Skip to content

Add ci.opensearch.org/m2/ mirror for plugin resolution (flow-framework) - #1449

Merged
peterzhuamazon merged 2 commits into
opensearch-project:3.8from
shreyah963:update-plugin-m2
Jul 31, 2026
Merged

Add ci.opensearch.org/m2/ mirror for plugin resolution (flow-framework)#1449
peterzhuamazon merged 2 commits into
opensearch-project:3.8from
shreyah963:update-plugin-m2

Conversation

@shreyah963

@shreyah963 shreyah963 commented Jul 30, 2026

Copy link
Copy Markdown
Contributor

Description

Add ci.opensearch.org/m2/ mirror for plugin resolution (flow-framework)

Issues Resolved

opensearch-project/opensearch-build#6278 (comment)

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

@github-actions

github-actions Bot commented Jul 30, 2026

Copy link
Copy Markdown
Contributor

PR Code Analyzer ❗

AI-powered 'Code-Diff-Analyzer' found issues on commit d07be86.

Hard block: Issues at High severity or above will block this PR from merging.

PathLineSeverityDescription
build.gradle58highNew Maven repository added to buildscript block: https://ci.opensearch.org/m2/. Per mandatory supply chain rule, all repository additions must be flagged. Maintainers should verify this URL resolves to a trusted, controlled artifact store and is not a shadow path that could serve malicious build plugins.
build.gradle191highNew Maven repository added to project dependency resolution block: https://ci.opensearch.org/m2/. Any artifact resolvable via existing repos could be shadowed here if this path is under different access control than the adjacent /maven2/ path on the same host.
settings.gradle4highNew Maven repository added to pluginManagement block: https://ci.opensearch.org/m2/. This path controls Gradle plugin resolution, making it a high-value target. Maintainers should confirm this path is intentional, properly access-controlled on ci.opensearch.org, and distinct from the existing /maven2/ path already present.

The table above displays the top 10 most important findings.

Total: 3 | Critical: 0 | High: 3 | Medium: 0 | Low: 0


Pull Requests Author(s): Please update your Pull Request according to the report above.

Repository Maintainer(s): You can bypass diff analyzer by adding label skip-diff-analyzer after reviewing the changes carefully, then re-run failed actions. To re-enable the analyzer, remove the label, then re-run all actions.


⚠️ Note: The Code-Diff-Analyzer helps protect against potentially harmful code patterns. Please ensure you have thoroughly reviewed the changes beforehand.

Thanks.

@codecov

codecov Bot commented Jul 30, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 78.57%. Comparing base (a2aa910) to head (d07be86).

Additional details and impacted files
@@             Coverage Diff              @@
##                3.8    #1449      +/-   ##
============================================
+ Coverage     78.52%   78.57%   +0.04%     
  Complexity     1315     1315              
============================================
  Files           106      106              
  Lines          6045     6045              
  Branches        647      647              
============================================
+ Hits           4747     4750       +3     
+ Misses         1008     1004       -4     
- Partials        290      291       +1     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Signed-off-by: shreyah963 <shreyab963@gmail.com>
Signed-off-by: Peter Zhu <zhujiaxi@amazon.com>
@peterzhuamazon peterzhuamazon added the skip-diff-analyzer Maintainer to skip code-diff-analyzer check, after reviewing issues in AI analysis. label Jul 31, 2026
@peterzhuamazon

Copy link
Copy Markdown
Member

Expected new mirror for gradle plugins.

@peterzhuamazon
peterzhuamazon merged commit 2b114f5 into opensearch-project:3.8 Jul 31, 2026
47 of 48 checks passed
peterzhuamazon added a commit that referenced this pull request Jul 31, 2026
…n (flow-framework) (#1451)

Add ci.opensearch.org/m2/ mirror for plugin resolution (flow-framework) (#1449)

* Add ci.opensearch.org/m2/ mirror for plugin resolution (flow-framework)



* Address order issues



---------




(cherry picked from commit 2b114f5)

Signed-off-by: shreyah963 <shreyab963@gmail.com>
Signed-off-by: Peter Zhu <zhujiaxi@amazon.com>
Signed-off-by: opensearch-ci-bot <opensearch-infra@amazon.com>
Co-authored-by: Shreya Bhatta <shreyab963@gmail.com>
Co-authored-by: Peter Zhu <zhujiaxi@amazon.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport main skip-changelog skip-diff-analyzer Maintainer to skip code-diff-analyzer check, after reviewing issues in AI analysis.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants