Skip to content

wip move security headers from flask_talisman to an asgi middleware #1810

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
jcristau wants to merge 1 commit into
base: main
Choose a base branch
from

wip move security headers from flask_talisman to an asgi middleware

b1344d4
Select commit
Loading
Failed to load commit list.
Draft

wip move security headers from flask_talisman to an asgi middleware #1810

wip move security headers from flask_talisman to an asgi middleware
b1344d4
Select commit
Loading
Failed to load commit list.
firefoxci-taskcluster / Decision Task succeeded Nov 12, 2025 in 8s

FirefoxCI (pull_request)

The task that creates all of the other tasks in the task graph

Details

View task in Taskcluster | View logs in Taskcluster | View task group in Taskcluster

Task Status

Started: 2025-11-12T15:31:35.599Z
Resolved: 2025-11-12T15:31:43.672Z
Task Execution Time: 8 seconds, 73 milliseconds
Task Status: completed
Reason Resolved: completed
RunId: 0

Artifacts

- public/actions.json
- public/chain-of-trust.json
- public/chain-of-trust.json.sig
- public/docker-contexts/fetch.tar.gz
- public/docker-contexts/node20.tar.gz
- public/docker-contexts/python312.tar.gz
- public/docker-contexts/shipit-admin.tar.gz
- public/docker-contexts/shipit-public.tar.gz
- public/docker-contexts/skopeo.tar.gz
- public/fetch-content
- public/full-task-graph.json
- public/label-to-taskid.json
- public/logs/certified.log
- public/logs/live_backing.log
- public/logs/live.log
- public/optimizations.log
- public/parameters.yml
- public/runnable-jobs.json
- public/run-task
- public/target-tasks.json
- public/task-graph.json

[taskcluster 2025-11-12 15:31:35.713Z] Task ID: OgWC6G3eRFyu_Te3-tL7cw
[taskcluster 2025-11-12 15:31:35.713Z] Worker ID: 8934368419348289872
[taskcluster 2025-11-12 15:31:35.713Z] Worker Group: us-central1-f
[taskcluster 2025-11-12 15:31:35.713Z] Worker Node Type: projects/887720501152/machineTypes/n2-standard-2
[taskcluster 2025-11-12 15:31:35.713Z] Worker Pool: releng-1/decision-gcp
[taskcluster 2025-11-12 15:31:35.713Z] Worker Version: 38.0.5
[taskcluster 2025-11-12 15:31:35.713Z] Public IP: 136.116.177.209
[taskcluster 2025-11-12 15:31:35.713Z] Hostname: releng-1-decision-gcp-et3pxjhotpmb9fwnevr0vg

[taskcluster 2025-11-12 15:31:36.395Z] === Task Starting ===
[setup 2025-11-12T15:31:36.723+00:00] run-task started in /
[setup 2025-11-12T15:31:36.723+00:00] Invoked by command: --shipit-checkout=/builds/worker/checkouts/src --task-cwd=/builds/worker/checkouts/src -- bash -cx ln -s /builds/worker/artifacts artifacts && taskgraph decision --pushlog-id='0' --pushdate='0' --project='shipit' --message="" --owner='jcristau@users.noreply.github.com' --level='1' --base-repository="$SHIPIT_BASE_REPOSITORY" --head-repository="$SHIPIT_HEAD_REPOSITORY" --head-ref="$SHIPIT_HEAD_REF" --head-rev="$SHIPIT_HEAD_REV" --repository-type="$SHIPIT_REPOSITORY_TYPE" --tasks-for='github-pull-request' 

[setup 2025-11-12T15:31:36.723+00:00] Python version: 3.11.2
[vcs 2025-11-12T15:31:36.726+00:00] WARNING: vcs checkout path (/builds/worker/checkouts/src) not in cache or volume; performance will likely suffer
[setup 2025-11-12T15:31:36.726+00:00] running as worker:worker
[vcs 2025-11-12T15:31:36.727+00:00] executing ['git', 'config', '--global', '--add', 'safe.directory', '/builds/worker/checkouts/src']
[vcs 2025-11-12T15:31:36.729+00:00] executing ['git', 'clone', 'https://github.com/mozilla-releng/shipit', '/builds/worker/checkouts/src']
[vcs 2025-11-12T15:31:36.732+00:00] Cloning into '/builds/worker/checkouts/src'...
[vcs 2025-11-12T15:31:37.722+00:00] executing ['git', 'fetch', '--no-tags', 'https://github.com/jcristau/shipit', 'security-headers']
[vcs 2025-11-12T15:31:37.968+00:00] From https://github.com/jcristau/shipit
[vcs 2025-11-12T15:31:37.969+00:00]  * branch            security-headers -> FETCH_HEAD
[vcs 2025-11-12T15:31:37.971+00:00] executing ['git', 'checkout', '-f', '-B', 'security-headers', 'b1344d4bcb35898c45ec1a9d66029b0c5aa3dccf']
[vcs 2025-11-12T15:31:37.985+00:00] Switched to a new branch 'security-headers'
[vcs 2025-11-12T15:31:37.986+00:00] cleaning git checkout...
[vcs 2025-11-12T15:31:37.986+00:00] executing ['git', 'clean', '-nxdff']
[vcs 2025-11-12T15:31:37.993+00:00] removing []
[vcs 2025-11-12T15:31:37.993+00:00] successfully cleaned git checkout!
[vcs 2025-11-12T15:31:37.995+00:00] TinderboxPrint:<a href='https://github.com/jcristau/shipit/commit/b1344d4bcb35898c45ec1a9d66029b0c5aa3dccf' title='Built from shipit commit b1344d4bcb35898c45ec1a9d66029b0c5aa3dccf'>b1344d4bcb35898c45ec1a9d66029b0c5aa3dccf</a>
[task 2025-11-12T15:31:37.995+00:00] executing ['bash', '-cx', 'ln -s /builds/worker/artifacts artifacts && taskgraph decision --pushlog-id=\'0\' --pushdate=\'0\' --project=\'shipit\' --message="" --owner=\'jcristau@users.noreply.github.com\' --level=\'1\' --base-repository="$SHIPIT_BASE_REPOSITORY" --head-repository="$SHIPIT_HEAD_REPOSITORY" --head-ref="$SHIPIT_HEAD_REF" --head-rev="$SHIPIT_HEAD_REV" --repository-type="$SHIPIT_REPOSITORY_TYPE" --tasks-for=\'github-pull-request\' \n']
[task 2025-11-12T15:31:37.996+00:00] + ln -s /builds/worker/artifacts artifacts
[task 2025-11-12T15:31:37.997+00:00] + taskgraph decision --pushlog-id=0 --pushdate=0 --project=shipit --message= --owner=jcristau@users.noreply.github.com --level=1 --base-repository=https://github.com/mozilla-releng/shipit --head-repository=https://github.com/jcristau/shipit --head-ref=security-headers --head-rev=b1344d4bcb35898c45ec1a9d66029b0c5aa3dccf --repository-type=git --tasks-for=github-pull-request
[task 2025-11-12T15:31:38.528+00:00] 2025-11-12 15:31:38,528 - INFO - Loading graph configuration.
[task 2025-11-12T15:31:38.536+00:00] 2025-11-12 15:31:38,536 - INFO - base_ref has been reset from "" to "origin/main".
[task 2025-11-12T15:31:38.536+00:00] 2025-11-12 15:31:38,536 - INFO - base_rev is not set.
[task 2025-11-12T15:31:38.538+00:00] 2025-11-12 15:31:38,536 - INFO - Using base_ref "origin/main" to determine latest common revision...
[task 2025-11-12T15:31:38.540+00:00] 2025-11-12 15:31:38,540 - INFO - base_rev has been reset from "" to "ad13e9b5c69d4de90f0af488c15260c966774c68".
[task 2025-11-12T15:31:38.542+00:00] 2025-11-12 15:31:38,542 - WARNING - using default project parameters; add shipit to PER_PROJECT_PARAMETERS in /usr/local/lib/python3.11/dist-packages/taskgraph/decision.py to customize behavior for this project
[task 2025-11-12T15:31:38.543+00:00] 2025-11-12 15:31:38,543 - INFO - Using Parameters(id=6be307a55925) (from defaults)
[task 2025-11-12T15:31:38.543+00:00] 2025-11-12 15:31:38,543 - INFO - writing artifact file `parameters.yml`
[task 2025-11-12T15:31:38.552+00:00] 2025-11-12 15:31:38,552 - INFO - writing artifact file `actions.json`
[task 2025-11-12T15:31:38.552+00:00] 2025-11-12 15:31:38,552 - INFO - Loading kinds
[task 2025-11-12T15:31:38.555+00:00] 2025-11-12 15:31:38,555 - INFO - Generating full task set
[task 2025-11-12T15:31:38.575+00:00] 2025-11-12 15:31:38,575 - INFO - Writing docker-contexts/python312.tar.gz for docker image python312
