Upgrade GitHub workflows#7531
Conversation
Remove to analize-changes-with-github-codeql Remove sarif upload as workflow run artifact Upgrade GitHub actions and datadog-ci CLI
Update GitHub actions version Add permissions description
Rename to prune-github-container-registry Remove dd-lib-java-init-test-app cleanup as it is no more used
Fix file extension Fix formatting
BenchmarksStartupParameters
See matching parameters
SummaryFound 0 performance improvements and 0 performance regressions! Performance is the same for 49 metrics, 14 unstable metrics. Startup time reports for petclinicgantt
title petclinic - global startup overhead: candidate=1.39.0-SNAPSHOT~d7cdda19de, baseline=1.39.0-SNAPSHOT~dca0c49c4f
dateFormat X
axisFormat %s
section tracing
Agent [baseline] (1.058 s) : 0, 1058113
Total [baseline] (10.438 s) : 0, 10437907
Agent [candidate] (1.05 s) : 0, 1049580
Total [candidate] (10.376 s) : 0, 10375807
section appsec
Agent [baseline] (1.186 s) : 0, 1186325
Total [baseline] (10.597 s) : 0, 10597186
Agent [candidate] (1.171 s) : 0, 1171044
Total [candidate] (10.467 s) : 0, 10467223
section iast
Agent [baseline] (1.184 s) : 0, 1184355
Total [baseline] (10.91 s) : 0, 10910332
Agent [candidate] (1.174 s) : 0, 1174031
Total [candidate] (10.796 s) : 0, 10796405
section profiling
Agent [baseline] (1.25 s) : 0, 1249545
Total [baseline] (10.578 s) : 0, 10578381
Agent [candidate] (1.248 s) : 0, 1247719
Total [candidate] (10.591 s) : 0, 10591023
gantt
title petclinic - break down per module: candidate=1.39.0-SNAPSHOT~d7cdda19de, baseline=1.39.0-SNAPSHOT~dca0c49c4f
dateFormat X
axisFormat %s
section tracing
BytebuddyAgent [baseline] (675.105 ms) : 0, 675105
BytebuddyAgent [candidate] (669.597 ms) : 0, 669597
GlobalTracer [baseline] (309.157 ms) : 0, 309157
GlobalTracer [candidate] (306.747 ms) : 0, 306747
AppSec [baseline] (51.934 ms) : 0, 51934
AppSec [candidate] (51.403 ms) : 0, 51403
Remote Config [baseline] (670.807 µs) : 0, 671
Remote Config [candidate] (671.997 µs) : 0, 672
Telemetry [baseline] (7.543 ms) : 0, 7543
Telemetry [candidate] (7.557 ms) : 0, 7557
section appsec
BytebuddyAgent [baseline] (690.708 ms) : 0, 690708
BytebuddyAgent [candidate] (678.618 ms) : 0, 678618
GlobalTracer [baseline] (301.956 ms) : 0, 301956
GlobalTracer [candidate] (300.609 ms) : 0, 300609
AppSec [baseline] (160.333 ms) : 0, 160333
AppSec [candidate] (160.918 ms) : 0, 160918
Remote Config [baseline] (610.681 µs) : 0, 611
Remote Config [candidate] (620.483 µs) : 0, 620
Telemetry [baseline] (8.896 ms) : 0, 8896
Telemetry [candidate] (7.459 ms) : 0, 7459
IAST [baseline] (20.364 ms) : 0, 20364
IAST [candidate] (18.412 ms) : 0, 18412
section iast
BytebuddyAgent [baseline] (787.806 ms) : 0, 787806
BytebuddyAgent [candidate] (779.14 ms) : 0, 779140
GlobalTracer [baseline] (297.966 ms) : 0, 297966
GlobalTracer [candidate] (296.42 ms) : 0, 296420
AppSec [baseline] (53.98 ms) : 0, 53980
AppSec [candidate] (51.291 ms) : 0, 51291
Remote Config [baseline] (601.505 µs) : 0, 602
Remote Config [candidate] (597.533 µs) : 0, 598
