prod release #63

saravankumarpa · 2020-05-14T17:00:19Z

No description provided.

sonarqubecloud · 2022-06-13T19:30:31Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
1 Code Smell

No Coverage information
2.9% Duplication

sonarqubecloud · 2022-10-26T19:11:13Z

SonarCloud Quality Gate failed.

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
5.8% Duplication

sonarqubecloud · 2023-01-04T21:47:29Z

SonarCloud Quality Gate failed.

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
5.8% Duplication

sonarqubecloud · 2023-02-17T17:32:17Z

SonarCloud Quality Gate failed.

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
5.8% Duplication

Ticket 3968: Bug Fix

Ticket 3968: Bug Fix part 2

sonarqubecloud · 2025-05-08T18:04:37Z

Quality Gate failed

Failed conditions
4.5% Duplication on New Code (required ≤ 3%)

See analysis details on SonarQube Cloud

DEV<>Master Merge

FOI Request Form Updates - New Ministry Name Update : Ministry of Jobs, Economic Development and Innovation to Ministry of Jobs and Economic Growth

FOIMOD-4142 - FOI Request Form Updates - New Ministry Name Update

sonarqubecloud · 2025-07-18T20:10:32Z

Quality Gate failed

Failed conditions
4.5% Duplication on New Code (required ≤ 3%)

See analysis details on SonarQube Cloud

api/apiCustomFunctions.js

web/src/app/route-components/adoption/adoption.component.ts

web/src/app/route-components/childprotection-child/childprotection-child.component.ts

web/src/app/route-components/childprotection-parent/childprotection-parent.component.ts

web/src/app/route-components/choose-identity/choose-identity.component.ts

web/src/app/route-components/foster-parent/foster-parent.component.ts

web/src/app/route-components/request-topic/request-topic.component.ts

web/src/app/route-components/youthincare-child/youthincare-child.component.ts

web/src/app/route-components/youthincare-parent/youthincare-parent.component.ts

web/src/index.html

.github/workflows/api-cd.dev.yml

+    runs-on: ubuntu-24.04
+
+    if: github.event_name == 'push' && github.repository == 'bcgov/foi-requests'
+    environment:
+      name: "dev"
+
+    steps:
+      - name: Install oc
+        uses: redhat-actions/oc-installer@v1
+        with:
+          oc_version: '4.6'
+
+      - uses: actions/checkout@v2
+
+      - name: Install oc
+        uses: redhat-actions/oc-installer@v1
+        with:
+          oc_version: '4.6'
+
+      - name: Login Openshift
+        shell: bash
+        run: |
+          oc login --server=${{secrets.OPENSHIFT4_LOGIN_REGISTRY}} --token=${{secrets.OPENSHIFT4_SA_TOKEN}}
+
+      - name: Tools project
+        shell: bash
+        run: |
+          oc project ${{ secrets.OPENSHIFT4_FRONTEND_REPOSITORY }}-tools
+
+      - name: Build from text branch
+        shell: bash
+        run: |
+          oc patch bc/api-master-build -p '{"spec":{"source":{"git":{"ref":"dev"}}}}'
+
+      - name: Start Build Openshift
+        shell: bash
+        run: |
+          oc start-build api-master-build --wait
+
+      - name: Tag+Deploy for dev
+        shell: bash
+        run: |
+          oc tag api:latest api:${{ env.TAG_NAME }}
+
+      - name: Rollout Restart Deployment
+        shell: bash
+        run: |
+          oc project 04d1a3-dev
+          oc rollout restart deployment/api


To address the issue, we need to explicitly define the permissions key in the workflow file. Since the workflow appears to perform actions such as checking out code (contents: read) and deploying an application, it is likely that the contents: read permission is sufficient. If the workflow requires additional permissions (e.g., pull-requests: write), they should also be specified explicitly. The permissions key can be added at the root level of the workflow to apply to all jobs, or it can be added to individual jobs if different permissions are required for different jobs.

.github/workflows/api-cd.test.yml

+    runs-on: ubuntu-24.04
+
+    if: github.event_name == 'push' && github.repository == 'bcgov/foi-requests'
+    environment:
+      name: "test"
+
+    steps:
+      - name: Install oc
+        uses: redhat-actions/oc-installer@v1
+        with:
+          oc_version: '4.6'
+
+      - uses: actions/checkout@v2
+
+      - name: Login Openshift
+        shell: bash
+        run: |
+          oc login --server=${{secrets.OPENSHIFT4_LOGIN_REGISTRY}} --token=${{secrets.OPENSHIFT4_SA_TOKEN}}
+
+      - name: Tools project
+        shell: bash
+        run: |
+          oc project ${{ secrets.OPENSHIFT4_FRONTEND_REPOSITORY }}-tools
+
+      - name: Build from text branch
+        shell: bash
+        run: |
+          oc patch bc/api-master-build -p '{"spec":{"source":{"git":{"ref":"master"}}}}'
+
+      - name: Start Build Openshift
+        shell: bash
+        run: |
+          oc start-build api-master-build --wait
+
+      - name: Tag+Deploy for test
+        shell: bash
+        run: |
+          oc tag api:latest api:${{ env.TAG_NAME }}
+
+      - name: Rollout Restart Deployment
+        shell: bash
+        run: |
+          oc project 04d1a3-test
+          oc rollout restart deployment/api


To fix the issue, we will add a permissions block at the workflow level to explicitly define the minimal permissions required. Based on the workflow's actions, it primarily interacts with the repository contents (e.g., checking out code) and does not appear to require write access. Therefore, we will set contents: read as the permission. This ensures that the GITHUB_TOKEN has only the necessary permissions to perform the workflow tasks.

.github/workflows/web-cd.dev.yml

+    runs-on: ubuntu-24.04
+
+    if: github.event_name == 'push' && github.repository == 'bcgov/foi-requests'
+    environment:
+      name: "dev"
+
+    steps:
+      - name: Install oc
+        uses: redhat-actions/oc-installer@v1
+        with:
+          oc_version: '4.6'
+
+      - uses: actions/checkout@v2
+
+      - name: Install oc
+        uses: redhat-actions/oc-installer@v1
+        with:
+          oc_version: '4.6'
+
+      - name: Login Openshift
+        shell: bash
+        run: |
+          oc login --server=${{secrets.OPENSHIFT4_LOGIN_REGISTRY}} --token=${{secrets.OPENSHIFT4_SA_TOKEN}}
+
+      - name: Tools project
+        shell: bash
+        run: |
+          oc project ${{ secrets.OPENSHIFT4_FRONTEND_REPOSITORY }}-tools
+
+      - name: Build from text branch
+        shell: bash
+        run: |
+          oc patch bc/web-artifact-build -p '{"spec":{"source":{"git":{"ref":"dev"}}}}'
+
+      - name: Start Build Openshift part 1/2
+        shell: bash
+        run: |
+          oc start-build web-artifact-build --wait
+
+      - name: Start Build Openshift part 2/2
+        shell: bash
+        run: |
+          oc start-build web-image-build --wait
+
+      - name: Tag+Deploy for dev
+        shell: bash
+        run: |
+          oc tag web:latest web:${{ env.TAG_NAME }}
+
+      - name: Rollout Restart Deployment
+        shell: bash
+        run: |
+          oc project 04d1a3-dev
+          oc rollout restart deployment/web


To fix this issue, add a permissions block to the workflow. Ideally, this block should be placed at the root level of the workflow to apply the permissions globally to all jobs. Based on the workflow's usage, the minimum required permissions are likely contents: read since there are no GitHub-related write operations like creating pull requests or dispatching workflows. This will limit the GITHUB_TOKEN to read-only access to repository contents, adhering to the principle of least privilege.

