fix: Update pullRemote.js to set appropriate directory permissions #1640
Annotations
2 errors
|
Run release-drafter/release-drafter@v6
Resource not accessible by integration
{
name: 'HttpError',
id: '11966106052',
status: 403,
response: {
url: 'https://api.github.com/repos/finos/git-proxy/releases',
status: 403,
headers: {
'access-control-allow-origin': '*',
'access-control-expose-headers': 'ETag, Link, Location, Retry-After, X-GitHub-OTP, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Used, X-RateLimit-Resource, X-RateLimit-Reset, X-OAuth-Scopes, X-Accepted-OAuth-Scopes, X-Poll-Interval, X-GitHub-Media-Type, X-GitHub-SSO, X-GitHub-Request-Id, Deprecation, Sunset',
connection: 'close',
'content-encoding': 'gzip',
'content-security-policy': "default-src 'none'",
'content-type': 'application/json; charset=utf-8',
date: 'Fri, 22 Nov 2024 03:47:41 GMT',
'referrer-policy': 'origin-when-cross-origin, strict-origin-when-cross-origin',
server: 'github.com',
'strict-transport-security': 'max-age=31536000; includeSubdomains; preload',
'transfer-encoding': 'chunked',
vary: 'Accept-Encoding, Accept, X-Requested-With',
'x-accepted-github-permissions': 'contents=write; contents=write,workflows=write',
'x-content-type-options': 'nosniff',
'x-frame-options': 'deny',
'x-github-api-version-selected': '2022-11-28',
'x-github-media-type': 'github.v3; format=json',
'x-github-request-id': '3449:264874:6829DE2:CBE52F5:673FFEDD',
'x-ratelimit-limit': '5000',
'x-ratelimit-remaining': '4986',
'x-ratelimit-reset': '1732250858',
'x-ratelimit-resource': 'core',
'x-ratelimit-used': '14',
'x-xss-protection': '0'
},
data: {
message: 'Resource not accessible by integration',
documentation_url: 'https://docs.github.com/rest/releases/releases#create-a-release',
status: '403'
}
},
request: {
method: 'POST',
url: 'https://api.github.com/repos/finos/git-proxy/releases',
headers: {
accept: 'application/vnd.github.v3+json',
'user-agent': 'probot/12.2.5 octokit-core.js/3.5.1 Node.js/20.13.1 (linux; x64)',
authorization: 'token [REDACTED]',
'content-type': 'application/json; charset=utf-8'
},
body: `{"target_commitish":"refs/heads/main","name":"Version 1.7.1","tag_name":"v1.7.1","body":"### What's Changed\\n\\n* No changes\\n\\n---\\n\\n*Full Changelog**: https://github.com/finos/git-proxy/compare/v1.7.0...v1.7.1\\n","draft":true,"prerelease":false,"make_latest":"true"}`,
request: {}
},
event: {
id: '11966106052',
name: 'pull_request_target',
payload: {
action: 'edited',
changes: {
body: {
from: 'This PR modifies the directory creation permissions in the pullRemote function of pullRemote.js. \r\n' +
'\r\n' +
'Previously, the function was setting directory permissions to 0777 (full read, write, and execute permissions for user, group, and others). This approach is not aligned with best practices for security, particularly in secure environments such as OpenShift, where overly permissive settings can lead to vulnerabilities.\r\n' +
'\r\n' +
'The updated code now sets the permissions to 0755 (read, write, and execute for the user; read and execute for group and others). This change enhances security by restricting write access to the owner only while still allowing necessary read and execute permissions.'