Telemetry [baseline] (7.451 ms) : 0, 7451
Telemetry [candidate] (9.406 ms) : 0, 9406
IAST [baseline] (22.823 ms) : 0, 22823
IAST [candidate] (23.509 ms) : 0, 23509
section profiling
BytebuddyAgent [baseline] (665.521 ms) : 0, 665521
BytebuddyAgent [candidate] (664.399 ms) : 0, 664399
GlobalTracer [baseline] (390.236 ms) : 0, 390236
GlobalTracer [candidate] (388.978 ms) : 0, 388978
AppSec [baseline] (51.946 ms) : 0, 51946
AppSec [candidate] (52.59 ms) : 0, 52590
Remote Config [baseline] (692.047 µs) : 0, 692
Remote Config [candidate] (698.489 µs) : 0, 698
Telemetry [baseline] (7.398 ms) : 0, 7398
Telemetry [candidate] (7.395 ms) : 0, 7395
ProfilingAgent [baseline] (95.768 ms) : 0, 95768
ProfilingAgent [candidate] (96.308 ms) : 0, 96308
Profiling [baseline] (95.793 ms) : 0, 95793
Profiling [candidate] (96.332 ms) : 0, 96332
Startup time reports for insecure-bankgantt
title insecure-bank - global startup overhead: candidate=1.39.0-SNAPSHOT~d7cdda19de, baseline=1.39.0-SNAPSHOT~dca0c49c4f
dateFormat X
axisFormat %s
section tracing
Agent [baseline] (1.048 s) : 0, 1048047
Total [baseline] (8.503 s) : 0, 8503430
Agent [candidate] (1.049 s) : 0, 1049443
Total [candidate] (8.484 s) : 0, 8483809
section iast
Agent [baseline] (1.184 s) : 0, 1184373
Total [baseline] (9.005 s) : 0, 9004725
Agent [candidate] (1.172 s) : 0, 1172335
Total [candidate] (8.975 s) : 0, 8975275
section iast_HARDCODED_SECRET_DISABLED
Agent [baseline] (1.173 s) : 0, 1173004
Total [baseline] (8.963 s) : 0, 8962635
Agent [candidate] (1.189 s) : 0, 1188644
Total [candidate] (9.008 s) : 0, 9007550
section iast_TELEMETRY_OFF
Agent [baseline] (1.171 s) : 0, 1170504
Total [baseline] (8.979 s) : 0, 8978542
Agent [candidate] (1.17 s) : 0, 1169755
Total [candidate] (8.937 s) : 0, 8936672
gantt
title insecure-bank - break down per module: candidate=1.39.0-SNAPSHOT~d7cdda19de, baseline=1.39.0-SNAPSHOT~dca0c49c4f
dateFormat X
axisFormat %s
section tracing
BytebuddyAgent [baseline] (669.111 ms) : 0, 669111
BytebuddyAgent [candidate] (669.22 ms) : 0, 669220
GlobalTracer [baseline] (306.028 ms) : 0, 306028
GlobalTracer [candidate] (307.096 ms) : 0, 307096
AppSec [baseline] (51.14 ms) : 0, 51140
AppSec [candidate] (51.273 ms) : 0, 51273
Remote Config [baseline] (661.066 µs) : 0, 661
Remote Config [candidate] (674.929 µs) : 0, 675
Telemetry [baseline] (7.502 ms) : 0, 7502
Telemetry [candidate] (7.55 ms) : 0, 7550
section iast
BytebuddyAgent [baseline] (787.544 ms) : 0, 787544
BytebuddyAgent [candidate] (778.688 ms) : 0, 778688
GlobalTracer [baseline] (298.339 ms) : 0, 298339
GlobalTracer [candidate] (296.454 ms) : 0, 296454
AppSec [baseline] (54.108 ms) : 0, 54108
AppSec [candidate] (50.666 ms) : 0, 50666
IAST [baseline] (21.908 ms) : 0, 21908
IAST [candidate] (23.513 ms) : 0, 23513
Remote Config [baseline] (596.093 µs) : 0, 596
Remote Config [candidate] (597.126 µs) : 0, 597
Telemetry [baseline] (8.141 ms) : 0, 8141
Telemetry [candidate] (8.828 ms) : 0, 8828
section iast_HARDCODED_SECRET_DISABLED
BytebuddyAgent [baseline] (779.415 ms) : 0, 779415
