Skip to content

security(hybrid): harden pgSendRequest — add caller-origin check and restrict OAuth tokens to authenticated instance (W-23695430) #1147

security(hybrid): harden pgSendRequest — add caller-origin check and restrict OAuth tokens to authenticated instance (W-23695430)

security(hybrid): harden pgSendRequest — add caller-origin check and restrict OAuth tokens to authenticated instance (W-23695430) #1147

Triggered via pull request September 2, 2026 05:44
@wmathurinwmathurin
synchronize #3023
Status Failure
Total duration 1h 12m 28s
Artifacts 3

pr.yaml

on: pull_request_target
test-orchestrator
19s
test-orchestrator
ui-tests-pr  /  test-android
20m 55s
ui-tests-pr / test-android
Matrix: unit-tests-pr
Fit to window
Zoom out
Zoom in

Annotations

3 errors and 7 warnings
ui-tests-pr / test-android
❌ Failed to create checks using the provided token. (HttpError: Resource not accessible by integration - https://docs.github.com/rest/checks/runs#create-a-check-run)
unit-tests-pr (SalesforceHybrid) / test-android
❌ Tests reported 1 failures
unit-tests-pr (SalesforceHybrid) / test-android
❌ Failed to create checks using the provided token. (HttpError: Resource not accessible by integration - https://docs.github.com/rest/checks/runs#create-a-check-run)
test-orchestrator
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5, octokit/request-action@dad4362715b7fb2ddedf9772c8670824af564f0d. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
test-orchestrator
Cache reservation failed: cache write denied: token has no writable scopes
ui-tests-pr / test-android
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5, actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02, android-actions/setup-android@9fc6c4e9069bf8d3d10b2204b1fb8f6ef7065407, google-github-actions/auth@c200f3691d83b41bf9bbd8638997a462592937ed, google-github-actions/setup-gcloud@e427ad8a34f8676edf47cf7d7925499adf3eb74f, gradle/actions/setup-gradle@748248ddd2a24f49513d8f472f81c3a07d4d50e1. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
ui-tests-pr / test-android
⚠️ This usually indicates insufficient permissions. More details: https://github.com/mikepenz/action-junit-report/issues/23
unit-tests-pr (SalesforceHybrid) / test-android
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5, actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea, actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02, android-actions/setup-android@9fc6c4e9069bf8d3d10b2204b1fb8f6ef7065407, google-github-actions/auth@c200f3691d83b41bf9bbd8638997a462592937ed, google-github-actions/setup-gcloud@e427ad8a34f8676edf47cf7d7925499adf3eb74f, gradle/actions/setup-gradle@748248ddd2a24f49513d8f472f81c3a07d4d50e1. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
unit-tests-pr (SalesforceHybrid) / test-android
⚠️ This usually indicates insufficient permissions. More details: https://github.com/mikepenz/action-junit-report/issues/23
unit-tests-pr (SalesforceHybrid) / test-android
Cache reservation failed: cache write denied: token has no writable scopes

Artifacts

Produced during runtime
Name Size Digest
AuthFlowTester-debug-1147
29.4 MB
sha256:3f80d49db1939963e27b55521e4294b4e8f47a6eb8e33107c78731213b29a066
test-results-SalesforceHybrid
1.82 KB
sha256:ae8418eb720f515bc6c299178dfb731d40d329db88a24a0c4a44c72bb17c2efb
ui-test-results
790 Bytes
sha256:1984f0a1663d9b0d2ee994f7618608abe618298486cc909d802ab79ed3575484