Repository navigation
Use the CVE file override for Java and Python SCA tests - #8224
Draft
florentinl wants to merge 14 commits into
Draft
florentinl wants to merge 14 commits into
florentinl wants to merge 14 commits into
Conversation
Contributor
|
|
This was referenced Oct 29, 2026
❌ ErrorsYour PR has failed checks. Please review the issues below and take necessary action before merging. 🚦 15 Pipeline jobs failed
ℹ️ InfoNo other issues found (see more)🧪 All tests passed Useful? React with 👍 / 👎 This comment will be updated automatically if new data arrives.🔗 Commit SHA: b59f48c | Docs | View more details | Give us feedback! |
florentinl
changed the title
florentinl
changed the title
florentinl
force-pushed
the
flabel/python-lambda-sca
branch
from
November 6, 2026 10:17
d247d83 to
fedcecf
Compare
gh-worker-dd-mergequeue-cf854d Bot
pushed a commit
to DataDog/dd-trace-py
that referenced
this pull request
Nov 9, 2026
## Description Enable SCA reachability in AWS Lambda. Requires the [Lambda startup change](DataDog/datadog-lambda-python#880); [system-tests coverage](DataDog/system-tests#8224) is separate. ## Testing 127 SCA tests, 12 regular/Lambda Flask telemetry cases, and five Lambda reachability checks pass on Colima. The Lambda reachability case fails with the old exclusion restored. Lint passes. ## Risks Lambda cold-start overhead is unmeasured. Co-authored-by: florentin.labelle <florentin.labelle@datadoghq.com>
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Exercise SCA reachability with language-native synthetic advisories supplied through
_DD_APPSEC_SCA_CVE_FILE, without modifying installed tracer files or Java bootstrap options.Manifests enable all five tests for Java and Java Lambda from
v1.69.0-SNAPSHOT, which includes dd-trace-java#13285, and regular Python fromv4.17.0-rc1. Test activation depends on the manifests rather thanSYSTEM_TESTS_DEV_MODE. Python Lambda remains gated on dd-trace-py#21366 and datadog-lambda-python#880.Testing
All 130 related manifest, scenario and CI-selection tests pass, along with repository formatting and checks. Another 120 activation checks verify manifest resolution for supported and unsupported builds with dev mode unset, false and true.
CI on the preceding head
84680b6abpassed all five SCA tests for both Java and Java Lambda using master artifact1.69.0-SNAPSHOT+1724636081. The final Python activation-guard removal is covered by the local checks above; end-to-end CI for that update is pending.