Audit report: 2024-12-13 18:50:04

Clients/github⁄1616846|marco-c⁄cli-WLfcVX

@@ -305,6 +305,7 @@
     "secrets:set:worker-pool:proj-bugbug/*",
     "secrets:set:worker-pool:proj-mozci/*",
     "secrets:set:worker-pool:proj-relman/*",
+    "web:read-pulse",
     "worker-manager:create-worker:proj-bugbug/*",
     "worker-manager:create-worker:proj-mozci/*",
     "worker-manager:create-worker:proj-relman/*",

Clients/github⁄1616846|marco-c⁄cli-WLfcVZ

@@ -305,6 +305,7 @@
     "secrets:set:worker-pool:proj-bugbug/*",
     "secrets:set:worker-pool:proj-mozci/*",
     "secrets:set:worker-pool:proj-relman/*",
+    "web:read-pulse",
     "worker-manager:create-worker:proj-bugbug/*",
     "worker-manager:create-worker:proj-mozci/*",
     "worker-manager:create-worker:proj-relman/*",

Clients/github⁄1735164|pyoor⁄cli-Yf2SKw

@@ -0,0 +1,303 @@
+{
+  "clientId": "github/1735164|pyoor/cli-Yf2SKw",
+  "created": "2024-12-13T16:36:12.551Z",
+  "deleteOnExpiration": true,
+  "description": "Temporary client for use on the command line",
+  "disabled": false,
+  "expandedScopes": [
+    "assume:anonymous",
+    "assume:github-team:MozillaSecurity/fuzzing-team-reviewers",
+    "assume:github-team:MozillaSecurity/mozilla-fuzzers",
+    "assume:github-team:MozillaSecurity/mozillasecurity-admins",
+    "assume:github-team:MozillaSecurity/tc-admin",
+    "assume:github-team:mozilla/foundation-security-advisories-maintenance",
+    "assume:github-team:mozilla/gecko-webidl-js",
+    "assume:hook-id:project-fuzzing/*",
+    "assume:login-identity:github/1735164|pyoor",
+    "assume:project-admin:fuzzing",
+    "assume:project:fuzzing:*",
+    "assume:repo-admin:github.com/MozillaSecurity/*",
+    "assume:repo:github.com/MozillaSecurity/*",
+    "assume:worker-id:proj-fuzzing/*",
+    "assume:worker-pool:proj-fuzzing/*",
+    "auth:create-client:github/1735164|pyoor/*",
+    "auth:create-client:project/fuzzing/*",
+    "auth:create-role:hook-id:project-fuzzing/*",
+    "auth:create-role:project:fuzzing:*",
+    "auth:create-role:repo:github.com/MozillaSecurity/*",
+    "auth:current-scopes",
+    "auth:delete-client:github/1735164|pyoor/*",
+    "auth:delete-client:project/fuzzing/*",
+    "auth:delete-role:hook-id:project-fuzzing/*",
+    "auth:delete-role:project:fuzzing:*",
+    "auth:delete-role:repo:github.com/MozillaSecurity/*",
+    "auth:disable-client:project/fuzzing/*",
+    "auth:enable-client:project/fuzzing/*",
+    "auth:expand-scopes",
+    "auth:get-client:*",
+    "auth:get-role:*",
+    "auth:list-clients",
+    "auth:list-roles",
+    "auth:reset-access-token:github/1735164|pyoor/*",
+    "auth:reset-access-token:project/fuzzing/*",
+    "auth:sentry:docker-worker",
+    "auth:sentry:generic-worker",
+    "auth:update-client:github/1735164|pyoor/*",
+    "auth:update-client:project/fuzzing/*",
+    "auth:update-role:hook-id:project-fuzzing/*",
+    "auth:update-role:project:fuzzing:*",
+    "auth:update-role:repo:github.com/MozillaSecurity/*",
+    "auth:websocktunnel-token:communitytc/*",
+    "docker-worker:cache:*",
+    "docker-worker:capability:device:hostSharedMemory",
+    "docker-worker:capability:device:kvm",
+    "docker-worker:capability:device:loopbackAudio",
+    "docker-worker:capability:disableSeccomp",
+    "docker-worker:capability:privileged",
+    "generic-worker:allow-rdp:proj-fuzzing/*",
+    "generic-worker:cache:*",
+    "generic-worker:capability:device:hostSharedMemory",
+    "generic-worker:capability:device:loopbackAudio",
+    "generic-worker:capability:privileged",
