Skip to content

TASK-8038 - Recover opencga-storage-mongodb#2635

Draft
j-coll wants to merge 105 commits intodevelopfrom
TASK-8038
Draft

TASK-8038 - Recover opencga-storage-mongodb#2635
j-coll wants to merge 105 commits intodevelopfrom
TASK-8038

Conversation

@j-coll
Copy link
Copy Markdown
Member

@j-coll j-coll commented Nov 27, 2025

No description provided.

@halender
Copy link
Copy Markdown
Contributor

Task linked: TASK-8038 Recover opencga-storage-mongodb

@j-coll j-coll marked this pull request as draft November 27, 2025 13:56
@j-coll j-coll changed the title TASK-8038 TASK-8038 - Recover opencga-storage-mongodb Dec 2, 2025
run: |
STORAGE_FLAG=""
# Set flag only if variant_storage is NOT 'mongodb'
if [ "${{ inputs.variant_storage }}" != "mongodb" ]; then

Check failure

Code scanning / SonarCloud

GitHub Actions should not be vulnerable to script injections High test

Change this workflow to not use user-controlled data directly in a run block. See more on SonarQube Cloud
STORAGE_FLAG=""
# Set flag only if variant_storage is NOT 'mongodb'
if [ "${{ inputs.variant_storage }}" != "mongodb" ]; then
STORAGE_FLAG="-Dhadoop=${{ inputs.variant_storage }}"

Check failure

Code scanning / SonarCloud

GitHub Actions should not be vulnerable to script injections High test

Change this workflow to not use user-controlled data directly in a run block. See more on SonarQube Cloud
# Execute Maven command
mvn -T 2 clean install \
$STORAGE_FLAG \
-P"${{ inputs.test_profile }}" \

Check failure

Code scanning / SonarCloud

GitHub Actions should not be vulnerable to script injections High test

Change this workflow to not use user-controlled data directly in a run block. See more on SonarQube Cloud
MODULE=$(basename $MODULE )
TAGS=$(echo ${{ inputs.test_profile }} | sed -e 's/run\([^,]*\)Tests/\1/g' | tr ',' '_' | tr '[:upper:]' '[:lower:]' )
echo "TESTS_LOG_FILE_NAME=junit_${{ inputs.hadoop }}_${TAGS}_${MODULE}.log.gz" >> $GITHUB_OUTPUT
echo "TESTS_LOG_FILE_NAME=junit_${{ inputs.variant_storage }}_${TAGS}_${MODULE}.log.gz" >> $GITHUB_OUTPUT

Check failure

Code scanning / SonarCloud

GitHub Actions should not be vulnerable to script injections High test

Change this workflow to not use user-controlled data directly in a run block. See more on SonarQube Cloud
run: |
STORAGE_FLAG=""
# Set flag only if variant_storage is NOT 'mongodb'
if [ "${{ inputs.variant_storage }}" != "mongodb" ]; then

Check failure

Code scanning / SonarCloud

GitHub Actions should not be vulnerable to script injections High test

Change this workflow to not use user-controlled data directly in a run block. See more on SonarQube Cloud
STORAGE_FLAG=""
# Set flag only if variant_storage is NOT 'mongodb'
if [ "${{ inputs.variant_storage }}" != "mongodb" ]; then
STORAGE_FLAG="-Dhadoop=${{ inputs.variant_storage }}"

Check failure

Code scanning / SonarCloud

GitHub Actions should not be vulnerable to script injections High test

Change this workflow to not use user-controlled data directly in a run block. See more on SonarQube Cloud
-Dsurefire.testFailureIgnore=true \
-f ${{ (inputs.module == '' || inputs.module == 'all') && '.' || inputs.module }} \
$STORAGE_FLAG \
-P"${{ inputs.test_profile }}" \

Check failure

Code scanning / SonarCloud

GitHub Actions should not be vulnerable to script injections High test

Change this workflow to not use user-controlled data directly in a run block. See more on SonarQube Cloud
$STORAGE_FLAG \
-P"${{ inputs.test_profile }}" \
-Dcheckstyle.skip \
${{ inputs.mvn_opts }} |& tee >(gzip > ${{ steps.BuildJunitLogFileName.outputs.TESTS_LOG_FILE_NAME }} ) |& grep -a -P '^\[[^\]]*(INFO|WARNING|ERROR)' --colour=never --line-buffered

Check failure

Code scanning / SonarCloud

GitHub Actions should not be vulnerable to script injections High test

Change this workflow to not use user-controlled data directly in a run block. See more on SonarQube Cloud
j-coll added 30 commits March 6, 2026 13:52
…nager instead of StudyConfiguration. #TASK-8038
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

3 participants