Skip to content

Add dd-octo-sts trust policy #9198

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jul 21, 2025

Conversation

sarahchen6
Copy link
Contributor

@sarahchen6 sarahchen6 commented Jul 18, 2025

What Does This Do

This PR adds the trust policy for dd-octo-sts usage.

Motivation

We want to use dd-octo-sts for github PATs instead of our current fine-grained tokens. Since trust policies must be read from the master branch to be valid, the policy needs to be merged in before we can test the token workflow.

Additional Notes

The github release token is needed when we tag a release, so the policy is tailored for git tags. The policy is tested to work with this dd-octo-sts-sandbox example run.

Contributor Checklist

Jira ticket: https://datadoghq.atlassian.net/browse/LANGPLAT-696

@sarahchen6 sarahchen6 requested a review from a team as a code owner July 18, 2025 14:13
@sarahchen6 sarahchen6 requested review from PerfectSlayer and removed request for a team July 18, 2025 14:13
Copy link
Contributor

Hi! 👋 Thanks for your pull request! 🎉

To help us review it, please make sure to:

  • Add at least one type, and one component or instrumentation label to the pull request

If you need help, please check our contributing guidelines.

@sarahchen6 sarahchen6 added type: enhancement Enhancements and improvements comp: tooling Build & Tooling labels Jul 18, 2025
@pr-commenter
Copy link

pr-commenter bot commented Jul 18, 2025

Benchmarks

Startup

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master sarahchen6/add-dd-octo-sts-trust-policy
git_commit_date 1752771474 1752847866
git_commit_sha 887ea39 5bc52e6
release_version 1.52.0-SNAPSHOT~887ea397cc 1.52.0-SNAPSHOT~5bc52e6be4
See matching parameters
Baseline Candidate
application insecure-bank insecure-bank
ci_job_date 1752849733 1752849733
ci_job_id 1036322546 1036322546
ci_pipeline_id 71001686 71001686
cpu_model Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version Linux runner-zfyrx7zua-project-304-concurrent-0-s7vmgml1 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux Linux runner-zfyrx7zua-project-304-concurrent-0-s7vmgml1 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
module Agent Agent
parent None None

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 48 metrics, 11 unstable metrics.

Startup time reports for insecure-bank
gantt
    title insecure-bank - global startup overhead: candidate=1.52.0-SNAPSHOT~5bc52e6be4, baseline=1.52.0-SNAPSHOT~887ea397cc

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.041 s) : 0, 1040877
Total [baseline] (8.625 s) : 0, 8624873
Agent [candidate] (1.045 s) : 0, 1044906
Total [candidate] (8.603 s) : 0, 8603406
section iast
Agent [baseline] (1.171 s) : 0, 1170664
Total [baseline] (9.305 s) : 0, 9305332
Agent [candidate] (1.174 s) : 0, 1174211
Total [candidate] (9.262 s) : 0, 9262220
Loading
  • baseline results
Module Variant Duration Δ tracing
Agent tracing 1.041 s -
Agent iast 1.171 s 129.788 ms (12.5%)
Total tracing 8.625 s -
Total iast 9.305 s 680.46 ms (7.9%)
  • candidate results
Module Variant Duration Δ tracing
Agent tracing 1.045 s -
Agent iast 1.174 s 129.305 ms (12.4%)
Total tracing 8.603 s -
Total iast 9.262 s 658.814 ms (7.7%)
gantt
    title insecure-bank - break down per module: candidate=1.52.0-SNAPSHOT~5bc52e6be4, baseline=1.52.0-SNAPSHOT~887ea397cc

    dateFormat X
    axisFormat %s
section tracing
crashtracking [baseline] (1.435 ms) : 0, 1435
crashtracking [candidate] (1.434 ms) : 0, 1434
BytebuddyAgent [baseline] (730.801 ms) : 0, 730801
BytebuddyAgent [candidate] (734.364 ms) : 0, 734364
GlobalTracer [baseline] (241.624 ms) : 0, 241624
GlobalTracer [candidate] (242.434 ms) : 0, 242434
AppSec [baseline] (30.503 ms) : 0, 30503
AppSec [candidate] (30.672 ms) : 0, 30672
Debugger [baseline] (6.007 ms) : 0, 6007
Debugger [candidate] (6.019 ms) : 0, 6019
Remote Config [baseline] (664.83 µs) : 0, 665
Remote Config [candidate] (655.624 µs) : 0, 656
Telemetry [baseline] (8.987 ms) : 0, 8987
Telemetry [candidate] (8.25 ms) : 0, 8250
section iast
crashtracking [baseline] (1.424 ms) : 0, 1424
crashtracking [candidate] (1.427 ms) : 0, 1427
BytebuddyAgent [baseline] (845.623 ms) : 0, 845623
BytebuddyAgent [candidate] (848.284 ms) : 0, 848284
GlobalTracer [baseline] (230.387 ms) : 0, 230387
GlobalTracer [candidate] (231.167 ms) : 0, 231167
IAST [baseline] (29.773 ms) : 0, 29773
IAST [candidate] (29.996 ms) : 0, 29996
AppSec [baseline] (25.018 ms) : 0, 25018
AppSec [candidate] (27.39 ms) : 0, 27390
Debugger [baseline] (9.215 ms) : 0, 9215
Debugger [candidate] (6.635 ms) : 0, 6635
Remote Config [baseline] (586.187 µs) : 0, 586
Remote Config [candidate] (584.079 µs) : 0, 584
Telemetry [baseline] (7.829 ms) : 0, 7829
Telemetry [candidate] (7.863 ms) : 0, 7863
Loading
Startup time reports for petclinic
gantt
    title petclinic - global startup overhead: candidate=1.52.0-SNAPSHOT~5bc52e6be4, baseline=1.52.0-SNAPSHOT~887ea397cc

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.042 s) : 0, 1041783
Total [baseline] (10.676 s) : 0, 10675591
Agent [candidate] (1.046 s) : 0, 1046398
Total [candidate] (10.675 s) : 0, 10675120
section appsec
Agent [baseline] (1.218 s) : 0, 1217872
Total [baseline] (10.754 s) : 0, 10754353
Agent [candidate] (1.215 s) : 0, 1215325
Total [candidate] (10.754 s) : 0, 10754244
section iast
Agent [baseline] (1.174 s) : 0, 1173607
Total [baseline] (10.919 s) : 0, 10918971
Agent [candidate] (1.17 s) : 0, 1170145
Total [candidate] (10.862 s) : 0, 10861787
section profiling
Agent [baseline] (1.184 s) : 0, 1184340
Total [baseline] (10.938 s) : 0, 10937908
Agent [candidate] (1.185 s) : 0, 1184636
Total [candidate] (10.907 s) : 0, 10906521
Loading
  • baseline results
Module Variant Duration Δ tracing
Agent tracing 1.042 s -
Agent appsec 1.218 s 176.089 ms (16.9%)
Agent iast 1.174 s 131.824 ms (12.7%)
Agent profiling 1.184 s 142.557 ms (13.7%)
Total tracing 10.676 s -
Total appsec 10.754 s 78.762 ms (0.7%)
Total iast 10.919 s 243.38 ms (2.3%)
Total profiling 10.938 s 262.317 ms (2.5%)
  • candidate results
Module Variant Duration Δ tracing
Agent tracing 1.046 s -
Agent appsec 1.215 s 168.927 ms (16.1%)
Agent iast 1.17 s 123.747 ms (11.8%)
Agent profiling 1.185 s 138.238 ms (13.2%)
Total tracing 10.675 s -
Total appsec 10.754 s 79.124 ms (0.7%)
Total iast 10.862 s 186.667 ms (1.7%)
Total profiling 10.907 s 231.401 ms (2.2%)
gantt
    title petclinic - break down per module: candidate=1.52.0-SNAPSHOT~5bc52e6be4, baseline=1.52.0-SNAPSHOT~887ea397cc

    dateFormat X
    axisFormat %s
section tracing
crashtracking [baseline] (1.433 ms) : 0, 1433
crashtracking [candidate] (1.434 ms) : 0, 1434
BytebuddyAgent [baseline] (731.534 ms) : 0, 731534
BytebuddyAgent [candidate] (735.585 ms) : 0, 735585
GlobalTracer [baseline] (242.16 ms) : 0, 242160
GlobalTracer [candidate] (242.536 ms) : 0, 242536
AppSec [baseline] (30.697 ms) : 0, 30697
AppSec [candidate] (30.705 ms) : 0, 30705
Debugger [baseline] (6.029 ms) : 0, 6029
Debugger [candidate] (6.069 ms) : 0, 6069
Remote Config [baseline] (652.866 µs) : 0, 653
Remote Config [candidate] (664.766 µs) : 0, 665
Telemetry [baseline] (8.256 ms) : 0, 8256
Telemetry [candidate] (8.29 ms) : 0, 8290
section appsec
crashtracking [baseline] (1.439 ms) : 0, 1439
crashtracking [candidate] (1.423 ms) : 0, 1423
BytebuddyAgent [baseline] (751.786 ms) : 0, 751786
BytebuddyAgent [candidate] (750.326 ms) : 0, 750326
GlobalTracer [baseline] (234.837 ms) : 0, 234837
GlobalTracer [candidate] (233.855 ms) : 0, 233855
IAST [baseline] (23.591 ms) : 0, 23591
IAST [candidate] (23.517 ms) : 0, 23517
AppSec [baseline] (169.274 ms) : 0, 169274
AppSec [candidate] (168.47 ms) : 0, 168470
Debugger [baseline] (6.361 ms) : 0, 6361
Debugger [candidate] (7.143 ms) : 0, 7143
Remote Config [baseline] (592.612 µs) : 0, 593
Remote Config [candidate] (604.492 µs) : 0, 604
Telemetry [baseline] (8.773 ms) : 0, 8773
Telemetry [candidate] (8.833 ms) : 0, 8833
section iast
crashtracking [baseline] (1.421 ms) : 0, 1421
crashtracking [candidate] (1.423 ms) : 0, 1423
BytebuddyAgent [baseline] (847.339 ms) : 0, 847339
BytebuddyAgent [candidate] (844.764 ms) : 0, 844764
GlobalTracer [baseline] (231.377 ms) : 0, 231377
GlobalTracer [candidate] (230.639 ms) : 0, 230639
IAST [baseline] (28.093 ms) : 0, 28093
IAST [candidate] (27.579 ms) : 0, 27579
AppSec [baseline] (25.044 ms) : 0, 25044
AppSec [candidate] (28.835 ms) : 0, 28835
Debugger [baseline] (10.906 ms) : 0, 10906
Debugger [candidate] (7.49 ms) : 0, 7490
Remote Config [baseline] (587.735 µs) : 0, 588
Remote Config [candidate] (582.418 µs) : 0, 582
Telemetry [baseline] (7.931 ms) : 0, 7931
Telemetry [candidate] (7.959 ms) : 0, 7959
section profiling
crashtracking [baseline] (1.395 ms) : 0, 1395
crashtracking [candidate] (1.394 ms) : 0, 1394
BytebuddyAgent [baseline] (759.768 ms) : 0, 759768
BytebuddyAgent [candidate] (758.912 ms) : 0, 758912
GlobalTracer [baseline] (220.273 ms) : 0, 220273
GlobalTracer [candidate] (220.61 ms) : 0, 220610
AppSec [baseline] (30.449 ms) : 0, 30449
AppSec [candidate] (30.461 ms) : 0, 30461
Debugger [baseline] (6.298 ms) : 0, 6298
Debugger [candidate] (6.305 ms) : 0, 6305
Remote Config [baseline] (701.546 µs) : 0, 702
Remote Config [candidate] (671.521 µs) : 0, 672
Telemetry [baseline] (13.898 ms) : 0, 13898
Telemetry [candidate] (14.213 ms) : 0, 14213
ProfilingAgent [baseline] (103.23 ms) : 0, 103230
ProfilingAgent [candidate] (103.783 ms) : 0, 103783
Profiling [baseline] (103.252 ms) : 0, 103252
Profiling [candidate] (103.806 ms) : 0, 103806
Loading

Load

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master sarahchen6/add-dd-octo-sts-trust-policy
git_commit_date 1752771474 1752847866
git_commit_sha 887ea39 5bc52e6
release_version 1.52.0-SNAPSHOT~887ea397cc 1.52.0-SNAPSHOT~5bc52e6be4
See matching parameters
Baseline Candidate
application insecure-bank insecure-bank
ci_job_date 1752849401 1752849401
ci_job_id 1036322547 1036322547
ci_pipeline_id 71001686 71001686
cpu_model Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version Linux runner-zfyrx7zua-project-304-concurrent-1-9yb73wpg 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux Linux runner-zfyrx7zua-project-304-concurrent-1-9yb73wpg 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 3 performance improvements and 2 performance regressions! Performance is the same for 7 metrics, 12 unstable metrics.

