Repository navigation
Image scanning now gets a full 30-minute budget for each image, starting after upload and remote digest verification. Upload time and scans of earlier images no longer consume the shared deployer's scan budget.
- Report repository, digest, status and elapsed scan time on the first response, status changes and every 60 seconds while polling.
- Include repository, digest, elapsed time and last status in timeout errors. Distinguish missing scan results from enhanced scans awaiting completion evidence.
- Preserve completion, freshness, vulnerability, artifact identity and service concurrency checks. Logs exclude raw AWS responses, findings and status descriptions.
Custom deployment adapters should call Publisher.publish(name, local, tag) without their old shared 900-second deadline. The optional fourth absolute deadline remains supported as an earlier cap, and cannot extend the 30-minute scan budget. STS sessions remain one hour; multiple exceptionally slow scans can still exhaust credentials. Individual AWS calls retain their existing timeout.
Validation: all 111 security tests passed in the pinned CircleCI AWS executor and GitHub PR CI, including nine new timing/diagnostic regressions. Shell syntax and diff checks passed.
Implementation: #52
Verified commit: e81a6772a33819c1b57c88a95d04494e59c559b8.
Consumer adoption PRs
36 PRs target the current dev/develop branches. All 36 CircleCI configurations, 62 wrapper invocations and 47 service deployment tests passed offline validation against this release. Forms, AV Scanner, Payload and Status also remove their custom 900-second scan deadlines. Application CI and live deployment acceptance remain separate checks; the consumer PRs are open for review.
| Repository | Target | Previous suite | PR |
|---|---|---|---|
| autopilot-v6 | develop |
v2.0.9 | #79 |
| av-scanner-v6 | develop |
v2.0.8 | #18 |
| billing-accounts-api-v6 | develop |
v2.0.9 | #39 |
| bus-api-v6 | develop |
v2.0.9 | #16 |
| challenge-api-v6 | develop |
v2.0.5 | #188 |
| community-app | develop |
v2.0.6 | #7298 |
| email-service-v6 | develop |
v2.0.9 | #14 |
| engagements-api-v6 | develop |
v2.0.6 | #106 |
| forms-api-v6 | develop |
v2.0.5 | #23 |
| forms-processor-v6 | develop |
v2.0.5 | #18 |
| forums-api-v6 | develop |
v2.0.9 | #31 |
| gamification-api | develop |
v2.0.6 | #35 |
| groups-api-v6 | develop |
v2.0.9 | #23 |
| identity-api-v6 | develop |
v2.0.9 | #62 |
| infra-inventory | dev |
v2.0.8 | #11 |
| learning-paths-api | develop |
v2.0.6 | #274 |
| leave-api-v6 | develop |
v2.0.6 | #20 |
| lookups-api-v6 | develop |
v2.0.6 | #18 |
| marathon-match-api-v6 | develop |
v2.0.9 | #463 |
| member-api-v6 | develop |
v2.0.5 | #176 |
| opportunities-api-v6 | develop |
v2.0.9 | #14 |
| payload-cms | develop |
v2.0.8 | #57 |
| platform-ui | dev |
v2.0.9 | #2600 |
| procurement-api-v6 | develop |
v2.0.9 | #12 |
| project-billing-account-update-processor | develop |
v2.0.8 | #17 |
| projects-api-v6 | dev |
v2.0.9 | #68 |
| reports-api-v6 | develop |
v2.0.6 | #209 |
| resource-api-v6 | develop |
v2.0.6 | #42 |
| review-api-v6 | develop |
v2.0.9 | #386 |
| standardized-skills-api | develop |
v2.0.9 | #145 |
| standardized-skills-processor | dev |
v2.0.9 | #21 |
| status-api-v6 | develop |
v2.0.9 | #19 |
| support-api-v6 | develop |
v2.0.6 | #26 |
| tc-ai-api | develop |
v2.0.9 | #100 |
| tc-finance-api | dev |
v2.0.9 | #222 |
| timeline-wall-api | develop |
v2.0.9 | #50 |