Fix no vulnerabilities assertion#10850
Merged
gh-worker-dd-mergequeue-cf854d[bot] merged 1 commit intomasterfrom Mar 18, 2026
Merged
Fix no vulnerabilities assertion#10850gh-worker-dd-mergequeue-cf854d[bot] merged 1 commit intomasterfrom
gh-worker-dd-mergequeue-cf854d[bot] merged 1 commit intomasterfrom
Conversation
BenchmarksStartupParameters
See matching parameters
SummaryFound 0 performance improvements and 0 performance regressions! Performance is the same for 65 metrics, 6 unstable metrics. Startup time reports for insecure-bankgantt
title insecure-bank - global startup overhead: candidate=1.61.0-SNAPSHOT~734de8c8c4, baseline=1.61.0-SNAPSHOT~9f2354e364
dateFormat X
axisFormat %s
section tracing
Agent [baseline] (1.054 s) : 0, 1054372
Total [baseline] (8.832 s) : 0, 8832014
Agent [candidate] (1.055 s) : 0, 1054912
Total [candidate] (8.848 s) : 0, 8848214
section iast
Agent [baseline] (1.233 s) : 0, 1233442
Total [baseline] (9.54 s) : 0, 9539569
Agent [candidate] (1.226 s) : 0, 1226422
Total [candidate] (9.538 s) : 0, 9537971
gantt
title insecure-bank - break down per module: candidate=1.61.0-SNAPSHOT~734de8c8c4, baseline=1.61.0-SNAPSHOT~9f2354e364
dateFormat X
axisFormat %s
section tracing
crashtracking [baseline] (1.198 ms) : 0, 1198
crashtracking [candidate] (1.195 ms) : 0, 1195
BytebuddyAgent [baseline] (627.923 ms) : 0, 627923
BytebuddyAgent [candidate] (627.46 ms) : 0, 627460
AgentMeter [baseline] (29.101 ms) : 0, 29101
AgentMeter [candidate] (29.071 ms) : 0, 29071
GlobalTracer [baseline] (256.495 ms) : 0, 256495
GlobalTracer [candidate] (256.684 ms) : 0, 256684
AppSec [baseline] (31.541 ms) : 0, 31541
AppSec [candidate] (31.487 ms) : 0, 31487
Debugger [baseline] (59.384 ms) : 0, 59384
Debugger [candidate] (59.463 ms) : 0, 59463
Remote Config [baseline] (587.334 µs) : 0, 587
Remote Config [candidate] (579.799 µs) : 0, 580
Telemetry [baseline] (7.965 ms) : 0, 7965
Telemetry [candidate] (7.977 ms) : 0, 7977
Flare Poller [baseline] (4.203 ms) : 0, 4203
Flare Poller [candidate] (5.011 ms) : 0, 5011
section iast
crashtracking [baseline] (1.206 ms) : 0, 1206
crashtracking [candidate] (1.189 ms) : 0, 1189
BytebuddyAgent [baseline] (801.67 ms) : 0, 801670
BytebuddyAgent [candidate] (796.095 ms) : 0, 796095
AgentMeter [baseline] (11.576 ms) : 0, 11576
AgentMeter [candidate] (11.301 ms) : 0, 11301
GlobalTracer [baseline] (248.66 ms) : 0, 248660
GlobalTracer [candidate] (247.106 ms) : 0, 247106
AppSec [baseline] (26.671 ms) : 0, 26671
AppSec [candidate] (26.437 ms) : 0, 26437
Debugger [baseline] (67.879 ms) : 0, 67879
Debugger [candidate] (68.549 ms) : 0, 68549
Remote Config [baseline] (523.972 µs) : 0, 524
Remote Config [candidate] (532.997 µs) : 0, 533
Telemetry [baseline] (10.071 ms) : 0, 10071
Telemetry [candidate] (10.169 ms) : 0, 10169
Flare Poller [baseline] (3.586 ms) : 0, 3586
Flare Poller [candidate] (3.653 ms) : 0, 3653
IAST [baseline] (25.49 ms) : 0, 25490
IAST [candidate] (25.314 ms) : 0, 25314
Startup time reports for petclinicgantt
title petclinic - global startup overhead: candidate=1.61.0-SNAPSHOT~734de8c8c4, baseline=1.61.0-SNAPSHOT~9f2354e364
dateFormat X
axisFormat %s
section tracing
Agent [baseline] (1.068 s) : 0, 1067667
