Skip to content

fix(security): validate X-User-Id against trusted owner whitelist to prevent BOLA #3588

fix(security): validate X-User-Id against trusted owner whitelist to prevent BOLA

fix(security): validate X-User-Id against trusted owner whitelist to prevent BOLA #3588

Triggered via pull request July 22, 2026 07:50
Status Failure
Total duration 3m 48s
Artifacts 5

ci.yml

on: pull_request
detect-changes
8s
detect-changes
issue-template-label-validation
7s
issue-template-label-validation
doc-anchor-validation
5s
doc-anchor-validation
backend-audit
47s
backend-audit
formatting-hygiene
6s
formatting-hygiene
benchmark
59s
benchmark
Matrix: parser-contracts
Matrix: frontend-run-checks
backend-tests
0s
backend-tests
frontend-checks
2s
frontend-checks
Fit to window
Zoom out
Zoom in

Annotations

20 errors and 15 warnings
backend-unit
Event loop is closed
backend-unit
Event loop is closed
backend-unit
Event loop is closed
backend-unit
Event loop is closed
backend-unit
Event loop is closed
backend-unit
Event loop is closed
backend-unit
Event loop is closed
backend-unit
Event loop is closed
backend-unit
Event loop is closed
backend-unit
Event loop is closed
backend-integration
Event loop is closed
backend-integration
Event loop is closed
backend-integration
Event loop is closed
backend-integration
Event loop is closed
backend-integration
Event loop is closed
backend-integration
Event loop is closed
backend-integration
Event loop is closed
backend-integration
Event loop is closed
backend-integration
Event loop is closed
backend-integration
Event loop is closed
detect-changes
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-python@v5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
doc-anchor-validation
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-python@v5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
issue-template-label-validation
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-python@v5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
formatting-hygiene
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
backend-audit
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-python@v5, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
backend-lint
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-python@v5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
parser-contracts (network)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-python@v5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
parser-contracts (intrusive)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-python@v5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
parser-contracts (exploit)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-python@v5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
parser-contracts (credentials)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-python@v5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
benchmark
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-python@v5, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
backend-unit
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-python@v5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
frontend-run-checks (22)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/checkout@v4, actions/setup-node@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
frontend-run-checks (20)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/checkout@v4, actions/setup-node@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
backend-integration
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-python@v5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
benchmark-threshold-comparison
1.1 KB
sha256:a10ec8942b80db6b4d04f36eaae6c80bfc5f4cde2bb9823d0c65cfad60830b5e
npm-audit-report
666 Bytes
sha256:e90221d3aa6077bb8c7f41e3638eb5eac23804fc7b5e0ff6c259b0615860859b
npm-audit-report
666 Bytes
sha256:74d1d9c72ad854dfba7b66ef3a57a56838375b809578cebb73f44b7eae0bc11a
pip-audit-report
868 Bytes
sha256:0f73445df9eaae72444e68c0bd4d2c7defa7bfb1151b5bc665afc8c03a6f56da
sbom
1.16 KB
sha256:a6ef81716fc6aa8683fd2e2b07234c247b994a9713325835b6bf0236e35d9242