[task 2025-11-12T15:31:38.592+00:00] 2025-11-12 15:31:38,592 - INFO - Writing docker-contexts/node20.tar.gz for docker image node20
[task 2025-11-12T15:31:38.609+00:00] 2025-11-12 15:31:38,609 - INFO - Writing docker-contexts/fetch.tar.gz for docker image fetch
[task 2025-11-12T15:31:38.627+00:00] 2025-11-12 15:31:38,627 - INFO - Writing docker-contexts/skopeo.tar.gz for docker image skopeo
[task 2025-11-12T15:31:38.646+00:00] 2025-11-12 15:31:38,645 - INFO - Generated 4 tasks for kind docker-image
[task 2025-11-12T15:31:38.662+00:00] 2025-11-12 15:31:38,662 - INFO - Generated 1 tasks for kind fetch
[task 2025-11-12T15:31:38.663+00:00] 2025-11-12 15:31:38,663 - INFO - Writing docker-contexts/shipit-admin.tar.gz for docker image shipit-admin
[task 2025-11-12T15:31:38.708+00:00] 2025-11-12 15:31:38,708 - INFO - Writing docker-contexts/shipit-public.tar.gz for docker image shipit-public
[task 2025-11-12T15:31:38.754+00:00] 2025-11-12 15:31:38,754 - INFO - Generated 2 tasks for kind k8s-image
[task 2025-11-12T15:31:38.757+00:00] 2025-11-12 15:31:38,757 - INFO - Generated 0 tasks for kind push-image
[task 2025-11-12T15:31:38.760+00:00] 2025-11-12 15:31:38,760 - INFO - Generated 2 tasks for kind tests
[task 2025-11-12T15:31:38.761+00:00] 2025-11-12 15:31:38,761 - INFO - Generated 0 tasks for kind codecov
[task 2025-11-12T15:31:38.762+00:00] 2025-11-12 15:31:38,762 - INFO - Generated 1 tasks for kind pr
[task 2025-11-12T15:31:38.764+00:00] 2025-11-12 15:31:38,764 - INFO - Generated 0 tasks for kind push-js
[task 2025-11-12T15:31:38.765+00:00] 2025-11-12 15:31:38,764 - INFO - Generating full task graph
[task 2025-11-12T15:31:38.766+00:00] 2025-11-12 15:31:38,764 - INFO - Full task graph contains 10 tasks and 3 dependencies
[task 2025-11-12T15:31:38.766+00:00] 2025-11-12 15:31:38,765 - INFO - writing artifact file `full-task-graph.json`
[task 2025-11-12T15:31:38.767+00:00] 2025-11-12 15:31:38,765 - INFO - writing artifact file `runnable-jobs.json`
[task 2025-11-12T15:31:38.768+00:00] 2025-11-12 15:31:38,765 - INFO - Generating target task set
[task 2025-11-12T15:31:38.768+00:00] 2025-11-12 15:31:38,765 - INFO - Filter filter_target_tasks pruned 7 tasks (3 remain)
[task 2025-11-12T15:31:38.769+00:00] 2025-11-12 15:31:38,765 - INFO - writing artifact file `target-tasks.json`
[task 2025-11-12T15:31:38.769+00:00] 2025-11-12 15:31:38,766 - INFO - Generating target task graph
[task 2025-11-12T15:31:38.769+00:00] 2025-11-12 15:31:38,766 - INFO - Adding 6 tasks with `always_target` attribute
[task 2025-11-12T15:31:38.769+00:00] 2025-11-12 15:31:38,766 - INFO - Generating optimized task graph
[task 2025-11-12T15:31:38.769+00:00] 2025-11-12 15:31:38,766 - INFO - No tasks removed during optimization
[task 2025-11-12T15:31:39.079+00:00] 2025-11-12 15:31:39,079 - INFO - Replaced 4 tasks by index-search (index-search) during optimization.
[task 2025-11-12T15:31:39.079+00:00] 2025-11-12 15:31:39,079 - INFO - writing artifact file `task-graph.json`
[task 2025-11-12T15:31:39.080+00:00] 2025-11-12 15:31:39,080 - INFO - writing artifact file `label-to-taskid.json`
[task 2025-11-12T15:31:39.081+00:00] 2025-11-12 15:31:39,081 - INFO - Creating task with taskId GCcZcwNeSpqiumQSr0f_jg for tests-frontend-node-20
[task 2025-11-12T15:31:39.083+00:00] 2025-11-12 15:31:39,082 - INFO - Creating task with taskId ZLR-0rJWStuWfVVR80-Tug for tests-api-python-312
[task 2025-11-12T15:31:39.085+00:00] 2025-11-12 15:31:39,084 - INFO - Creating task with taskId NkBd4ITRQFC8K6-j40FlyA for docker-image-shipit-public
[task 2025-11-12T15:31:39.087+00:00] 2025-11-12 15:31:39,087 - INFO - Creating task with taskId eF65uIzgTTmkV-F8xc2OEA for docker-image-shipit-admin
[task 2025-11-12T15:31:39.549+00:00] 2025-11-12 15:31:39,548 - INFO - Creating task with taskId R5zYNJioQVui_iO9kMFycg for pr-complete
[taskcluster 2025-11-12 15:31:39.920Z] === Task Finished ===
[taskcluster 2025-11-12 15:31:42.740Z] Successful task run with exit code: 0 completed in 7.028 seconds
View more details on firefoxci-taskcluster