}
},
number: 782,
organization: {
avatar_url: 'https://avatars.githubusercontent.com/u/35377814?v=4',
description: 'FINOS’ mission is to promote open innovation in financial services. See our full list of repos from our nearly 100 projects & 11 programs at finos.github.io',
events_url: 'https://api.github.com/orgs/finos/events',
hooks_url: 'https://api.github.com/orgs/finos/hooks',
id: 35377814,
issues_url: 'https://api.github.com/orgs/finos/issues',
login: 'finos',
members_url: 'https://api.github.com/orgs/finos/members{/member}',
node_id: 'MDEyOk9yZ2FuaXphdG
|
|
Run release-drafter/release-drafter@v6
HttpError: Resource not accessible by integration
at /home/runner/work/_actions/release-drafter/release-drafter/v6/dist/index.js:8462:21
at process.processTicksAndRejections (node:internal/process/task_queues:95:5)
at async Job.doExecute (/home/runner/work/_actions/release-drafter/release-drafter/v6/dist/index.js:30793:18)
{
name: 'AggregateError',
event: {
id: '11966106052',
name: 'pull_request_target',
payload: {
action: 'edited',
changes: {
body: {
from: 'This PR modifies the directory creation permissions in the pullRemote function of pullRemote.js. \r\n' +
'\r\n' +
'Previously, the function was setting directory permissions to 0777 (full read, write, and execute permissions for user, group, and others). This approach is not aligned with best practices for security, particularly in secure environments such as OpenShift, where overly permissive settings can lead to vulnerabilities.\r\n' +
'\r\n' +
'The updated code now sets the permissions to 0755 (read, write, and execute for the user; read and execute for group and others). This change enhances security by restricting write access to the owner only while still allowing necessary read and execute permissions.'
}
},
number: 782,
organization: {
avatar_url: 'https://avatars.githubusercontent.com/u/35377814?v=4',
description: 'FINOS’ mission is to promote open innovation in financial services. See our full list of repos from our nearly 100 projects & 11 programs at finos.github.io',
events_url: 'https://api.github.com/orgs/finos/events',
hooks_url: 'https://api.github.com/orgs/finos/hooks',
id: 35377814,
issues_url: 'https://api.github.com/orgs/finos/issues',
login: 'finos',
members_url: 'https://api.github.com/orgs/finos/members{/member}',
node_id: 'MDEyOk9yZ2FuaXphdGlvbjM1Mzc3ODE0',
public_members_url: 'https://api.github.com/orgs/finos/public_members{/member}',
repos_url: 'https://api.github.com/orgs/finos/repos',
url: 'https://api.github.com/orgs/finos'
},
pull_request: {
_links: {
comments: {
href: 'https://api.github.com/repos/finos/git-proxy/issues/782/comments'
},
commits: {
href: 'https://api.github.com/repos/finos/git-proxy/pulls/782/commits'
},
html: { href: 'https://github.com/finos/git-proxy/pull/782' },
issue: {
href: 'https://api.github.com/repos/finos/git-proxy/issues/782'
},
review_comment: {
href: 'https://api.github.com/repos/finos/git-proxy/pulls/comments{/number}'
},
review_comments: {
href: 'https://api.github.com/repos/finos/git-proxy/pulls/782/comments'
},
self: {
href: 'https://api.github.com/repos/finos/git-proxy/pulls/782'
},
statuses: {
href: 'https://api.github.com/repos/finos/git-proxy/statuses/dac735ea46960b2b14972778398a48d4604bfc5f'
}
},
active_lock_reason: null,
additions: 1,
assignee: null,
assignees: [],
author_association: 'CONTRIBUTOR',
auto_merge: null,
base: {
label: 'finos:main',
ref: 'main',
repo: {
allow_auto_merge: false,
allow_forking: true,
allow_merge_commit: true,
allow_rebase_merge: true,
allow_squash_merge: true,
allow_update_branch: true,
archive_url: 'https://api.github.com/repos/finos/git-proxy/{archive_format}{/ref}',
archived: false,
assignees_url: 'https://api.github.com/repos/finos/git-proxy/assignees{/user}',
blobs_url: 'https://api.github.com/repos/finos/git-proxy/git/blobs{/sha}',
branches_url: 'https://api.github.com/repos/finos/git-proxy/branches{/branch}',
clone_url: 'https://github.com/fin
|
Loading