infra/agent-implant-multitenant\\.spec\\.ts","excludes":"","artifact_suffix":"-std-amd64-infra-multitenant"}, | |
| {"browser":"chromium","project":"infra-chromium","docker_image":"openaev-image-arm64","variant":"std-arm64","runner":"ubuntu-24.04-arm","search_engine":"elasticsearch","shard_name":"infra-agent","includes":"tests_e2e/tests/infra/agent-implant\\.spec\\.ts","excludes":"","artifact_suffix":"-std-arm64-infra-agent"}, | |
| {"browser":"chromium","project":"infra-chromium","docker_image":"openaev-image-arm64","variant":"std-arm64","runner":"ubuntu-24.04-arm","search_engine":"elasticsearch","shard_name":"infra-multitenant","includes":"tests_e2e/tests/infra/agent-implant-multitenant\\.spec\\.ts","excludes":"","artifact_suffix":"-std-arm64-infra-multitenant"} | |
| ] | |
| vulnerability-scan-fail-on-error: false | |
| secrets: inherit |