Add dd-octo-sts trust policy #9198

sarahchen6 · 2025-07-18T14:13:08Z

What Does This Do

This PR adds the trust policy for dd-octo-sts usage.

Motivation

We want to use dd-octo-sts for github PATs instead of our current fine-grained tokens. Since trust policies must be read from the master branch to be valid, the policy needs to be merged in before we can test the token workflow.

Additional Notes

The github release token is needed when we tag a release, so the policy is tailored for git tags. The policy is tested to work with this dd-octo-sts-sandbox example run.

Contributor Checklist

Format the title according the contribution guidelines
Assign the type: and (comp: or inst:) labels in addition to any usefull labels
Don't use close, fix or any linking keywords when referencing an issue.
Use solves instead, and assign the PR milestone to the issue
Update the CODEOWNERS file on source file addition, move, or deletion
Update the public documentation in case of new configuration flag or behavior

Jira ticket: https://datadoghq.atlassian.net/browse/LANGPLAT-696

github-actions · 2025-07-18T14:13:17Z

Hi! 👋 Thanks for your pull request! 🎉

To help us review it, please make sure to:

Add at least one type, and one component or instrumentation label to the pull request

If you need help, please check our contributing guidelines.

pr-commenter · 2025-07-18T14:48:29Z

Benchmarks

Startup

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	sarahchen6/add-dd-octo-sts-trust-policy
git_commit_date	1752771474	1752847866
git_commit_sha	`887ea39`	`5bc52e6`
release_version	1.52.0-SNAPSHOT~887ea397cc	1.52.0-SNAPSHOT~5bc52e6be4

See matching parameters

	Baseline	Candidate
application	insecure-bank	insecure-bank
ci_job_date	1752849733	1752849733
ci_job_id	1036322546	1036322546
ci_pipeline_id	71001686	71001686
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version	Linux runner-zfyrx7zua-project-304-concurrent-0-s7vmgml1 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux	Linux runner-zfyrx7zua-project-304-concurrent-0-s7vmgml1 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
module	Agent	Agent
parent	None	None

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 48 metrics, 11 unstable metrics.

Startup time reports for insecure-bank

gantt
    title insecure-bank - global startup overhead: candidate=1.52.0-SNAPSHOT~5bc52e6be4, baseline=1.52.0-SNAPSHOT~887ea397cc

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.041 s) : 0, 1040877
Total [baseline] (8.625 s) : 0, 8624873
Agent [candidate] (1.045 s) : 0, 1044906
Total [candidate] (8.603 s) : 0, 8603406
section iast
Agent [baseline] (1.171 s) : 0, 1170664
Total [baseline] (9.305 s) : 0, 9305332
Agent [candidate] (1.174 s) : 0, 1174211
Total [candidate] (9.262 s) : 0, 9262220

baseline results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.041 s	-
Agent	iast	1.171 s	129.788 ms (12.5%)
Total	tracing	8.625 s	-
Total	iast	9.305 s	680.46 ms (7.9%)

candidate results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.045 s	-
Agent	iast	1.174 s	129.305 ms (12.4%)
Total	tracing	8.603 s	-
Total	iast	9.262 s	658.814 ms (7.7%)

gantt
    title insecure-bank - break down per module: candidate=1.52.0-SNAPSHOT~5bc52e6be4, baseline=1.52.0-SNAPSHOT~887ea397cc

