From 043a5f7e81fc8db76e8fb9fd959466571b7a623a Mon Sep 17 00:00:00 2001 From: Kylian Serrania Date: Tue, 7 Apr 2026 17:33:21 +0200 Subject: [PATCH 1/2] [incident-52391] Split dd-sts policies to only request an app key when needed --- .github/CODEOWNERS | 1 + .github/actions/dd-sts-api-key/action.yml | 16 +++++++++ .github/workflows/aiguard.yml | 8 ++--- .github/workflows/apm-capabilities.yml | 6 ++-- .github/workflows/apm-integrations.yml | 32 +++++++++--------- .github/workflows/appsec.yml | 40 +++++++++++------------ .github/workflows/debugger.yml | 2 +- .github/workflows/llmobs.yml | 16 ++++----- .github/workflows/openfeature.yml | 8 ++--- .github/workflows/platform.yml | 20 ++++++------ .github/workflows/profiling.yml | 6 ++-- .github/workflows/serverless.yml | 6 ++-- .github/workflows/system-tests.yml | 4 +-- .github/workflows/test-optimization.yml | 14 ++++---- 14 files changed, 98 insertions(+), 81 deletions(-) create mode 100644 .github/actions/dd-sts-api-key/action.yml diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS index 2502ed5dc17..eba7b682654 100644 --- a/.github/CODEOWNERS +++ b/.github/CODEOWNERS @@ -192,6 +192,7 @@ # CI /.github/actions/dd-sts/action.yml @Datadog/lang-platform-js +/.github/actions/dd-sts-api-key/action.yml @Datadog/lang-platform-js /.github/chainguard @DataDog/sdlc-security /.github/workflows/apm-capabilities.yml @DataDog/apm-sdk-capabilities-js /.github/workflows/apm-integrations.yml @DataDog/apm-idm-js diff --git a/.github/actions/dd-sts-api-key/action.yml b/.github/actions/dd-sts-api-key/action.yml new file mode 100644 index 00000000000..2ad2b9b7691 --- /dev/null +++ b/.github/actions/dd-sts-api-key/action.yml @@ -0,0 +1,16 @@ +name: Get Datadog API key +description: Exchange GitHub OIDC token for Datadog API key via dd-sts. + +outputs: + api_key: + description: "Datadog API key" + value: ${{ steps.dd-sts.outputs.api_key }} + +runs: + using: composite + steps: + - name: Get Datadog API key + id: dd-sts + uses: DataDog/dd-sts-action@2e8187910199bd93129520183c093e19aa585c75 # v1.0.0 + with: + policy: dd-trace-js-api-key diff --git a/.github/workflows/aiguard.yml b/.github/workflows/aiguard.yml index 413497d1f87..872f94eafe1 100644 --- a/.github/workflows/aiguard.yml +++ b/.github/workflows/aiguard.yml @@ -22,7 +22,7 @@ jobs: id-token: write steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node/latest - uses: ./.github/actions/install @@ -43,7 +43,7 @@ jobs: id-token: write steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node/oldest-maintenance-lts - uses: ./.github/actions/install @@ -70,7 +70,7 @@ jobs: id-token: write steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node/latest - uses: ./.github/actions/install @@ -96,7 +96,7 @@ jobs: id-token: write steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node with: diff --git a/.github/workflows/apm-capabilities.yml b/.github/workflows/apm-capabilities.yml index 71ee3f0c6bd..4a42edfbc87 100644 --- a/.github/workflows/apm-capabilities.yml +++ b/.github/workflows/apm-capabilities.yml @@ -28,7 +28,7 @@ jobs: id-token: write steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node/latest - uses: ./.github/actions/install @@ -48,7 +48,7 @@ jobs: id-token: write steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node/oldest-maintenance-lts - uses: ./.github/actions/install @@ -74,7 +74,7 @@ jobs: id-token: write steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node/latest - uses: ./.github/actions/install diff --git a/.github/workflows/apm-integrations.yml b/.github/workflows/apm-integrations.yml index 8308e0365b5..591a78e745f 100644 --- a/.github/workflows/apm-integrations.yml +++ b/.github/workflows/apm-integrations.yml @@ -66,7 +66,7 @@ jobs: PACKAGE_VERSION_RANGE: ${{ matrix.range }} steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/testagent/start - uses: ./.github/actions/node @@ -217,7 +217,7 @@ jobs: PLUGINS: child_process steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node/oldest-maintenance-lts - uses: ./.github/actions/install @@ -289,7 +289,7 @@ jobs: PACKAGE_VERSION_RANGE: ${{ matrix.range }} steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/testagent/start - uses: ./.github/actions/node @@ -358,7 +358,7 @@ jobs: DD_INJECT_FORCE: "true" steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/testagent/start - uses: ./.github/actions/node @@ -394,7 +394,7 @@ jobs: PLUGINS: dns steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/testagent/start - uses: ./.github/actions/node/oldest-maintenance-lts @@ -435,7 +435,7 @@ jobs: SERVICES: elasticsearch steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/testagent/start - uses: ./.github/actions/node/latest @@ -586,7 +586,7 @@ jobs: PLUGINS: http steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/testagent/start - uses: ./.github/actions/node @@ -615,7 +615,7 @@ jobs: PLUGINS: http2 steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/testagent/start - uses: ./.github/actions/node/oldest-maintenance-lts @@ -675,7 +675,7 @@ jobs: SERVICES: kafka steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/testagent/start - uses: ./.github/actions/node @@ -927,7 +927,7 @@ jobs: PLUGINS: net steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/testagent/start - uses: ./.github/actions/node/oldest-maintenance-lts @@ -995,7 +995,7 @@ jobs: PACKAGE_VERSION_RANGE: ${{ matrix.range }} steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/testagent/start - uses: ./.github/actions/node/latest @@ -1070,7 +1070,7 @@ jobs: DD_INJECT_FORCE: "true" steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node with: @@ -1106,7 +1106,7 @@ jobs: PLUGINS: pino steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/testagent/start - uses: ./.github/actions/node/newest-maintenance-lts @@ -1203,7 +1203,7 @@ jobs: PACKAGE_VERSION_RANGE: ${{ matrix.range }} steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/testagent/start - uses: ./.github/actions/node @@ -1367,7 +1367,7 @@ jobs: PLUGINS: sharedb steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/testagent/start - uses: ./.github/actions/node/latest @@ -1404,7 +1404,7 @@ jobs: SERVICES: mssql steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/testagent/start - uses: ./.github/actions/node/latest diff --git a/.github/workflows/appsec.yml b/.github/workflows/appsec.yml index 08ce441e5de..ee220b7d06b 100644 --- a/.github/workflows/appsec.yml +++ b/.github/workflows/appsec.yml @@ -29,7 +29,7 @@ jobs: id-token: write steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node/latest - uses: ./.github/actions/install @@ -50,7 +50,7 @@ jobs: id-token: write steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node/oldest-maintenance-lts - uses: ./.github/actions/install @@ -77,7 +77,7 @@ jobs: id-token: write steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node/latest - uses: ./.github/actions/install @@ -113,7 +113,7 @@ jobs: LDAP_PASSWORDS: "password1,password2" steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node/oldest-maintenance-lts - uses: ./.github/actions/install @@ -147,7 +147,7 @@ jobs: SERVICES: postgres steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node/oldest-maintenance-lts - uses: ./.github/actions/install @@ -181,7 +181,7 @@ jobs: SERVICES: mysql steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node/oldest-maintenance-lts - uses: ./.github/actions/install @@ -206,7 +206,7 @@ jobs: PLUGINS: express|body-parser|cookie-parser|multer steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node/oldest-maintenance-lts - uses: ./.github/actions/install @@ -231,7 +231,7 @@ jobs: PLUGINS: fastify steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node/oldest-maintenance-lts - uses: ./.github/actions/install @@ -256,7 +256,7 @@ jobs: PLUGINS: apollo-server|apollo-server-express|apollo-server-fastify|apollo-server-core steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node/oldest-maintenance-lts - uses: ./.github/actions/install @@ -287,7 +287,7 @@ jobs: SERVICES: mongo steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node/oldest-maintenance-lts - uses: ./.github/actions/install @@ -318,7 +318,7 @@ jobs: SERVICES: mongo steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node/oldest-maintenance-lts - uses: ./.github/actions/install @@ -342,7 +342,7 @@ jobs: PLUGINS: cookie steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node/oldest-maintenance-lts - uses: ./.github/actions/install @@ -406,7 +406,7 @@ jobs: PACKAGE_VERSION_RANGE: ${{ matrix.range }} steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/testagent/start - uses: ./.github/actions/node @@ -436,7 +436,7 @@ jobs: PLUGINS: lodash steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node/oldest-maintenance-lts - uses: ./.github/actions/install @@ -462,7 +462,7 @@ jobs: id-token: write steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node with: @@ -482,7 +482,7 @@ jobs: PLUGINS: passport-local|passport-http steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node/oldest-maintenance-lts - uses: ./.github/actions/install @@ -506,7 +506,7 @@ jobs: PLUGINS: handlebars|pug steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node/oldest-maintenance-lts - uses: ./.github/actions/install @@ -531,7 +531,7 @@ jobs: PLUGINS: node-serialize steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node/oldest-maintenance-lts - uses: ./.github/actions/install @@ -574,7 +574,7 @@ jobs: SERVICES: kafka steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node/oldest-maintenance-lts - uses: ./.github/actions/install @@ -598,7 +598,7 @@ jobs: PLUGINS: stripe steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node/oldest-maintenance-lts - uses: ./.github/actions/install diff --git a/.github/workflows/debugger.yml b/.github/workflows/debugger.yml index a4d4e55ee0a..97b6c3604b7 100644 --- a/.github/workflows/debugger.yml +++ b/.github/workflows/debugger.yml @@ -25,7 +25,7 @@ jobs: id-token: write steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/testagent/start - uses: ./.github/actions/node diff --git a/.github/workflows/llmobs.yml b/.github/workflows/llmobs.yml index ecb1e712811..0fcc41497e1 100644 --- a/.github/workflows/llmobs.yml +++ b/.github/workflows/llmobs.yml @@ -31,7 +31,7 @@ jobs: id-token: write steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/testagent/start - uses: ./.github/actions/node @@ -60,7 +60,7 @@ jobs: PLUGINS: openai steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/testagent/start - uses: ./.github/actions/node/oldest-maintenance-lts @@ -93,7 +93,7 @@ jobs: PLUGINS: langchain steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/testagent/start - uses: ./.github/actions/node/oldest-maintenance-lts @@ -126,7 +126,7 @@ jobs: PLUGINS: aws-sdk steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/testagent/start - uses: ./.github/actions/node/oldest-maintenance-lts @@ -157,7 +157,7 @@ jobs: PLUGINS: google-cloud-vertexai steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/testagent/start - uses: ./.github/actions/node/oldest-maintenance-lts @@ -190,7 +190,7 @@ jobs: PLUGINS: ai steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/testagent/start - uses: ./.github/actions/node/oldest-maintenance-lts @@ -223,7 +223,7 @@ jobs: PLUGINS: anthropic steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/testagent/start - uses: ./.github/actions/node/oldest-maintenance-lts @@ -256,7 +256,7 @@ jobs: PLUGINS: google-genai steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/testagent/start - uses: ./.github/actions/node/oldest-maintenance-lts diff --git a/.github/workflows/openfeature.yml b/.github/workflows/openfeature.yml index bd872488cc7..4c58fec2a90 100644 --- a/.github/workflows/openfeature.yml +++ b/.github/workflows/openfeature.yml @@ -25,7 +25,7 @@ jobs: id-token: write steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/testagent/start - uses: ./.github/actions/node @@ -53,7 +53,7 @@ jobs: id-token: write steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node/latest - uses: ./.github/actions/install @@ -70,7 +70,7 @@ jobs: id-token: write steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node/oldest-maintenance-lts - uses: ./.github/actions/install @@ -93,7 +93,7 @@ jobs: id-token: write steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node/latest - uses: ./.github/actions/install diff --git a/.github/workflows/platform.yml b/.github/workflows/platform.yml index 4d56c593897..ca0086afb8d 100644 --- a/.github/workflows/platform.yml +++ b/.github/workflows/platform.yml @@ -69,7 +69,7 @@ jobs: id-token: write steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node/active-lts - uses: ./.github/actions/install @@ -86,7 +86,7 @@ jobs: id-token: write steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node/oldest-maintenance-lts - uses: ./.github/actions/install @@ -118,7 +118,7 @@ jobs: id-token: write steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node/oldest-maintenance-lts - uses: ./.github/actions/install @@ -136,7 +136,7 @@ jobs: id-token: write steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node/oldest-maintenance-lts - uses: ./.github/actions/install @@ -254,7 +254,7 @@ jobs: PLUGINS: http steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node/oldest-maintenance-lts - uses: ./.github/actions/install @@ -442,7 +442,7 @@ jobs: id-token: write steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/testagent/start - uses: ./.github/actions/node/oldest-maintenance-lts @@ -485,7 +485,7 @@ jobs: id-token: write steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/testagent/start - uses: ./.github/actions/node @@ -508,7 +508,7 @@ jobs: id-token: write steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node/latest - uses: ./.github/actions/install @@ -533,7 +533,7 @@ jobs: id-token: write steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node/active-lts - uses: ./.github/actions/install @@ -573,7 +573,7 @@ jobs: id-token: write steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node/oldest-maintenance-lts - uses: ./.github/actions/install diff --git a/.github/workflows/profiling.yml b/.github/workflows/profiling.yml index b0587b15373..3e4dcdac442 100644 --- a/.github/workflows/profiling.yml +++ b/.github/workflows/profiling.yml @@ -29,7 +29,7 @@ jobs: id-token: write steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node/latest - uses: ./.github/actions/install @@ -51,7 +51,7 @@ jobs: id-token: write steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node/oldest-maintenance-lts - uses: ./.github/actions/install @@ -82,7 +82,7 @@ jobs: id-token: write steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node/latest - uses: ./.github/actions/install diff --git a/.github/workflows/serverless.yml b/.github/workflows/serverless.yml index 69cd05a5d31..1188d7e6423 100644 --- a/.github/workflows/serverless.yml +++ b/.github/workflows/serverless.yml @@ -28,7 +28,7 @@ jobs: id-token: write steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/testagent/start - uses: ./.github/actions/node/oldest-maintenance-lts @@ -113,7 +113,7 @@ jobs: DD_DATA_STREAMS_ENABLED: true steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/testagent/start - uses: ./.github/actions/node @@ -210,7 +210,7 @@ jobs: SPEC: ${{ matrix.spec }} steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - name: Copy emulator config files diff --git a/.github/workflows/system-tests.yml b/.github/workflows/system-tests.yml index 139181c3dc3..8a59709b14e 100644 --- a/.github/workflows/system-tests.yml +++ b/.github/workflows/system-tests.yml @@ -40,8 +40,8 @@ jobs: steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: - sparse-checkout: .github/actions/dd-sts - - uses: ./.github/actions/dd-sts + sparse-checkout: .github/actions/dd-sts-api-key + - uses: ./.github/actions/dd-sts-api-key id: dd-sts main: diff --git a/.github/workflows/test-optimization.yml b/.github/workflows/test-optimization.yml index 8d4e4d1bc5a..575c9f1eddd 100644 --- a/.github/workflows/test-optimization.yml +++ b/.github/workflows/test-optimization.yml @@ -78,7 +78,7 @@ jobs: PLAYWRIGHT_VERSION: ${{ matrix.playwright-version }} steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node with: @@ -121,7 +121,7 @@ jobs: DD_CIVISIBILITY_AGENTLESS_ENABLED: 1 steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node with: @@ -146,7 +146,7 @@ jobs: DD_CIVISIBILITY_AGENTLESS_ENABLED: 1 steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node with: @@ -171,7 +171,7 @@ jobs: DD_CIVISIBILITY_AGENTLESS_ENABLED: 1 steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node with: @@ -196,7 +196,7 @@ jobs: OPTIONS_OVERRIDE: 1 steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node with: @@ -242,7 +242,7 @@ jobs: DD_CIVISIBILITY_AGENTLESS_ENABLED: 1 steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node with: @@ -278,7 +278,7 @@ jobs: OPTIONS_OVERRIDE: 1 steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: ./.github/actions/dd-sts + - uses: ./.github/actions/dd-sts-api-key id: dd-sts - uses: ./.github/actions/node with: From f4a85123fc21d12500870708cdce666a1a279c9b Mon Sep 17 00:00:00 2001 From: Kylian Serrania Date: Wed, 8 Apr 2026 09:48:12 +0200 Subject: [PATCH 2/2] Trigger CI