scenario Δ mean http_req_duration Δ mean throughput candidate mean http_req_duration candidate mean throughput baseline mean http_req_duration baseline mean throughput
scenario:load:insecure-bank:iast_GLOBAL:high_load worse
[+319.944µs; +707.387µs] or [+3.194%; +7.063%]
unstable
[-75.696op/s; +31.258op/s] or [-16.325%; +6.741%]
10.530ms 441.469op/s 10.016ms 463.688op/s
scenario:load:insecure-bank:iast:high_load better
[-595.416µs; -253.644µs] or [-6.182%; -2.633%]
unstable
[-37.554op/s; +81.804op/s] or [-7.790%; +16.970%]
9.207ms 504.188op/s 9.632ms 482.062op/s
scenario:load:petclinic:iast:high_load worse
[+1.707ms; +2.506ms] or [+4.008%; +5.884%]
unstable
[-12.855op/s; +2.480op/s] or [-11.695%; +2.256%]
44.695ms 104.725op/s 42.589ms 109.912op/s
scenario:load:petclinic:appsec:high_load better
[-2.527ms; -1.577ms] or [-5.065%; -3.162%]
unstable
[-3.102op/s; +11.077op/s] or [-3.305%; +11.803%]
47.834ms 97.838op/s 49.886ms 93.850op/s
scenario:load:petclinic:profiling:high_load better
[-1.939ms; -0.991ms] or [-3.966%; -2.028%]
unstable
[-4.258op/s; +10.133op/s] or [-4.445%; +10.577%]
47.416ms 98.737op/s 48.881ms 95.800op/s
Request duration reports for insecure-bank
gantt
    title insecure-bank - request duration [CI 0.99] : candidate=1.52.0-SNAPSHOT~5bc52e6be4, baseline=1.52.0-SNAPSHOT~887ea397cc
    dateFormat X
    axisFormat %s
section baseline
no_agent (4.212 ms) : 4160, 4264
.   : milestone, 4212,
iast (9.632 ms) : 9464, 9799
.   : milestone, 9632,
iast_FULL (14.227 ms) : 13951, 14503
.   : milestone, 14227,
iast_GLOBAL (10.016 ms) : 9842, 10190
.   : milestone, 10016,
profiling (8.966 ms) : 8824, 9109
.   : milestone, 8966,
tracing (7.497 ms) : 7392, 7602
.   : milestone, 7497,
section candidate
no_agent (4.347 ms) : 4293, 4401
.   : milestone, 4347,
iast (9.207 ms) : 9057, 9357
.   : milestone, 9207,
iast_FULL (14.249 ms) : 13963, 14535
.   : milestone, 14249,
iast_GLOBAL (10.53 ms) : 10344, 10715
.   : milestone, 10530,
profiling (8.767 ms) : 8632, 8903
.   : milestone, 8767,
tracing (7.38 ms) : 7267, 7493
.   : milestone, 7380,
Loading
  • baseline results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 4.212 ms [4.16 ms, 4.264 ms] -
iast 9.632 ms [9.464 ms, 9.799 ms] 5.419 ms (128.7%)
iast_FULL 14.227 ms [13.951 ms, 14.503 ms] 10.015 ms (237.8%)
