Skip to content

Conversation

markodonnell-deriv
Copy link
Contributor

Changes:

We are blocked from running API calls in the binary-com org. Which means I needed to invoke the action that runs in the tests in regentmarkets/e2e-deriv-app by using a GH API call.
This is Phase 1, which simply kicks off the action and sends the correct params (for dbot and P2P labels only).
Phase 2 will retrieve the results and update the comments.

Screenshots:

Please provide some screenshots of the change.

Copy link
Contributor

github-actions bot commented Jun 27, 2024

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
actions/actions/github-script 6.*.* 🟢 5.8
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained⚠️ 00 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 1dependency not pinned by hash detected -- score normalized to 1
Signed-Releases⚠️ -1no releases found
Fuzzing⚠️ 0project is not fuzzed
Security-Policy🟢 9security policy file detected
SAST🟢 10SAST tool is run on all commits
Vulnerabilities🟢 64 existing vulnerabilities detected
actions/actions/checkout b4ffde65f46336ab88eb53be808477a3936bae11 🟢 7.5
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1018 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Fuzzing⚠️ 0project is not fuzzed
Pinned-Dependencies🟢 4dependency not pinned by hash detected -- score normalized to 4
Signed-Releases⚠️ -1no releases found
Security-Policy🟢 9security policy file detected
Packaging🟢 10packaging workflow detected
SAST🟢 10SAST tool is run on all commits
Vulnerabilities🟢 91 existing vulnerabilities detected
actions/cypress-io/github-action 97d526c9027e1b1eedde4f37196aebe8834005ef 🟢 5.9
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 1dependency not pinned by hash detected -- score normalized to 1
Fuzzing⚠️ 0project is not fuzzed
Security-Policy⚠️ 0security policy file not detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 100 existing vulnerabilities detected
actions/marocchino/sticky-pull-request-comment 331f8f5b4215f0445d3c07b4967662a32a2d3e31 🟢 5
Details
CheckScoreReason
Code-Review⚠️ 0Found 0/4 approved changesets -- score normalized to 0
Maintained🟢 910 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 9
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
Packaging⚠️ -1packaging workflow not detected
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Security-Policy⚠️ 0security policy file not detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 91 existing vulnerabilities detected

Scanned Manifest Files

.github/workflows/smoketests.yml

Copy link

Copy link
Contributor

package old new diff pct change
account 231 KB 231 KB 0 B 0% 🟢
appstore 779 KB 779 KB 0 B 0% 🟢
bot-web-ui 839 KB 839 KB +7 B +0.0% 🟢
cashier 684 KB 684 KB 0 B 0% 🟢
cashier-v2 3.0 MB 3.0 MB 0 B 0% 🟢
cfd 500 KB 500 KB 0 B 0% 🟢
core 6.6 MB 6.6 MB +6 B +0.0% 🟢
p2p 1002 KB 1002 KB 0 B 0% 🟢
p2p-v2 3.4 MB 3.4 MB 0 B 0% 🟢
reports 95 KB 95 KB 0 B 0% 🟢
trader 320 KB 320 KB 0 B 0% 🟢
wallets 3.7 MB 3.7 MB 0 B 0% 🟢

3 similar comments
Copy link
Contributor

package old new diff pct change
account 231 KB 231 KB 0 B 0% 🟢
appstore 779 KB 779 KB 0 B 0% 🟢
bot-web-ui 839 KB 839 KB +7 B +0.0% 🟢
cashier 684 KB 684 KB 0 B 0% 🟢
cashier-v2 3.0 MB 3.0 MB 0 B 0% 🟢
cfd 500 KB 500 KB 0 B 0% 🟢
core 6.6 MB 6.6 MB +6 B +0.0% 🟢
p2p 1002 KB 1002 KB 0 B 0% 🟢
p2p-v2 3.4 MB 3.4 MB 0 B 0% 🟢
reports 95 KB 95 KB 0 B 0% 🟢
trader 320 KB 320 KB 0 B 0% 🟢
wallets 3.7 MB 3.7 MB 0 B 0% 🟢

Copy link
Contributor

package old new diff pct change
account 231 KB 231 KB 0 B 0% 🟢
appstore 779 KB 779 KB 0 B 0% 🟢
bot-web-ui 839 KB 839 KB +7 B +0.0% 🟢
cashier 684 KB 684 KB 0 B 0% 🟢
cashier-v2 3.0 MB 3.0 MB 0 B 0% 🟢
cfd 500 KB 500 KB 0 B 0% 🟢
core 6.6 MB 6.6 MB +6 B +0.0% 🟢
p2p 1002 KB 1002 KB 0 B 0% 🟢
p2p-v2 3.4 MB 3.4 MB 0 B 0% 🟢
reports 95 KB 95 KB 0 B 0% 🟢
trader 320 KB 320 KB 0 B 0% 🟢
wallets 3.7 MB 3.7 MB 0 B 0% 🟢

Copy link
Contributor

package old new diff pct change
account 231 KB 231 KB 0 B 0% 🟢
appstore 779 KB 779 KB 0 B 0% 🟢
bot-web-ui 839 KB 839 KB +7 B +0.0% 🟢
cashier 684 KB 684 KB 0 B 0% 🟢
cashier-v2 3.0 MB 3.0 MB 0 B 0% 🟢
cfd 500 KB 500 KB 0 B 0% 🟢
core 6.6 MB 6.6 MB +6 B +0.0% 🟢
p2p 1002 KB 1002 KB 0 B 0% 🟢
p2p-v2 3.4 MB 3.4 MB 0 B 0% 🟢
reports 95 KB 95 KB 0 B 0% 🟢
trader 320 KB 320 KB 0 B 0% 🟢
wallets 3.7 MB 3.7 MB 0 B 0% 🟢

@coveralls
Copy link

Coverage Status

coverage: 45.523% (-0.002%) from 45.525%
when pulling dbe1568 on markodonnell-deriv-manual-smoketests_v2
into a574af0 on master.

@coveralls
Copy link

Coverage Status

coverage: 45.528% (+0.003%) from 45.525%
when pulling dbe1568 on markodonnell-deriv-manual-smoketests_v2
into a574af0 on master.

@coveralls
Copy link

Coverage Status

coverage: 45.527% (+0.002%) from 45.525%
when pulling dbe1568 on markodonnell-deriv-manual-smoketests_v2
into a574af0 on master.

Copy link
Contributor

Generating Lighthouse report...

@coveralls
Copy link

Coverage Status

coverage: 45.528% (+0.003%) from 45.525%
when pulling dbe1568 on markodonnell-deriv-manual-smoketests_v2
into a574af0 on master.

@markodonnell-deriv markodonnell-deriv merged commit 13a22a1 into master Jun 27, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants