Skip to content

feat(security): encrypt account OAuth tokens at rest #29602

feat(security): encrypt account OAuth tokens at rest

feat(security): encrypt account OAuth tokens at rest #29602

Triggered via pull request September 1, 2026 00:58
Status Failure
Total duration 2m 38s
Artifacts

ci.yml

on: pull_request
Detect Version
Detect Version
Migrate Dev DB  /  Apply Database Migrations
Migrate Dev DB / Apply Database Migrations
Detect Desktop Changes
Detect Desktop Changes
Matrix: Build AMD64
Matrix: Build ARM64 (GHCR Only)
Test and Build  /  Lint and Test
1m 5s
Test and Build / Lint and Test
Test and Build  /  Build App
2m 23s
Test and Build / Build App
Check Docs Changes
0s
Check Docs Changes
Matrix: Build Dev ECR
Deploy Trigger.dev (Dev)
0s
Deploy Trigger.dev (Dev)
Check Desktop Signing Secrets
0s
Check Desktop Signing Secrets
Migrate DB  /  Apply Database Migrations
Migrate DB / Apply Database Migrations
Create Desktop Prerelease
0s
Create Desktop Prerelease
Promote Images
0s
Promote Images
Desktop Prerelease Build  /  Build, Sign, Notarize
Desktop Prerelease Build / Build, Sign, Notarize
Matrix: Create GHCR Manifests
Process Docs  /  Process Documentation Embeddings
Process Docs / Process Documentation Embeddings
Publish Desktop Prerelease
0s
Publish Desktop Prerelease
Create GitHub Release
0s
Create GitHub Release
Prune Desktop Prereleases
0s
Prune Desktop Prereleases
Desktop Release  /  Build, Sign, Notarize
Desktop Release / Build, Sign, Notarize
Fit to window
Zoom out
Zoom in

Annotations

3 errors and 6 warnings
Test and Build / Lint and Test
Process completed with exit code 1.
scripts/check-account-token-access.test.ts > auditSource > exempts the token-aware modules: scripts/check-account-token-access.test.ts#L92
AssertionError: expected [ { …(4) }, { …(4) } ] to deeply equal [] - Expected + Received - [] + [ + { + "file": "apps/sim/lib/oauth/account-tokens.ts", + "kind": "star-select", + "line": 1, + "text": "await db.select().from(account)", + }, + { + "file": "apps/sim/lib/oauth/account-tokens.ts", + "kind": "token-column", + "line": 2, + "text": "const t = account.accessToken", + }, + ] ❯ scripts/check-account-token-access.test.ts:92:73
Test and Build / Lint and Test
Process completed with exit code 1.
Test and Build / Lint and Test
Skipping sticky disk commit due to previous step failures
Test and Build / Lint and Test
Found 2 failed/cancelled steps in previous workflow steps
Test and Build / Lint and Test
Skipping sticky disk commit due to previous step failures
Test and Build / Lint and Test
Found 2 failed/cancelled steps in previous workflow steps
Test and Build / Lint and Test
Skipping sticky disk commit due to previous step failures
Test and Build / Lint and Test
Found 2 failed/cancelled steps in previous workflow steps