iast_GLOBAL 10.016 ms [9.842 ms, 10.19 ms] 5.804 ms (137.8%)
profiling 8.966 ms [8.824 ms, 9.109 ms] 4.754 ms (112.9%)
tracing 7.497 ms [7.392 ms, 7.602 ms] 3.285 ms (78.0%)
  • candidate results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 4.347 ms [4.293 ms, 4.401 ms] -
iast 9.207 ms [9.057 ms, 9.357 ms] 4.86 ms (111.8%)
iast_FULL 14.249 ms [13.963 ms, 14.535 ms] 9.902 ms (227.8%)
iast_GLOBAL 10.53 ms [10.344 ms, 10.715 ms] 6.183 ms (142.2%)
profiling 8.767 ms [8.632 ms, 8.903 ms] 4.42 ms (101.7%)
tracing 7.38 ms [7.267 ms, 7.493 ms] 3.033 ms (69.8%)
Request duration reports for petclinic
gantt
    title petclinic - request duration [CI 0.99] : candidate=1.52.0-SNAPSHOT~5bc52e6be4, baseline=1.52.0-SNAPSHOT~887ea397cc
    dateFormat X
    axisFormat %s
section baseline
no_agent (37.274 ms) : 36975, 37573
.   : milestone, 37274,
appsec (49.886 ms) : 49442, 50330
.   : milestone, 49886,
code_origins (45.074 ms) : 44693, 45454
.   : milestone, 45074,
iast (42.589 ms) : 42224, 42953
.   : milestone, 42589,
profiling (48.881 ms) : 48453, 49308
.   : milestone, 48881,
tracing (43.185 ms) : 42811, 43559
.   : milestone, 43185,
section candidate
no_agent (36.503 ms) : 36208, 36799
.   : milestone, 36503,
appsec (47.834 ms) : 47396, 48272
.   : milestone, 47834,
code_origins (44.73 ms) : 44345, 45114
.   : milestone, 44730,
iast (44.695 ms) : 44317, 45072
.   : milestone, 44695,
profiling (47.416 ms) : 46963, 47868
.   : milestone, 47416,
tracing (43.247 ms) : 42881, 43613
.   : milestone, 43247,
Loading
  • baseline results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 37.274 ms [36.975 ms, 37.573 ms] -
appsec 49.886 ms [49.442 ms, 50.33 ms] 12.612 ms (33.8%)
code_origins 45.074 ms [44.693 ms, 45.454 ms] 7.799 ms (20.9%)
iast 42.589 ms [42.224 ms, 42.953 ms] 5.314 ms (14.3%)
profiling 48.881 ms [48.453 ms, 49.308 ms] 11.607 ms (31.1%)
tracing 43.185 ms [42.811 ms, 43.559 ms] 5.911 ms (15.9%)
  • candidate results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 36.503 ms [36.208 ms, 36.799 ms] -
appsec 47.834 ms [47.396 ms, 48.272 ms] 11.331 ms (31.0%)
code_origins 44.73 ms [44.345 ms, 45.114 ms] 8.226 ms (22.5%)
iast 44.695 ms [44.317 ms, 45.072 ms] 8.192 ms (22.4%)
profiling 47.416 ms [46.963 ms, 47.868 ms] 10.912 ms (29.9%)
tracing 43.247 ms [42.881 ms, 43.613 ms] 6.743 ms (18.5%)

