Skip to content

fix(deps): update dependency software.amazon.awssdk:bom to v2.54.6 #8101

fix(deps): update dependency software.amazon.awssdk:bom to v2.54.6

fix(deps): update dependency software.amazon.awssdk:bom to v2.54.6 #8101

Workflow file for this run

name: "[Core] CI"
# Continuous Integration pipeline.
# Container vulnerability findings are reported but intentionally never block Core CI.
# ⚠️ Branch-protection status check: "pipeline / ✅ Pipeline Gate"
on:
push:
branches: [main, testing-xtm-one]
tags:
- "[0-9]*.[0-9]*.[0-9]*"
pull_request:
branches: [main]
permissions:
contents: read
actions: read
packages: write
jobs:
pipeline:
uses: ./.github/workflows/_ci-pipeline.yml
with:
# ── API Tests: 7 balanced shards + catch-all ──
# Patterns live in .github/shards/api-<n>.txt, balanced from measured
# per-class runtimes; "remaining" runs whatever no shard file claims, so a
# new package is never silently untested.
api-matrix: >
[
{"shard":"1","shard_name":"1","search_engine":"elasticsearch","engine_selector":"elk","artifact_suffix":"","includes":"shardfile","excludes":""},
{"shard":"2","shard_name":"2","search_engine":"elasticsearch","engine_selector":"elk","artifact_suffix":"","includes":"shardfile","excludes":""},
{"shard":"3","shard_name":"3","search_engine":"elasticsearch","engine_selector":"elk","artifact_suffix":"","includes":"shardfile","excludes":""},
{"shard":"4","shard_name":"4","search_engine":"elasticsearch","engine_selector":"elk","artifact_suffix":"","includes":"shardfile","excludes":""},
{"shard":"5","shard_name":"5","search_engine":"elasticsearch","engine_selector":"elk","artifact_suffix":"","includes":"shardfile","excludes":""},
{"shard":"6","shard_name":"6","search_engine":"elasticsearch","engine_selector":"elk","artifact_suffix":"","includes":"shardfile","excludes":""},
{"shard":"7","shard_name":"7","search_engine":"elasticsearch","engine_selector":"elk","artifact_suffix":"","includes":"shardfile","excludes":""},
{"shard":"8","shard_name":"remaining","search_engine":"elasticsearch","engine_selector":"elk","artifact_suffix":"","includes":"catchall","excludes":""}
]
# ── E2E Tests: standard image only, chrome/chromium × 3 shards + infra ──
# ubi9 and webkit are nightly-only: they exercise the same JAR and were
# doubling the critical path. Shards mirror the API split — two explicit
# buckets plus a catch-all that picks up any newly added spec.
e2e-matrix: >
[
{"browser":"chrome","project":"chrome","docker_image":"openaev-image-amd64","variant":"std-amd64","runner":"ubuntu-latest","search_engine":"elasticsearch","shard_name":"arsenals","includes":"tests_e2e/tests/threat-arsenals","excludes":"","artifact_suffix":"-std-amd64-arsenals"},
{"browser":"chrome","project":"chrome","docker_image":"openaev-image-amd64","variant":"std-amd64","runner":"ubuntu-latest","search_engine":"elasticsearch","shard_name":"multitenant","includes":"tests_e2e/tests/multitenant","excludes":"","artifact_suffix":"-std-amd64-multitenant"},
{"browser":"chrome","project":"chrome","docker_image":"openaev-image-amd64","variant":"std-amd64","runner":"ubuntu-latest","search_engine":"elasticsearch","shard_name":"remaining","includes":"catchall","excludes":"tests_e2e/tests/threat-arsenals\ntests_e2e/tests/multitenant\ntests_e2e/tests/infra","artifact_suffix":"-std-amd64-remaining"},
{"browser":"chromium","project":"chromium","docker_image":"openaev-image-arm64","variant":"std-arm64","runner":"ubuntu-24.04-arm","search_engine":"elasticsearch","shard_name":"arsenals","includes":"tests_e2e/tests/threat-arsenals","excludes":"","artifact_suffix":"-std-arm64-arsenals"},
{"browser":"chromium","project":"chromium","docker_image":"openaev-image-arm64","variant":"std-arm64","runner":"ubuntu-24.04-arm","search_engine":"elasticsearch","shard_name":"multitenant","includes":"tests_e2e/tests/multitenant","excludes":"","artifact_suffix":"-std-arm64-multitenant"},
{"browser":"chromium","project":"chromium","docker_image":"openaev-image-arm64","variant":"std-arm64","runner":"ubuntu-24.04-arm","search_engine":"elasticsearch","shard_name":"remaining","includes":"catchall","excludes":"tests_e2e/tests/threat-arsenals\ntests_e2e/tests/multitenant\ntests_e2e/tests/infra","artifact_suffix":"-std-arm64-remaining"},
{"browser":"chromium","project":"infra-chromium","docker_image":"openaev-image-amd64","variant":"std-amd64","runner":"ubuntu-latest","search_engine":"elasticsearch","shard_name":"infra-agent","includes":"tests_e2e/tests/infra/agent-implant\\.spec\\.ts","excludes":"","artifact_suffix":"-std-amd64-infra-agent"},
{"browser":"chromium","project":"infra-chromium","docker_image":"openaev-image-amd64","variant":"std-amd64","runner":"ubuntu-latest","search_engine":"elasticsearch","shard_name":"infra-multitenant","includes":"tests_e2e/tests/infra/agent-implant-multitenant\\.spec\\.ts","excludes":"","artifact_suffix":"-std-amd64-infra-multitenant"},
{"browser":"chromium","project":"infra-chromium","docker_image":"openaev-image-arm64","variant":"std-arm64","runner":"ubuntu-24.04-arm","search_engine":"elasticsearch","shard_name":"infra-agent","includes":"tests_e2e/tests/infra/agent-implant\\.spec\\.ts","excludes":"","artifact_suffix":"-std-arm64-infra-agent"},
{"browser":"chromium","project":"infra-chromium","docker_image":"openaev-image-arm64","variant":"std-arm64","runner":"ubuntu-24.04-arm","search_engine":"elasticsearch","shard_name":"infra-multitenant","includes":"tests_e2e/tests/infra/agent-implant-multitenant\\.spec\\.ts","excludes":"","artifact_suffix":"-std-arm64-infra-multitenant"}
]
vulnerability-scan-fail-on-error: false
secrets: inherit