    dateFormat X
    axisFormat %s
section tracing
crashtracking [baseline] (1.435 ms) : 0, 1435
crashtracking [candidate] (1.434 ms) : 0, 1434
BytebuddyAgent [baseline] (730.801 ms) : 0, 730801
BytebuddyAgent [candidate] (734.364 ms) : 0, 734364
GlobalTracer [baseline] (241.624 ms) : 0, 241624
GlobalTracer [candidate] (242.434 ms) : 0, 242434
AppSec [baseline] (30.503 ms) : 0, 30503
AppSec [candidate] (30.672 ms) : 0, 30672
Debugger [baseline] (6.007 ms) : 0, 6007
Debugger [candidate] (6.019 ms) : 0, 6019
Remote Config [baseline] (664.83 µs) : 0, 665
Remote Config [candidate] (655.624 µs) : 0, 656
Telemetry [baseline] (8.987 ms) : 0, 8987
Telemetry [candidate] (8.25 ms) : 0, 8250
section iast
crashtracking [baseline] (1.424 ms) : 0, 1424
crashtracking [candidate] (1.427 ms) : 0, 1427
BytebuddyAgent [baseline] (845.623 ms) : 0, 845623
BytebuddyAgent [candidate] (848.284 ms) : 0, 848284
GlobalTracer [baseline] (230.387 ms) : 0, 230387
GlobalTracer [candidate] (231.167 ms) : 0, 231167
IAST [baseline] (29.773 ms) : 0, 29773
IAST [candidate] (29.996 ms) : 0, 29996
AppSec [baseline] (25.018 ms) : 0, 25018
AppSec [candidate] (27.39 ms) : 0, 27390
Debugger [baseline] (9.215 ms) : 0, 9215
Debugger [candidate] (6.635 ms) : 0, 6635
Remote Config [baseline] (586.187 µs) : 0, 586
Remote Config [candidate] (584.079 µs) : 0, 584
Telemetry [baseline] (7.829 ms) : 0, 7829
Telemetry [candidate] (7.863 ms) : 0, 7863

Startup time reports for petclinic

gantt
    title petclinic - global startup overhead: candidate=1.52.0-SNAPSHOT~5bc52e6be4, baseline=1.52.0-SNAPSHOT~887ea397cc

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.042 s) : 0, 1041783
Total [baseline] (10.676 s) : 0, 10675591
Agent [candidate] (1.046 s) : 0, 1046398
Total [candidate] (10.675 s) : 0, 10675120
section appsec
Agent [baseline] (1.218 s) : 0, 1217872
Total [baseline] (10.754 s) : 0, 10754353
Agent [candidate] (1.215 s) : 0, 1215325
Total [candidate] (10.754 s) : 0, 10754244
section iast
Agent [baseline] (1.174 s) : 0, 1173607
Total [baseline] (10.919 s) : 0, 10918971
Agent [candidate] (1.17 s) : 0, 1170145
Total [candidate] (10.862 s) : 0, 10861787
section profiling
Agent [baseline] (1.184 s) : 0, 1184340
Total [baseline] (10.938 s) : 0, 10937908
Agent [candidate] (1.185 s) : 0, 1184636
Total [candidate] (10.907 s) : 0, 10906521

baseline results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.042 s	-
Agent	appsec	1.218 s	176.089 ms (16.9%)
Agent	iast	1.174 s	131.824 ms (12.7%)
Agent	profiling	1.184 s	142.557 ms (13.7%)
Total	tracing	10.676 s	-
Total	appsec	10.754 s	78.762 ms (0.7%)
Total	iast	10.919 s	243.38 ms (2.3%)
Total	profiling	10.938 s	262.317 ms (2.5%)

candidate results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.046 s	-
Agent	appsec	1.215 s	168.927 ms (16.1%)
Agent	iast	1.17 s	123.747 ms (11.8%)
Agent	profiling	1.185 s	138.238 ms (13.2%)
Total	tracing	10.675 s	-
Total	appsec	10.754 s	79.124 ms (0.7%)
Total	iast	10.862 s	186.667 ms (1.7%)
Total	profiling	10.907 s	231.401 ms (2.2%)

gantt
    title petclinic - break down per module: candidate=1.52.0-SNAPSHOT~5bc52e6be4, baseline=1.52.0-SNAPSHOT~887ea397cc

    dateFormat X
    axisFormat %s
section tracing
crashtracking [baseline] (1.433 ms) : 0, 1433
crashtracking [candidate] (1.434 ms) : 0, 1434
BytebuddyAgent [baseline] (731.534 ms) : 0, 731534
BytebuddyAgent [candidate] (735.585 ms) : 0, 735585
GlobalTracer [baseline] (242.16 ms) : 0, 242160
GlobalTracer [candidate] (242.536 ms) : 0, 242536
AppSec [baseline] (30.697 ms) : 0, 30697
AppSec [candidate] (30.705 ms) : 0, 30705
Debugger [baseline] (6.029 ms) : 0, 6029
Debugger [candidate] (6.069 ms) : 0, 6069
Remote Config [baseline] (652.866 µs) : 0, 653
Remote Config [candidate] (664.766 µs) : 0, 665
Telemetry [baseline] (8.256 ms) : 0, 8256
Telemetry [candidate] (8.29 ms) : 0, 8290
section appsec
crashtracking [baseline] (1.439 ms) : 0, 1439
crashtracking [candidate] (1.423 ms) : 0, 1423
BytebuddyAgent [baseline] (751.786 ms) : 0, 751786
BytebuddyAgent [candidate] (750.326 ms) : 0, 750326
GlobalTracer [baseline] (234.837 ms) : 0, 234837
GlobalTracer [candidate] (233.855 ms) : 0, 233855
IAST [baseline] (23.591 ms) : 0, 23591
IAST [candidate] (23.517 ms) : 0, 23517
AppSec [baseline] (169.274 ms) : 0, 169274
AppSec [candidate] (168.47 ms) : 0, 168470
Debugger [baseline] (6.361 ms) : 0, 6361
Debugger [candidate] (7.143 ms) : 0, 7143
Remote Config [baseline] (592.612 µs) : 0, 593
Remote Config [candidate] (604.492 µs) : 0, 604
Telemetry [baseline] (8.773 ms) : 0, 8773
Telemetry [candidate] (8.833 ms) : 0, 8833
section iast
crashtracking [baseline] (1.421 ms) : 0, 1421
crashtracking [candidate] (1.423 ms) : 0, 1423
BytebuddyAgent [baseline] (847.339 ms) : 0, 847339
BytebuddyAgent [candidate] (844.764 ms) : 0, 844764
GlobalTracer [baseline] (231.377 ms) : 0, 231377
GlobalTracer [candidate] (230.639 ms) : 0, 230639
IAST [baseline] (28.093 ms) : 0, 28093
IAST [candidate] (27.579 ms) : 0, 27579
AppSec [baseline] (25.044 ms) : 0, 25044
AppSec [candidate] (28.835 ms) : 0, 28835
Debugger [baseline] (10.906 ms) : 0, 10906
Debugger [candidate] (7.49 ms) : 0, 7490
Remote Config [baseline] (587.735 µs) : 0, 588
Remote Config [candidate] (582.418 µs) : 0, 582
Telemetry [baseline] (7.931 ms) : 0, 7931
Telemetry [candidate] (7.959 ms) : 0, 7959
section profiling
crashtracking [baseline] (1.395 ms) : 0, 1395
crashtracking [candidate] (1.394 ms) : 0, 1394
BytebuddyAgent [baseline] (759.768 ms) : 0, 759768
BytebuddyAgent [candidate] (758.912 ms) : 0, 758912
GlobalTracer [baseline] (220.273 ms) : 0, 220273
GlobalTracer [candidate] (220.61 ms) : 0, 220610
AppSec [baseline] (30.449 ms) : 0, 30449
AppSec [candidate] (30.461 ms) : 0, 30461
Debugger [baseline] (6.298 ms) : 0, 6298
Debugger [candidate] (6.305 ms) : 0, 6305
Remote Config [baseline] (701.546 µs) : 0, 702
Remote Config [candidate] (671.521 µs) : 0, 672
Telemetry [baseline] (13.898 ms) : 0, 13898
Telemetry [candidate] (14.213 ms) : 0, 14213
ProfilingAgent [baseline] (103.23 ms) : 0, 103230
ProfilingAgent [candidate] (103.783 ms) : 0, 103783
Profiling [baseline] (103.252 ms) : 0, 103252
Profiling [candidate] (103.806 ms) : 0, 103806

