Fix some security issues by ZePan110 · Pull Request #2289 · opea-project/GenAIExamples

ZePan110 · 2025-09-25T07:46:20Z

Description

Fix some security issues.

Issues

List the issue or RFC link this PR is working on. If there is no such link, please mark it as n/a.

Type of change

List the type of change like below. Please delete options that are not relevant.

Bug fix (non-breaking change which fixes an issue)
New feature (non-breaking change which adds new functionality)
Breaking change (fix or feature that would break existing design and interface)
Others (enhancement, documentation, validation, etc.)

Dependencies

List the newly introduced 3rd party dependency if exists.

Tests

docker and helm test
https://github.com/opea-project/GenAIExamples/actions/runs/18516106845
trivy test
https://github.com/opea-project/GenAIExamples/actions/runs/18514829398
oneclick
http://github.com/opea-project/GenAIExamples/actions/runs/18519811203

Signed-off-by: ZePan110 <[email protected]>

github-actions · 2025-09-25T07:46:32Z

Dependency Review

✅ No vulnerabilities or license issues found.

Scanned Files

.github/workflows/_build_image.yml
.github/workflows/_get-image-list.yml
.github/workflows/_get-test-matrix.yml
.github/workflows/_helm-e2e.yml
.github/workflows/_run-docker-compose.yml
.github/workflows/_run-one-click.yml
.github/workflows/_trivy-scan.yml
.github/workflows/check-online-doc-build.yml
.github/workflows/dockerhub-description.yml
.github/workflows/manual-docker-scan.yml
.github/workflows/manual-freeze-tag.yml
.github/workflows/mix-trellix.yml
.github/workflows/pr-chart-e2e.yml
.github/workflows/pr-check-duplicated-image.yml
.github/workflows/pr-code-scan.yml
.github/workflows/pr-dependency-review.yml
.github/workflows/pr-dockerfile-path-and-build-yaml-scan.yml
.github/workflows/pr-image-size.yml
.github/workflows/pr-link-path-scan.yml
.github/workflows/push-images-path-detection.yml
.github/workflows/push-infra-issue-creation.yml
.github/workflows/scorecard.yml
.github/workflows/weekly-one-click-test.yml
.github/workflows/weekly-update-images.yml

Copilot

Pull Request Overview

This PR appears to be a test update that modifies testing scripts and CI workflow configurations. The changes focus on updating dependency versions and improving test execution reliability.

Updates Playwright version from unspecified to 1.44.0 with explicit version pinning
Adds SHA256 hash pinning to GitHub Actions checkout action for enhanced security
Removes redundant npm install command in favor of npm ci for more reliable builds

Reviewed Changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File	Description
ChatQnA/tests/test_compose_openeuler_on_xeon.sh	Updates Playwright commands to use specific version 1.44.0 and removes redundant npm install
.github/workflows/weekly-one-click-test.yml	Adds SHA256 hash to checkout action for security pinning

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

Signed-off-by: ZePan110 <[email protected]>

…mples into ze-fix/sec Signed-off-by: ZePan110 <[email protected]>

Signed-off-by: ZePan110 <[email protected]>

…mples into ze-fix/sec

for more information, see https://pre-commit.ci

Signed-off-by: ZePan110 <[email protected]>

…mples into ze-fix/sec

Signed-off-by: ZePan110 <[email protected]>

for more information, see https://pre-commit.ci

…mples into ze-fix/sec

ZePan110 · 2025-10-20T06:55:21Z

Due to the offline status of the epyc CI machine, the CI test timed out and failed

Signed-off-by: ZePan110 <[email protected]> Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com> Signed-off-by: Yao, Qing <[email protected]>

Signed-off-by: ZePan110 <[email protected]> Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com> Signed-off-by: cogniware-devops <[email protected]>

test

3dcdf12

Signed-off-by: ZePan110 <[email protected]>

ZePan110 requested a review from lvliang-intel as a code owner September 25, 2025 07:46

Copilot AI review requested due to automatic review settings September 25, 2025 07:46

ZePan110 added the WIP label Sep 25, 2025

ZePan110 requested review from chensuyue and letonghan as code owners September 25, 2025 07:46