Dacapo

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master sarahchen6/add-dd-octo-sts-trust-policy
git_commit_date 1752771474 1752847866
git_commit_sha 887ea39 5bc52e6
release_version 1.52.0-SNAPSHOT~887ea397cc 1.52.0-SNAPSHOT~5bc52e6be4
See matching parameters
Baseline Candidate
application biojava biojava
ci_job_date 1752849950 1752849950
ci_job_id 1036322548 1036322548
ci_pipeline_id 71001686 71001686
cpu_model Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version Linux runner-zfyrx7zua-project-304-concurrent-0-w63p83ri 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux Linux runner-zfyrx7zua-project-304-concurrent-0-w63p83ri 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 11 metrics, 1 unstable metrics.

Execution time for tomcat
gantt
    title tomcat - execution time [CI 0.99] : candidate=1.52.0-SNAPSHOT~5bc52e6be4, baseline=1.52.0-SNAPSHOT~887ea397cc
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.476 ms) : 1464, 1487
.   : milestone, 1476,
appsec (3.614 ms) : 3400, 3827
.   : milestone, 3614,
iast (2.192 ms) : 2129, 2254
.   : milestone, 2192,
iast_GLOBAL (2.247 ms) : 2184, 2310
.   : milestone, 2247,
profiling (2.039 ms) : 1989, 2089
.   : milestone, 2039,
tracing (2.007 ms) : 1958, 2055
.   : milestone, 2007,
section candidate
no_agent (1.477 ms) : 1466, 1489
.   : milestone, 1477,
appsec (3.642 ms) : 3423, 3860
.   : milestone, 3642,
iast (2.206 ms) : 2143, 2268
.   : milestone, 2206,
iast_GLOBAL (2.246 ms) : 2183, 2309
.   : milestone, 2246,
profiling (2.067 ms) : 2015, 2120
.   : milestone, 2067,
tracing (2.021 ms) : 1972, 2069
.   : milestone, 2021,
Loading
  • baseline results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 1.476 ms [1.464 ms, 1.487 ms] -
appsec 3.614 ms [3.4 ms, 3.827 ms] 2.138 ms (144.8%)
iast 2.192 ms [2.129 ms, 2.254 ms] 715.832 µs (48.5%)
iast_GLOBAL 2.247 ms [2.184 ms, 2.31 ms] 770.977 µs (52.2%)
profiling 2.039 ms [1.989 ms, 2.089 ms] 563.1 µs (38.2%)
tracing 2.007 ms [1.958 ms, 2.055 ms] 530.744 µs (36.0%)
  • candidate results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 1.477 ms [1.466 ms, 1.489 ms] -
appsec 3.642 ms [3.423 ms, 3.86 ms] 2.164 ms (146.5%)
iast 2.206 ms [2.143 ms, 2.268 ms] 728.47 µs (49.3%)
iast_GLOBAL 2.246 ms [2.183 ms, 2.309 ms] 768.658 µs (52.0%)
profiling 2.067 ms [2.015 ms, 2.12 ms] 590.025 µs (39.9%)
tracing 2.021 ms [1.972 ms, 2.069 ms] 543.259 µs (36.8%)
Execution time for biojava
gantt
    title biojava - execution time [CI 0.99] : candidate=1.52.0-SNAPSHOT~5bc52e6be4, baseline=1.52.0-SNAPSHOT~887ea397cc
    dateFormat X
    axisFormat %s
section baseline
no_agent (15.456 s) : 15456000, 15456000
.   : milestone, 15456000,
appsec (15.002 s) : 15002000, 15002000
.   : milestone, 15002000,
iast (18.222 s) : 18222000, 18222000
.   : milestone, 18222000,
iast_GLOBAL (18.033 s) : 18033000, 18033000
.   : milestone, 18033000,
profiling (15.505 s) : 15505000, 15505000
.   : milestone, 15505000,
tracing (14.681 s) : 14681000, 14681000
.   : milestone, 14681000,
section candidate
no_agent (15.563 s) : 15563000, 15563000
.   : milestone, 15563000,
appsec (14.856 s) : 14856000, 14856000
.   : milestone, 14856000,
iast (18.067 s) : 18067000, 18067000
.   : milestone, 18067000,
iast_GLOBAL (18.257 s) : 18257000, 18257000
.   : milestone, 18257000,
profiling (15.519 s) : 15519000, 15519000
.   : milestone, 15519000,
tracing (14.989 s) : 14989000, 14989000
.   : milestone, 14989000,
Loading
  • baseline results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 15.456 s [15.456 s, 15.456 s] -
appsec 15.002 s [15.002 s, 15.002 s] -454.0 ms (-2.9%)
iast 18.222 s [18.222 s, 18.222 s] 2.766 s (17.9%)
iast_GLOBAL 18.033 s [18.033 s, 18.033 s] 2.577 s (16.7%)
profiling 15.505 s [15.505 s, 15.505 s] 49.0 ms (0.3%)
tracing 14.681 s [14.681 s, 14.681 s] -775.0 ms (-5.0%)
  • candidate results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 15.563 s [15.563 s, 15.563 s] -
appsec 14.856 s [14.856 s, 14.856 s] -707.0 ms (-4.5%)
iast 18.067 s [18.067 s, 18.067 s] 2.504 s (16.1%)
iast_GLOBAL 18.257 s [18.257 s, 18.257 s] 2.694 s (17.3%)
profiling 15.519 s [15.519 s, 15.519 s] -44.0 ms (-0.3%)
tracing 14.989 s [14.989 s, 14.989 s] -574.0 ms (-3.7%)

@sarahchen6 sarahchen6 merged commit 3e129d3 into master Jul 21, 2025
510 of 511 checks passed
@sarahchen6 sarahchen6 deleted the sarahchen6/add-dd-octo-sts-trust-policy branch July 21, 2025 20:13
@github-actions github-actions bot added this to the 1.52.0 milestone Jul 21, 2025
@sarahchen6 sarahchen6 added the tag: no release notes Changes to exclude from release notes label Jul 22, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
comp: tooling Build & Tooling tag: no release notes Changes to exclude from release notes type: enhancement Enhancements and improvements
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants