Skip to content

fix(security): validate UPSTREAM_DNS before shell interpolation (#1141) #1

fix(security): validate UPSTREAM_DNS before shell interpolation (#1141)

fix(security): validate UPSTREAM_DNS before shell interpolation (#1141) #1

Triggered via push April 6, 2026 17:50
Status Success
Total duration 10m 22s
Artifacts 2

main.yaml

on: push
sandbox-images-and-e2e  /  build-sandbox-images
6m 40s
sandbox-images-and-e2e / build-sandbox-images
sandbox-images-and-e2e  /  build-sandbox-images-arm64
0s
sandbox-images-and-e2e / build-sandbox-images-arm64
sandbox-images-and-e2e  /  test-e2e-sandbox
1m 38s
sandbox-images-and-e2e / test-e2e-sandbox
sandbox-images-and-e2e  /  test-e2e-gateway-isolation
1m 24s
sandbox-images-and-e2e / test-e2e-gateway-isolation
Fit to window
Zoom out
Zoom in

Annotations

3 warnings
sandbox-images-and-e2e / build-sandbox-images
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/upload-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
sandbox-images-and-e2e / test-e2e-gateway-isolation
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/download-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
sandbox-images-and-e2e / test-e2e-sandbox
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/download-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
isolation-image Expired
1.1 GB
sha256:898bbcdd5d890b70477cad2b9ef312076654e9a7786b4a29c2915fa6e5560c2a
sandbox-test-image Expired
1.1 GB
sha256:b16ddee69cec66535a0980c6fa3846bc15902a6de78250d11ce7cb5d43d0a6cd