BytebuddyAgent [candidate] (789.524 ms) : 0, 789524
GlobalTracer [baseline] (295.914 ms) : 0, 295914
GlobalTracer [candidate] (300.268 ms) : 0, 300268
AppSec [baseline] (53.8 ms) : 0, 53800
AppSec [candidate] (50.32 ms) : 0, 50320
IAST [baseline] (21.572 ms) : 0, 21572
IAST [candidate] (25.307 ms) : 0, 25307
Remote Config [baseline] (582.395 µs) : 0, 582
Remote Config [candidate] (595.102 µs) : 0, 595
Telemetry [baseline] (8.085 ms) : 0, 8085
Telemetry [candidate] (8.806 ms) : 0, 8806
section iast_TELEMETRY_OFF
BytebuddyAgent [baseline] (777.216 ms) : 0, 777216
BytebuddyAgent [candidate] (775.544 ms) : 0, 775544
GlobalTracer [baseline] (295.736 ms) : 0, 295736
GlobalTracer [candidate] (296.155 ms) : 0, 296155
AppSec [baseline] (53.748 ms) : 0, 53748
AppSec [candidate] (52.256 ms) : 0, 52256
IAST [baseline] (22.314 ms) : 0, 22314
IAST [candidate] (23.879 ms) : 0, 23879
Remote Config [baseline] (582.505 µs) : 0, 583
Remote Config [candidate] (582.025 µs) : 0, 582
Telemetry [baseline] (7.25 ms) : 0, 7250
Telemetry [candidate] (7.749 ms) : 0, 7749
LoadParameters
See matching parameters
SummaryFound 1 performance improvements and 0 performance regressions! Performance is the same for 10 metrics, 17 unstable metrics.
Request duration reports for insecure-bankgantt
title insecure-bank - request duration [CI 0.99] : candidate=1.39.0-SNAPSHOT~d7cdda19de, baseline=1.39.0-SNAPSHOT~dca0c49c4f
dateFormat X
axisFormat %s
section baseline
no_agent (367.071 µs) : 347, 387
. : milestone, 367,
iast (488.163 µs) : 466, 511
. : milestone, 488,
iast_FULL (553.653 µs) : 533, 575
. : milestone, 554,
iast_GLOBAL (513.728 µs) : 491, 537
. : milestone, 514,
iast_HARDCODED_SECRET_DISABLED (488.977 µs) : 466, 512
. : milestone, 489,
iast_INACTIVE (454.819 µs) : 433, 476
. : milestone, 455,
iast_TELEMETRY_OFF (471.417 µs) : 449, 494
. : milestone, 471,
tracing (443.136 µs) : 422, 464
. : milestone, 443,
section candidate
no_agent (374.011 µs) : 355, 394
. : milestone, 374,
iast (488.413 µs) : 466, 510
. : milestone, 488,
iast_FULL (554.017 µs) : 533, 575
. : milestone, 554,
iast_GLOBAL (511.29 µs) : 489, 534
. : milestone, 511,
iast_HARDCODED_SECRET_DISABLED (487.525 µs) : 465, 510
. : milestone, 488,
iast_INACTIVE (451.682 µs) : 430, 473
. : milestone, 452,
iast_TELEMETRY_OFF (473.755 µs) : 452, 496
. : milestone, 474,
tracing (439.002 µs) : 419, 459
. : milestone, 439,
Request duration reports for petclinicgantt
title petclinic - request duration [CI 0.99] : candidate=1.39.0-SNAPSHOT~d7cdda19de, baseline=1.39.0-SNAPSHOT~dca0c49c4f
dateFormat X
axisFormat %s
section baseline
no_agent (1.343 ms) : 1324, 1362
. : milestone, 1343,
appsec (1.738 ms) : 1714, 1762
. : milestone, 1738,
appsec_no_iast (1.708 ms) : 1683, 1732
. : milestone, 1708,
iast (1.471 ms) : 1449, 1494
. : milestone, 1471,
profiling (1.555 ms) : 1531, 1580
. : milestone, 1555,
tracing (1.482 ms) : 1457, 1506
. : milestone, 1482,
section candidate
no_agent (1.353 ms) : 1333, 1372
. : milestone, 1353,
appsec (1.702 ms) : 1678, 1726
. : milestone, 1702,
appsec_no_iast (1.745 ms) : 1720, 1770
. : milestone, 1745,
iast (1.47 ms) : 1448, 1493
. : milestone, 1470,
profiling (1.495 ms) : 1470, 1519
. : milestone, 1495,
tracing (1.488 ms) : 1463, 1512
. : milestone, 1488,
DacapoParameters
See matching parameters
SummaryFound 0 performance improvements and 0 performance regressions! Performance is the same for 12 metrics, 0 unstable metrics. Execution time for tomcatgantt
title tomcat - execution time [CI 0.99] : candidate=1.39.0-SNAPSHOT~d7cdda19de, baseline=1.39.0-SNAPSHOT~dca0c49c4f
dateFormat X
axisFormat %s
section baseline
no_agent (1.459 ms) : 1448, 1470
. : milestone, 1459,
appsec (2.219 ms) : 2184, 2253
. : milestone, 2219,
iast (1.969 ms) : 1927, 2012
. : milestone, 1969,
iast_GLOBAL (2.023 ms) : 1978, 2067
. : milestone, 2023,
profiling (1.861 ms) : 1826, 1897
. : milestone, 1861,
tracing (1.835 ms) : 1802, 1867
. : milestone, 1835,
section candidate
no_agent (1.463 ms) : 1452, 1475
. : milestone, 1463,
appsec (2.223 ms) : 2187, 2258
. : milestone, 2223,
iast (1.974 ms) : 1931, 2017
. : milestone, 1974,
iast_GLOBAL (2.015 ms) : 1972, 2059
. : milestone, 2015,
profiling (1.853 ms) : 1818, 1888
. : milestone, 1853,
tracing (1.841 ms) : 1807, 1874
. : milestone, 1841,
Execution time for biojavagantt
title biojava - execution time [CI 0.99] : candidate=1.39.0-SNAPSHOT~d7cdda19de, baseline=1.39.0-SNAPSHOT~dca0c49c4f
dateFormat X
axisFormat %s
section baseline
no_agent (15.455 s) : 15455000, 15455000
. : milestone, 15455000,
appsec (15.313 s) : 15313000, 15313000
. : milestone, 15313000,
iast (18.997 s) : 18997000, 18997000
. : milestone, 18997000,
iast_GLOBAL (18.067 s) : 18067000, 18067000
. : milestone, 18067000,
profiling (15.913 s) : 15913000, 15913000
. : milestone, 15913000,
tracing (15.112 s) : 15112000, 15112000
. : milestone, 15112000,
section candidate
no_agent (15.665 s) : 15665000, 15665000
. : milestone, 15665000,
appsec (15.164 s) : 15164000, 15164000
. : milestone, 15164000,
iast (19.032 s) : 19032000, 19032000
. : milestone, 19032000,
iast_GLOBAL (17.893 s) : 17893000, 17893000
. : milestone, 17893000,
profiling (15.278 s) : 15278000, 15278000
. : milestone, 15278000,
tracing (14.922 s) : 14922000, 14922000
. : milestone, 14922000,
|
|
This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation. |
What Does This Do
This PRs upgrades the GitHub repository workflows.
It focuses on:
Code scanning actions are now merged and send sarif result on Datadog backend.
Motivation
Moving to strict permission for GitHub action token, we need to define the required permissions for the workflow to run.
Additional Notes
When merging, we need to update the allowed actions from the repository settings.
I included a Maintenance section in the READMe to help with this task.
References for future self:
permissionssyntaxContributor Checklist
type:and (comp:orinst:) labels in addition to any usefull labelsclose,fixor any linking keywords when referencing an issue.Use
solvesinstead, and assign the PR milestone to the issueJira ticket: VULN-8166