Load

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	sarahchen6/add-dd-octo-sts-trust-policy
git_commit_date	1752771474	1752847866
git_commit_sha	`887ea39`	`5bc52e6`
release_version	1.52.0-SNAPSHOT~887ea397cc	1.52.0-SNAPSHOT~5bc52e6be4

See matching parameters

	Baseline	Candidate
application	insecure-bank	insecure-bank
ci_job_date	1752849401	1752849401
ci_job_id	1036322547	1036322547
ci_pipeline_id	71001686	71001686
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version	Linux runner-zfyrx7zua-project-304-concurrent-1-9yb73wpg 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux	Linux runner-zfyrx7zua-project-304-concurrent-1-9yb73wpg 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 3 performance improvements and 2 performance regressions! Performance is the same for 7 metrics, 12 unstable metrics.

scenario	Δ mean http_req_duration	Δ mean throughput	candidate mean http_req_duration	candidate mean throughput	baseline mean http_req_duration	baseline mean throughput
scenario:load:insecure-bank:iast_GLOBAL:high_load	worse [+319.944µs; +707.387µs] or [+3.194%; +7.063%]	unstable [-75.696op/s; +31.258op/s] or [-16.325%; +6.741%]	10.530ms	441.469op/s	10.016ms	463.688op/s
scenario:load:insecure-bank:iast:high_load	better [-595.416µs; -253.644µs] or [-6.182%; -2.633%]	unstable [-37.554op/s; +81.804op/s] or [-7.790%; +16.970%]	9.207ms	504.188op/s	9.632ms	482.062op/s
scenario:load:petclinic:iast:high_load	worse [+1.707ms; +2.506ms] or [+4.008%; +5.884%]	unstable [-12.855op/s; +2.480op/s] or [-11.695%; +2.256%]	44.695ms	104.725op/s	42.589ms	109.912op/s
scenario:load:petclinic:appsec:high_load	better [-2.527ms; -1.577ms] or [-5.065%; -3.162%]	unstable [-3.102op/s; +11.077op/s] or [-3.305%; +11.803%]	47.834ms	97.838op/s	49.886ms	93.850op/s
scenario:load:petclinic:profiling:high_load	better [-1.939ms; -0.991ms] or [-3.966%; -2.028%]	unstable [-4.258op/s; +10.133op/s] or [-4.445%; +10.577%]	47.416ms	98.737op/s	48.881ms	95.800op/s

Request duration reports for insecure-bank

gantt
    title insecure-bank - request duration [CI 0.99] : candidate=1.52.0-SNAPSHOT~5bc52e6be4, baseline=1.52.0-SNAPSHOT~887ea397cc
    dateFormat X
    axisFormat %s
section baseline
no_agent (4.212 ms) : 4160, 4264
.   : milestone, 4212,
iast (9.632 ms) : 9464, 9799
.   : milestone, 9632,
iast_FULL (14.227 ms) : 13951, 14503
.   : milestone, 14227,
iast_GLOBAL (10.016 ms) : 9842, 10190
.   : milestone, 10016,
profiling (8.966 ms) : 8824, 9109
.   : milestone, 8966,
tracing (7.497 ms) : 7392, 7602
.   : milestone, 7497,
section candidate
no_agent (4.347 ms) : 4293, 4401
.   : milestone, 4347,
iast (9.207 ms) : 9057, 9357
.   : milestone, 9207,
iast_FULL (14.249 ms) : 13963, 14535
.   : milestone, 14249,
iast_GLOBAL (10.53 ms) : 10344, 10715
.   : milestone, 10530,
profiling (8.767 ms) : 8632, 8903
.   : milestone, 8767,
tracing (7.38 ms) : 7267, 7493
.   : milestone, 7380,