Copilot AI reviewed Sep 25, 2025

View reviewed changes

Comment thread .github/workflows/weekly-one-click-test.yml Outdated

WIP

c7043a4

Signed-off-by: ZePan110 <[email protected]>

ZePan110 requested review from Spycsh, WenjiaoYue, ftian1, lkk12014402, minmin-intel, rbrugaro and yao531441 as code owners September 25, 2025 08:49

ZePan110 added 4 commits September 25, 2025 16:56

WIP

735f0c4

Signed-off-by: ZePan110 <[email protected]>

Remove sha256

5bcb1f8

Signed-off-by: ZePan110 <[email protected]>

Merge branch 'ze-fix/sec' of https://github.com/opea-project/GenAIExa…

1160ecf

…mples into ze-fix/sec Signed-off-by: ZePan110 <[email protected]>

c

ef83378

Signed-off-by: ZePan110 <[email protected]>

ZePan110 force-pushed the ze-fix/sec branch from 4011ca0 to b39ab88 Compare September 26, 2025 07:31

Fix

5bd4674

Signed-off-by: ZePan110 <[email protected]>

ZePan110 force-pushed the ze-fix/sec branch from b39ab88 to 5bd4674 Compare September 26, 2025 07:34

Merge branch 'main' into ze-fix/sec

5aba955

ZePan110 changed the title ~~test~~ Fix some security issues Oct 9, 2025

ZePan110 added 3 commits October 15, 2025 10:31

Fix issue

1d72856

Signed-off-by: ZePan110 <[email protected]>

Fix

b1d7f0d

Signed-off-by: ZePan110 <[email protected]>

Fix

5da2c78

Signed-off-by: ZePan110 <[email protected]>

ZePan110 force-pushed the ze-fix/sec branch from 4a3fb6b to 5da2c78 Compare October 15, 2025 05:30

fix

b8f861e

Signed-off-by: ZePan110 <[email protected]>

ZePan110 and others added 10 commits October 16, 2025 10:00

Extend waiting time

b6e58ae

Signed-off-by: ZePan110 <[email protected]>

Merge branch 'ze-fix/sec' of https://github.com/opea-project/GenAIExa…

20cee56

…mples into ze-fix/sec

[pre-commit.ci] auto fixes from pre-commit.com hooks

7d60a1d

for more information, see https://pre-commit.ci

Fix Vulnerabilities

f02decc

Signed-off-by: ZePan110 <[email protected]>

Merge branch 'ze-fix/sec' of https://github.com/opea-project/GenAIExa…

d10a0e2

…mples into ze-fix/sec

Remove oneclick/requirements changes

7135431

Signed-off-by: ZePan110 <[email protected]>

[pre-commit.ci] auto fixes from pre-commit.com hooks

5e4b769

for more information, see https://pre-commit.ci

Merge branch 'main' into ze-fix/sec

ad6cacb

Merge branch 'main' into ze-fix/sec

9a76890

Merge branch 'ze-fix/sec' of https://github.com/opea-project/GenAIExa…

e5ebc7e

…mples into ze-fix/sec

ZePan110 force-pushed the ze-fix/sec branch 2 times, most recently from dc45a1f to e5ebc7e Compare October 20, 2025 02:27

joshuayao approved these changes Oct 21, 2025

View reviewed changes

chensuyue approved these changes Nov 3, 2025

View reviewed changes

ZePan110 merged commit 03416c3 into main Nov 3, 2025
41 of 45 checks passed

ZePan110 deleted the ze-fix/sec branch November 3, 2025 08:45

yao531441 pushed a commit that referenced this pull request Nov 4, 2025

Fix some security issues (#2289)

b98a09d

Signed-off-by: ZePan110 <[email protected]> Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com> Signed-off-by: Yao, Qing <[email protected]>

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Fix some security issues#2289

Fix some security issues#2289
ZePan110 merged 24 commits intomainfrom
ze-fix/sec

ZePan110 commented Sep 25, 2025 •

edited

Loading

Uh oh!

github-actions Bot commented Sep 25, 2025 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

ZePan110 commented Oct 20, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Conversation

ZePan110 commented Sep 25, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description

Issues

Type of change

Dependencies

Tests

Uh oh!

github-actions Bot commented Sep 25, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Dependency Review

Scanned Files

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull Request Overview

Reviewed Changes

Uh oh!

Uh oh!

ZePan110 commented Oct 20, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

ZePan110 commented Sep 25, 2025 •

edited

Loading

github-actions Bot commented Sep 25, 2025 •

edited

Loading