.github/workflows/web-cd.test.yml

+    runs-on: ubuntu-24.04
+
+    if: github.event_name == 'push' && github.repository == 'bcgov/foi-requests'
+    environment:
+      name: "test"
+
+    steps:
+      - name: Install oc
+        uses: redhat-actions/oc-installer@v1
+        with:
+          oc_version: '4.6'
+
+      - uses: actions/checkout@v2
+
+      - name: Login Openshift
+        shell: bash
+        run: |
+          oc login --server=${{secrets.OPENSHIFT4_LOGIN_REGISTRY}} --token=${{secrets.OPENSHIFT4_SA_TOKEN}}
+
+      - name: Tools project
+        shell: bash
+        run: |
+          oc project ${{ secrets.OPENSHIFT4_FRONTEND_REPOSITORY }}-tools
+
+      - name: Build from master branch
+        shell: bash
+        run: |
+          oc patch bc/web-artifact-build -p '{"spec":{"source":{"git":{"ref":"master"}}}}'
+
+      - name: Start Build Openshift part 1/2
+        shell: bash
+        run: |
+          oc start-build web-artifact-build --wait
+
+      - name: Start Build Openshift part 2/2
+        shell: bash
+        run: |
+          oc start-build web-image-build --wait
+
+      - name: Tag+Deploy for test
+        shell: bash
+        run: |
+          oc tag web:latest web:${{ env.TAG_NAME }}
+
+      - name: Rollout Restart Deployment
+        shell: bash
+        run: |
+          oc project 04d1a3-test
+          oc rollout restart deployment/web


To fix the issue, we will add a permissions block at the root level of the workflow. This block will specify the least privileges required for the workflow to function correctly. Based on the workflow's steps, it primarily interacts with OpenShift and does not seem to require write access to the repository. Therefore, we will set contents: read as the minimal permission.

Dev disclaimer strike

Disclaimer for Job Action on Base component html - !!!need to remove after strike

sonarqubecloud · 2025-09-23T18:34:44Z

Quality Gate failed

Failed conditions
4.5% Duplication on New Code (required ≤ 3%)

See analysis details on SonarQube Cloud

update disclaimer regarding job action

update job action banner

remove disclaimer

remove job action banner

sonarqubecloud · 2025-11-07T17:47:44Z

Quality Gate failed

Failed conditions
4.5% Duplication on New Code (required ≤ 3%)

See analysis details on SonarQube Cloud

jleach force-pushed the master branch from 34d1f7f to d15e220 Compare February 16, 2021 21:08

acoard-aot had a problem deploying to test April 27, 2022 20:23 Error

sumathi-thirumani temporarily deployed to test May 17, 2022 22:06 Inactive

sumathi-thirumani temporarily deployed to test May 17, 2022 23:08 Inactive

acoard-aot temporarily deployed to test May 17, 2022 23:38 Inactive

divyav-aot temporarily deployed to test May 26, 2022 18:28 Inactive

abin-aot temporarily deployed to test June 8, 2022 17:01 Inactive

abin-aot had a problem deploying to test June 8, 2022 17:01 Error

abin-aot temporarily deployed to test June 8, 2022 17:12 Inactive

abin-aot temporarily deployed to test June 13, 2022 19:29 Inactive

abin-aot temporarily deployed to test October 17, 2022 22:51 Inactive

abin-aot temporarily deployed to test October 21, 2022 16:03 Inactive

abin-aot temporarily deployed to test October 26, 2022 19:10 Inactive

abin-aot temporarily deployed to test December 13, 2022 18:14 — with GitHub Actions Inactive

abin-aot temporarily deployed to test December 13, 2022 18:50 — with GitHub Actions Inactive

abin-aot temporarily deployed to test December 13, 2022 20:25 — with GitHub Actions Inactive

abin-aot temporarily deployed to test January 4, 2023 21:46 — with GitHub Actions Inactive

abin-aot temporarily deployed to test February 15, 2023 22:22 — with GitHub Actions Inactive

abin-aot temporarily deployed to test February 16, 2023 21:59 — with GitHub Actions Inactive

abin-aot temporarily deployed to test February 17, 2023 07:05 — with GitHub Actions Inactive

abin-aot temporarily deployed to test February 17, 2023 17:31 — with GitHub Actions Inactive

abin-aot temporarily deployed to test April 14, 2023 21:30 — with GitHub Actions Inactive

Aman-Hundal and others added 2 commits May 8, 2025 10:10

bug fix

8c84d4e

Merge pull request #460 from bcgov/test-AH-FOIMOD-3968

f6849da

Ticket 3968: Bug Fix

Aman-Hundal temporarily deployed to test May 8, 2025 17:25 — with GitHub Actions Inactive

Aman-Hundal and others added 2 commits May 8, 2025 11:02

bug fix adustment

789aff2

Merge pull request #461 from bcgov/test-AH-FOIMOD-3968

6df5314

Ticket 3968: Bug Fix part 2

Aman-Hundal temporarily deployed to test May 8, 2025 18:04 — with GitHub Actions Inactive

Aman-Hundal and others added 5 commits May 8, 2025 11:24

merged master into dev

2774e37

Merge pull request #462 from bcgov/dev-AH-FOIMOD-devmastermerge

0bc4dba

DEV<>Master Merge

FOIMOD-4142 - FOI Request Form Updates - New Ministry Name Update

ef0790a

FOI Request Form Updates - New Ministry Name Update : Ministry of Jobs, Economic Development and Innovation to Ministry of Jobs and Economic Growth

Merge pull request #463 from bcgov/master-AS-FOIMOD-4142

26bf089

FOIMOD-4142 - FOI Request Form Updates - New Ministry Name Update

Merge pull request #464 from bcgov/dev

2e7e048

FOIMOD-4142 - FOI Request Form Updates - New Ministry Name Update

aparna-aot temporarily deployed to test July 18, 2025 20:09 — with GitHub Actions Inactive

github-advanced-security bot found potential problems Jul 18, 2025

View reviewed changes

abin-aot added 3 commits September 23, 2025 10:55

Disclaimer added to base component HTML

23d2d8f

Merge pull request #465 from bcgov/dev-AA-disclaimer-strike

d5ea9c6

Dev disclaimer strike

Merge pull request #466 from bcgov/dev

95d43a1

Disclaimer for Job Action on Base component html - !!!need to remove after strike

abin-aot temporarily deployed to test September 23, 2025 18:33 — with GitHub Actions Inactive

Amritpal-Nijjar and others added 3 commits October 28, 2025 13:49

chore: update banner regarding job action

84373e2

Merge pull request #467 from bcgov/dev-AN-disclaimer-strike

23ac3a6

update disclaimer regarding job action

Merge pull request #468 from bcgov/dev

ad1dd13

update job action banner

Amritpal-Nijjar temporarily deployed to test October 28, 2025 22:35 — with GitHub Actions Inactive

Amritpal-Nijjar and others added 3 commits November 7, 2025 09:22

chore: remove disclaimer regarding job action

93d5822

Merge pull request #469 from bcgov/dev-AN-remove-disclaimer

f7fd04c

remove disclaimer

Merge pull request #470 from bcgov/dev

4e064bb

remove job action banner

Amritpal-Nijjar deployed to test November 7, 2025 17:46 — with GitHub Actions Active

@@ -15,6 +15,9 @@
                     required: true
                     default: "dev"
+            permissions:
+              contents: read
             defaults:
               run:
                 shell: bash

@@ -1,5 +1,7 @@
             name: Deploy web to dev
+            permissions:
+              contents: read
             on:
               push:

prod release #63

Are you sure you want to change the base?

prod release #63

Uh oh!

Conversation

saravankumarpa commented May 14, 2020

Uh oh!

sonarqubecloud bot commented Jun 13, 2022

Uh oh!

sonarqubecloud bot commented Oct 26, 2022

Uh oh!

sonarqubecloud bot commented Jan 4, 2023

Uh oh!

sonarqubecloud bot commented Feb 17, 2023

Uh oh!

sonarqubecloud bot commented May 8, 2025

Quality Gate failed

Uh oh!

sonarqubecloud bot commented Jul 18, 2025

Quality Gate failed

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Check warning

Copilot Autofix

Check warning

Copilot Autofix

Check warning

Copilot Autofix

Check warning

Copilot Autofix

sonarqubecloud bot commented Sep 23, 2025

Quality Gate failed

Uh oh!

sonarqubecloud bot commented Nov 7, 2025

Quality Gate failed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

14 participants