Total [baseline] (11.129 s) : 0, 11129184
Agent [candidate] (1.058 s) : 0, 1057508
Total [candidate] (11.17 s) : 0, 11170041
section appsec
Agent [baseline] (1.249 s) : 0, 1249204
Total [baseline] (11.161 s) : 0, 11161476
Agent [candidate] (1.253 s) : 0, 1252586
Total [candidate] (11.209 s) : 0, 11208715
section iast
Agent [baseline] (1.235 s) : 0, 1234629
Total [baseline] (11.347 s) : 0, 11347050
Agent [candidate] (1.228 s) : 0, 1228418
Total [candidate] (11.336 s) : 0, 11335697
section profiling
Agent [baseline] (1.189 s) : 0, 1189091
Total [baseline] (10.99 s) : 0, 10990051
Agent [candidate] (1.179 s) : 0, 1179294
Total [candidate] (10.905 s) : 0, 10904880
gantt
title petclinic - break down per module: candidate=1.61.0-SNAPSHOT~734de8c8c4, baseline=1.61.0-SNAPSHOT~9f2354e364
dateFormat X
axisFormat %s
section tracing
crashtracking [baseline] (1.211 ms) : 0, 1211
crashtracking [candidate] (1.184 ms) : 0, 1184
BytebuddyAgent [baseline] (635.797 ms) : 0, 635797
BytebuddyAgent [candidate] (628.256 ms) : 0, 628256
AgentMeter [baseline] (29.558 ms) : 0, 29558
AgentMeter [candidate] (29.269 ms) : 0, 29269
GlobalTracer [baseline] (258.87 ms) : 0, 258870
GlobalTracer [candidate] (258.333 ms) : 0, 258333
AppSec [baseline] (32.097 ms) : 0, 32097
AppSec [candidate] (31.905 ms) : 0, 31905
Debugger [baseline] (60.79 ms) : 0, 60790
Debugger [candidate] (60.53 ms) : 0, 60530
Remote Config [baseline] (589.775 µs) : 0, 590
Remote Config [candidate] (588.981 µs) : 0, 589
Telemetry [baseline] (8.097 ms) : 0, 8097
Telemetry [candidate] (8.015 ms) : 0, 8015
Flare Poller [baseline] (4.409 ms) : 0, 4409
Flare Poller [candidate] (3.508 ms) : 0, 3508
section appsec
crashtracking [baseline] (1.186 ms) : 0, 1186
crashtracking [candidate] (1.2 ms) : 0, 1200
BytebuddyAgent [baseline] (658.777 ms) : 0, 658777
BytebuddyAgent [candidate] (662.724 ms) : 0, 662724
AgentMeter [baseline] (12.003 ms) : 0, 12003
AgentMeter [candidate] (12.064 ms) : 0, 12064
GlobalTracer [baseline] (259.154 ms) : 0, 259154
GlobalTracer [candidate] (258.944 ms) : 0, 258944
AppSec [baseline] (178.37 ms) : 0, 178370
AppSec [candidate] (177.957 ms) : 0, 177957
Debugger [baseline] (66.5 ms) : 0, 66500
Debugger [candidate] (66.448 ms) : 0, 66448
Remote Config [baseline] (633.782 µs) : 0, 634
Remote Config [candidate] (622.327 µs) : 0, 622
Telemetry [baseline] (8.381 ms) : 0, 8381
Telemetry [candidate] (8.357 ms) : 0, 8357
Flare Poller [baseline] (3.586 ms) : 0, 3586
Flare Poller [candidate] (3.585 ms) : 0, 3585
IAST [baseline] (24.365 ms) : 0, 24365
IAST [candidate] (24.322 ms) : 0, 24322
section iast
crashtracking [baseline] (1.2 ms) : 0, 1200
crashtracking [candidate] (1.182 ms) : 0, 1182
BytebuddyAgent [baseline] (802.951 ms) : 0, 802951
BytebuddyAgent [candidate] (796.803 ms) : 0, 796803
AgentMeter [baseline] (11.582 ms) : 0, 11582
AgentMeter [candidate] (11.311 ms) : 0, 11311
GlobalTracer [baseline] (247.422 ms) : 0, 247422
GlobalTracer [candidate] (247.28 ms) : 0, 247280
AppSec [baseline] (26.487 ms) : 0, 26487
AppSec [candidate] (26.517 ms) : 0, 26517
Debugger [baseline] (70.567 ms) : 0, 70567
Debugger [candidate] (70.95 ms) : 0, 70950
Remote Config [baseline] (527.02 µs) : 0, 527
Remote Config [candidate] (532.771 µs) : 0, 533
Telemetry [baseline] (9.179 ms) : 0, 9179
Telemetry [candidate] (9.206 ms) : 0, 9206
Flare Poller [baseline] (3.315 ms) : 0, 3315
Flare Poller [candidate] (3.308 ms) : 0, 3308
IAST [baseline] (25.3 ms) : 0, 25300
IAST [candidate] (25.312 ms) : 0, 25312
section profiling
crashtracking [baseline] (1.166 ms) : 0, 1166
crashtracking [candidate] (1.167 ms) : 0, 1167
BytebuddyAgent [baseline] (687.669 ms) : 0, 687669
BytebuddyAgent [candidate] (681.097 ms) : 0, 681097
AgentMeter [baseline] (8.681 ms) : 0, 8681
AgentMeter [candidate] (8.6 ms) : 0, 8600
GlobalTracer [baseline] (216.725 ms) : 0, 216725
GlobalTracer [candidate] (214.945 ms) : 0, 214945
AppSec [baseline] (32.463 ms) : 0, 32463
AppSec [candidate] (31.974 ms) : 0, 31974
Debugger [baseline] (66.006 ms) : 0, 66006
Debugger [candidate] (64.155 ms) : 0, 64155
Remote Config [baseline] (559.122 µs) : 0, 559
Remote Config [candidate] (557.21 µs) : 0, 557
Telemetry [baseline] (7.703 ms) : 0, 7703
Telemetry [candidate] (8.484 ms) : 0, 8484
Flare Poller [baseline] (3.479 ms) : 0, 3479
Flare Poller [candidate] (4.297 ms) : 0, 4297
ProfilingAgent [baseline] (93.492 ms) : 0, 93492
ProfilingAgent [candidate] (93.443 ms) : 0, 93443
Profiling [baseline] (94.045 ms) : 0, 94045
Profiling [candidate] (94.0 ms) : 0, 94000
LoadParameters
See matching parameters
SummaryFound 2 performance improvements and 2 performance regressions! Performance is the same for 16 metrics, 16 unstable metrics.
Request duration reports for insecure-bankgantt
title insecure-bank - request duration [CI 0.99] : candidate=1.61.0-SNAPSHOT~734de8c8c4, baseline=1.61.0-SNAPSHOT~9f2354e364
dateFormat X
axisFormat %s
section baseline
no_agent (1.192 ms) : 1181, 1204
. : milestone, 1192,
iast (3.167 ms) : 3125, 3208
. : milestone, 3167,
iast_FULL (6.102 ms) : 6039, 6165
. : milestone, 6102,
iast_GLOBAL (3.546 ms) : 3489, 3603
. : milestone, 3546,
profiling (2.011 ms) : 1992, 2030
. : milestone, 2011,
tracing (1.84 ms) : 1823, 1857
. : milestone, 1840,
section candidate
no_agent (1.18 ms) : 1169, 1191
. : milestone, 1180,
iast (3.174 ms) : 3132, 3217
. : milestone, 3174,
iast_FULL (5.903 ms) : 5845, 5961
. : milestone, 5903,
iast_GLOBAL (3.747 ms) : 3683, 3811
. : milestone, 3747,
profiling (2.16 ms) : 2141, 2180
. : milestone, 2160,
tracing (1.769 ms) : 1753, 1784
. : milestone, 1769,
Request duration reports for petclinicgantt
title petclinic - request duration [CI 0.99] : candidate=1.61.0-SNAPSHOT~734de8c8c4, baseline=1.61.0-SNAPSHOT~9f2354e364
dateFormat X
axisFormat %s
section baseline
no_agent (18.232 ms) : 18041, 18423
. : milestone, 18232,
appsec (18.549 ms) : 18359, 18739
. : milestone, 18549,
code_origins (18.707 ms) : 18517, 18898
. : milestone, 18707,
iast (18.132 ms) : 17949, 18314
. : milestone, 18132,
profiling (18.696 ms) : 18511, 18881
. : milestone, 18696,
tracing (17.705 ms) : 17529, 17881
. : milestone, 17705,
section candidate
no_agent (17.768 ms) : 17588, 17947
. : milestone, 17768,
appsec (18.453 ms) : 18267, 18640
. : milestone, 18453,
code_origins (17.753 ms) : 17574, 17931
. : milestone, 17753,
iast (17.869 ms) : 17694, 18044
. : milestone, 17869,
profiling (19.857 ms) : 19658, 20057
. : milestone, 19857,
tracing (17.86 ms) : 17683, 18036
. : milestone, 17860,
DacapoParameters
See matching parameters
SummaryFound 0 performance improvements and 0 performance regressions! Performance is the same for 11 metrics, 1 unstable metrics. Execution time for tomcatgantt
title tomcat - execution time [CI 0.99] : candidate=1.61.0-SNAPSHOT~734de8c8c4, baseline=1.61.0-SNAPSHOT~9f2354e364
dateFormat X
axisFormat %s
section baseline
no_agent (1.474 ms) : 1462, 1485
. : milestone, 1474,
appsec (2.558 ms) : 2500, 2616
. : milestone, 2558,
iast (2.248 ms) : 2179, 2317
. : milestone, 2248,
iast_GLOBAL (2.291 ms) : 2222, 2361
. : milestone, 2291,
profiling (2.085 ms) : 2030, 2140
. : milestone, 2085,
tracing (2.054 ms) : 2001, 2108
. : milestone, 2054,
section candidate
no_agent (1.467 ms) : 1456, 1478
. : milestone, 1467,
appsec (3.724 ms) : 3508, 3941
. : milestone, 3724,
iast (2.24 ms) : 2172, 2309
. : milestone, 2240,
iast_GLOBAL (2.284 ms) : 2215, 2353
. : milestone, 2284,
profiling (2.093 ms) : 2037, 2149
. : milestone, 2093,
tracing (2.051 ms) : 1998, 2104
. : milestone, 2051,
Execution time for biojavagantt
title biojava - execution time [CI 0.99] : candidate=1.61.0-SNAPSHOT~734de8c8c4, baseline=1.61.0-SNAPSHOT~9f2354e364
dateFormat X
axisFormat %s
section baseline
no_agent (15.381 s) : 15381000, 15381000
. : milestone, 15381000,
appsec (14.844 s) : 14844000, 14844000
. : milestone, 14844000,
iast (18.421 s) : 18421000, 18421000
. : milestone, 18421000,
iast_GLOBAL (18.618 s) : 18618000, 18618000
. : milestone, 18618000,
profiling (15.09 s) : 15090000, 15090000
. : milestone, 15090000,
tracing (14.754 s) : 14754000, 14754000
. : milestone, 14754000,
section candidate
no_agent (15.56 s) : 15560000, 15560000
. : milestone, 15560000,
appsec (14.849 s) : 14849000, 14849000
. : milestone, 14849000,
iast (18.244 s) : 18244000, 18244000
. : milestone, 18244000,
iast_GLOBAL (17.697 s) : 17697000, 17697000
. : milestone, 17697000,
profiling (14.889 s) : 14889000, 14889000
. : milestone, 14889000,
tracing (15.085 s) : 15085000, 15085000
. : milestone, 15085000,
|
3ed8261 to
f8fbe2e
Compare
f8fbe2e to
551135f
Compare
jandro996
approved these changes
Mar 17, 2026
Base automatically changed from
alejandro.gonzalez/fix-iast-freemarker
to
master
March 18, 2026 12:21
551135f to
924d51c
Compare
924d51c to
734de8c
Compare
Contributor
|
/merge |
|
View all feedbacks in Devflow UI.
The expected merge time in
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What Does This Do
Fixes the
noVulnerabilityassertion helper inAbstractIastServerSmokeTestso that it correctly collects vulnerabilities before asserting none match.Motivation
Additional Notes
Contributor Checklist
type:and (comp:orinst:) labels in addition to any other useful labelsclose,fix, or any linking keywords when referencing an issueUse
solvesinstead, and assign the PR milestone to the issueJira ticket: [PROJ-IDENT]
Note: Once your PR is ready to merge, add it to the merge queue by commenting
/merge./merge -ccancels the queue request./merge -f --reason "reason"skips all merge queue checks; please use this judiciously, as some checks do not run at the PR-level. For more information, see this doc.