baseline results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	4.212 ms [4.16 ms, 4.264 ms]	-
iast	9.632 ms [9.464 ms, 9.799 ms]	5.419 ms (128.7%)
iast_FULL	14.227 ms [13.951 ms, 14.503 ms]	10.015 ms (237.8%)
iast_GLOBAL	10.016 ms [9.842 ms, 10.19 ms]	5.804 ms (137.8%)
profiling	8.966 ms [8.824 ms, 9.109 ms]	4.754 ms (112.9%)
tracing	7.497 ms [7.392 ms, 7.602 ms]	3.285 ms (78.0%)

candidate results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	4.347 ms [4.293 ms, 4.401 ms]	-
iast	9.207 ms [9.057 ms, 9.357 ms]	4.86 ms (111.8%)
iast_FULL	14.249 ms [13.963 ms, 14.535 ms]	9.902 ms (227.8%)
iast_GLOBAL	10.53 ms [10.344 ms, 10.715 ms]	6.183 ms (142.2%)
profiling	8.767 ms [8.632 ms, 8.903 ms]	4.42 ms (101.7%)
tracing	7.38 ms [7.267 ms, 7.493 ms]	3.033 ms (69.8%)

Request duration reports for petclinic

gantt
    title petclinic - request duration [CI 0.99] : candidate=1.52.0-SNAPSHOT~5bc52e6be4, baseline=1.52.0-SNAPSHOT~887ea397cc
    dateFormat X
    axisFormat %s
section baseline
no_agent (37.274 ms) : 36975, 37573
.   : milestone, 37274,
appsec (49.886 ms) : 49442, 50330
.   : milestone, 49886,
code_origins (45.074 ms) : 44693, 45454
.   : milestone, 45074,
iast (42.589 ms) : 42224, 42953
.   : milestone, 42589,
profiling (48.881 ms) : 48453, 49308
.   : milestone, 48881,
tracing (43.185 ms) : 42811, 43559
.   : milestone, 43185,
section candidate
no_agent (36.503 ms) : 36208, 36799
.   : milestone, 36503,
appsec (47.834 ms) : 47396, 48272
.   : milestone, 47834,
code_origins (44.73 ms) : 44345, 45114
.   : milestone, 44730,
iast (44.695 ms) : 44317, 45072
.   : milestone, 44695,
profiling (47.416 ms) : 46963, 47868
.   : milestone, 47416,
tracing (43.247 ms) : 42881, 43613
.   : milestone, 43247,

baseline results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	37.274 ms [36.975 ms, 37.573 ms]	-
appsec	49.886 ms [49.442 ms, 50.33 ms]	12.612 ms (33.8%)
code_origins	45.074 ms [44.693 ms, 45.454 ms]	7.799 ms (20.9%)
iast	42.589 ms [42.224 ms, 42.953 ms]	5.314 ms (14.3%)
profiling	48.881 ms [48.453 ms, 49.308 ms]	11.607 ms (31.1%)
tracing	43.185 ms [42.811 ms, 43.559 ms]	5.911 ms (15.9%)

candidate results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	36.503 ms [36.208 ms, 36.799 ms]	-
appsec	47.834 ms [47.396 ms, 48.272 ms]	11.331 ms (31.0%)
code_origins	44.73 ms [44.345 ms, 45.114 ms]	8.226 ms (22.5%)
iast	44.695 ms [44.317 ms, 45.072 ms]	8.192 ms (22.4%)
profiling	47.416 ms [46.963 ms, 47.868 ms]	10.912 ms (29.9%)
tracing	43.247 ms [42.881 ms, 43.613 ms]	6.743 ms (18.5%)

Dacapo

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	sarahchen6/add-dd-octo-sts-trust-policy
git_commit_date	1752771474	1752847866
git_commit_sha	`887ea39`	`5bc52e6`
release_version	1.52.0-SNAPSHOT~887ea397cc	1.52.0-SNAPSHOT~5bc52e6be4

See matching parameters

	Baseline	Candidate
application	biojava	biojava
ci_job_date	1752849950	1752849950
ci_job_id	1036322548	1036322548
ci_pipeline_id	71001686	71001686
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version	Linux runner-zfyrx7zua-project-304-concurrent-0-w63p83ri 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux	Linux runner-zfyrx7zua-project-304-concurrent-0-w63p83ri 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 11 metrics, 1 unstable metrics.

Execution time for tomcat

gantt
    title tomcat - execution time [CI 0.99] : candidate=1.52.0-SNAPSHOT~5bc52e6be4, baseline=1.52.0-SNAPSHOT~887ea397cc
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.476 ms) : 1464, 1487
.   : milestone, 1476,
appsec (3.614 ms) : 3400, 3827
.   : milestone, 3614,
iast (2.192 ms) : 2129, 2254
.   : milestone, 2192,
iast_GLOBAL (2.247 ms) : 2184, 2310
.   : milestone, 2247,
profiling (2.039 ms) : 1989, 2089
.   : milestone, 2039,
tracing (2.007 ms) : 1958, 2055
.   : milestone, 2007,
section candidate
no_agent (1.477 ms) : 1466, 1489
.   : milestone, 1477,
appsec (3.642 ms) : 3423, 3860
.   : milestone, 3642,
iast (2.206 ms) : 2143, 2268
.   : milestone, 2206,
iast_GLOBAL (2.246 ms) : 2183, 2309
.   : milestone, 2246,
profiling (2.067 ms) : 2015, 2120
.   : milestone, 2067,
tracing (2.021 ms) : 1972, 2069
.   : milestone, 2021,

baseline results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	1.476 ms [1.464 ms, 1.487 ms]	-
appsec	3.614 ms [3.4 ms, 3.827 ms]	2.138 ms (144.8%)
iast	2.192 ms [2.129 ms, 2.254 ms]	715.832 µs (48.5%)
iast_GLOBAL	2.247 ms [2.184 ms, 2.31 ms]	770.977 µs (52.2%)
profiling	2.039 ms [1.989 ms, 2.089 ms]	563.1 µs (38.2%)
tracing	2.007 ms [1.958 ms, 2.055 ms]	530.744 µs (36.0%)

candidate results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	1.477 ms [1.466 ms, 1.489 ms]	-
appsec	3.642 ms [3.423 ms, 3.86 ms]	2.164 ms (146.5%)
iast	2.206 ms [2.143 ms, 2.268 ms]	728.47 µs (49.3%)
iast_GLOBAL	2.246 ms [2.183 ms, 2.309 ms]	768.658 µs (52.0%)
profiling	2.067 ms [2.015 ms, 2.12 ms]	590.025 µs (39.9%)
tracing	2.021 ms [1.972 ms, 2.069 ms]	543.259 µs (36.8%)

Execution time for biojava

gantt
    title biojava - execution time [CI 0.99] : candidate=1.52.0-SNAPSHOT~5bc52e6be4, baseline=1.52.0-SNAPSHOT~887ea397cc
    dateFormat X
    axisFormat %s
section baseline
no_agent (15.456 s) : 15456000, 15456000
.   : milestone, 15456000,
appsec (15.002 s) : 15002000, 15002000
.   : milestone, 15002000,
iast (18.222 s) : 18222000, 18222000
.   : milestone, 18222000,
iast_GLOBAL (18.033 s) : 18033000, 18033000
.   : milestone, 18033000,
profiling (15.505 s) : 15505000, 15505000
.   : milestone, 15505000,
tracing (14.681 s) : 14681000, 14681000
.   : milestone, 14681000,
section candidate
no_agent (15.563 s) : 15563000, 15563000
.   : milestone, 15563000,
appsec (14.856 s) : 14856000, 14856000
.   : milestone, 14856000,
iast (18.067 s) : 18067000, 18067000
.   : milestone, 18067000,
iast_GLOBAL (18.257 s) : 18257000, 18257000
.   : milestone, 18257000,
profiling (15.519 s) : 15519000, 15519000
.   : milestone, 15519000,
tracing (14.989 s) : 14989000, 14989000
.   : milestone, 14989000,

baseline results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	15.456 s [15.456 s, 15.456 s]	-
appsec	15.002 s [15.002 s, 15.002 s]	-454.0 ms (-2.9%)
iast	18.222 s [18.222 s, 18.222 s]	2.766 s (17.9%)
iast_GLOBAL	18.033 s [18.033 s, 18.033 s]	2.577 s (16.7%)
profiling	15.505 s [15.505 s, 15.505 s]	49.0 ms (0.3%)
tracing	14.681 s [14.681 s, 14.681 s]	-775.0 ms (-5.0%)

candidate results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	15.563 s [15.563 s, 15.563 s]	-
appsec	14.856 s [14.856 s, 14.856 s]	-707.0 ms (-4.5%)
iast	18.067 s [18.067 s, 18.067 s]	2.504 s (16.1%)
iast_GLOBAL	18.257 s [18.257 s, 18.257 s]	2.694 s (17.3%)
profiling	15.519 s [15.519 s, 15.519 s]	-44.0 ms (-0.3%)
tracing	14.989 s [14.989 s, 14.989 s]	-574.0 ms (-3.7%)

Add dd-octo-sts trust policy

5bc52e6

sarahchen6 requested a review from a team as a code owner July 18, 2025 14:13

sarahchen6 requested review from PerfectSlayer and removed request for a team July 18, 2025 14:13

sarahchen6 added type: enhancement Enhancements and improvements comp: tooling Build & Tooling labels Jul 18, 2025

This was referenced Jul 18, 2025

Test dd-octo-sts workflow #9200

Closed

Use dd-octo-sts to retrieve github release token #9187

Merged

sarahchen6 requested a review from AlexeyKuznetsov-DD July 21, 2025 18:09

AlexeyKuznetsov-DD requested a review from randomanderson July 21, 2025 18:21

nayeem-kamal approved these changes Jul 21, 2025

View reviewed changes

sarahchen6 merged commit 3e129d3 into master Jul 21, 2025
510 of 511 checks passed

sarahchen6 deleted the sarahchen6/add-dd-octo-sts-trust-policy branch July 21, 2025 20:13

github-actions bot added this to the 1.52.0 milestone Jul 21, 2025

sarahchen6 added the tag: no release notes Changes to exclude from release notes label Jul 22, 2025

mtoffl01 mentioned this pull request Jul 22, 2025

🍒 9198 - Add dd-octo-sts trust policy #9219

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Add dd-octo-sts trust policy #9198

Add dd-octo-sts trust policy #9198

Uh oh!

sarahchen6 commented Jul 18, 2025 •

edited

Loading

Uh oh!

github-actions bot commented Jul 18, 2025

Uh oh!

pr-commenter bot commented Jul 18, 2025

Uh oh!

Uh oh!

Uh oh!

Add dd-octo-sts trust policy #9198

Add dd-octo-sts trust policy #9198

Uh oh!

Conversation

sarahchen6 commented Jul 18, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

What Does This Do

Motivation

Additional Notes

Contributor Checklist

Uh oh!

github-actions bot commented Jul 18, 2025

Uh oh!

pr-commenter bot commented Jul 18, 2025

Benchmarks

Startup

Parameters

Summary

Load

Parameters

Summary

Dacapo

Parameters

Summary

Uh oh!

Uh oh!

Uh oh!

sarahchen6 commented Jul 18, 2025 •

edited

Loading