feat(security): encrypt account OAuth tokens at rest #29602
ci.yml
on: pull_request
Detect Version
Migrate Dev DB
/
Apply Database Migrations
Detect Desktop Changes
Matrix: Build AMD64
Matrix: Build ARM64 (GHCR Only)
Test and Build
/
Lint and Test
1m 5s
Test and Build
/
Build App
2m 23s
Check Docs Changes
0s
Matrix: Build Dev ECR
Deploy Trigger.dev (Dev)
0s
Matrix: Create GHCR Manifests
Process Docs
/
Process Documentation Embeddings
Prune Desktop Prereleases
0s
Desktop Release
/
Build, Sign, Notarize
Annotations
3 errors and 6 warnings
|
Test and Build / Lint and Test
Process completed with exit code 1.
|
|
scripts/check-account-token-access.test.ts > auditSource > exempts the token-aware modules:
scripts/check-account-token-access.test.ts#L92
AssertionError: expected [ { …(4) }, { …(4) } ] to deeply equal []
- Expected
+ Received
- []
+ [
+ {
+ "file": "apps/sim/lib/oauth/account-tokens.ts",
+ "kind": "star-select",
+ "line": 1,
+ "text": "await db.select().from(account)",
+ },
+ {
+ "file": "apps/sim/lib/oauth/account-tokens.ts",
+ "kind": "token-column",
+ "line": 2,
+ "text": "const t = account.accessToken",
+ },
+ ]
❯ scripts/check-account-token-access.test.ts:92:73
|
|
Test and Build / Lint and Test
Process completed with exit code 1.
|
|
Test and Build / Lint and Test
Skipping sticky disk commit due to previous step failures
|
|
Test and Build / Lint and Test
Found 2 failed/cancelled steps in previous workflow steps
|
|
Test and Build / Lint and Test
Skipping sticky disk commit due to previous step failures
|
|
Test and Build / Lint and Test
Found 2 failed/cancelled steps in previous workflow steps
|
|
Test and Build / Lint and Test
Skipping sticky disk commit due to previous step failures
|
|
Test and Build / Lint and Test
Found 2 failed/cancelled steps in previous workflow steps
|