+    "generic-worker:os-group:proj-fuzzing/*",
+    "generic-worker:run-as-administrator:proj-fuzzing/*",
+    "github:get-badge:*",
+    "github:get-repository:*",
+    "github:latest-status:*",
+    "github:list-builds",
+    "hooks:get:*",
+    "hooks:list-hooks:*",
+    "hooks:list-last-fires:*",
+    "hooks:modify-hook:project-fuzzing/*",
+    "hooks:status:*",
+    "hooks:trigger-hook:project-fuzzing/*",
+    "index:find-task:*",
+    "index:insert-task:project.fuzzing.*",
+    "index:list-namespaces:*",
+    "index:list-tasks:*",
+    "notify:email:*",
+    "notify:irc-channel:*",
+    "notify:irc-user:*",
+    "project:fuzzing:*",
+    "purge-cache:all-purge-requests",
+    "purge-cache:proj-fuzzing/*",
+    "purge-cache:purge-requests:*",
+    "queue:cancel-task:-/*",
+    "queue:cancel-task:fuzzing/*",
+    "queue:cancel-task:taskcluster-github/*",
+    "queue:cancel-task:taskcluster-ui/*",
+    "queue:claim-work:proj-fuzzing/*",
+    "queue:claimed-list:*",
+    "queue:create-task:high:proj-fuzzing/*",
+    "queue:create-task:highest:built-in/fail",
+    "queue:create-task:highest:built-in/succeed",
+    "queue:create-task:highest:proj-fuzzing/*",
+    "queue:create-task:highest:proj-misc/tutorial",
+    "queue:create-task:low:proj-fuzzing/*",
+    "queue:create-task:lowest:proj-fuzzing/*",
+    "queue:create-task:medium:proj-fuzzing/*",
+    "queue:create-task:project:none",
+    "queue:create-task:very-high:proj-fuzzing/*",
+    "queue:create-task:very-low:proj-fuzzing/*",
+    "queue:get-artifact:login-identity/github/1735164|pyoor/*",
+    "queue:get-artifact:private/docker-worker/*",
+    "queue:get-artifact:private/generic-worker/*",
+    "queue:get-artifact:project/fuzzing/*",
+    "queue:get-artifact:public/*",
+    "queue:get-provisioner:*",
+    "queue:get-task:*",
+    "queue:get-worker-type:*",
+    "queue:get-worker:*",
+    "queue:list-artifacts:*",
+    "queue:list-dependent-tasks:*",
+    "queue:list-provisioners",
+    "queue:list-task-group:*",
+    "queue:list-worker-types:*",
+    "queue:list-workers:*",
+    "queue:pending-count:*",
+    "queue:pending-list:*",
+    "queue:quarantine-worker:proj-fuzzing/*",
+    "queue:rerun-task:-/*",
+    "queue:rerun-task:taskcluster-github/*",
+    "queue:rerun-task:taskcluster-ui/*",
+    "queue:route:checks",
+    "queue:route:index.project.fuzzing.*",
+    "queue:route:notify.*",
+    "queue:schedule-task:-/*",
+    "queue:schedule-task:taskcluster-github/*",
+    "queue:schedule-task:taskcluster-ui/*",
+    "queue:scheduler-id:-",
+    "queue:scheduler-id:fuzzing",
+    "queue:scheduler-id:taskcluster-github",
+    "queue:scheduler-id:taskcluster-ui",
+    "queue:status:*",
+    "queue:worker-id:proj-fuzzing/*",
+    "secrets:get:project/fuzzing/*",
+    "secrets:get:worker-pool:proj-fuzzing/*",
+    "secrets:list-secrets",
+    "secrets:set:project/fuzzing/*",
+    "secrets:set:worker-pool:proj-fuzzing/*",
+    "web:read-pulse",
+    "worker-manager:create-worker:proj-fuzzing/*",
+    "worker-manager:get-worker-pool:*",
+    "worker-manager:get-worker:*",
+    "worker-manager:list-providers",
+    "worker-manager:list-worker-pool-errors:*",
+    "worker-manager:list-worker-pools",
+    "worker-manager:list-workers:*",
+    "worker-manager:manage-worker-pool:proj-fuzzing/*",
+    "worker-manager:provider:community-tc-workers-*",
+    "worker-manager:provider:null-provider",
+    "worker-manager:remove-worker:proj-fuzzing/*"
+  ],
+  "expires": "2024-12-14T16:36:10.211Z",
+  "lastDateUsed": "1977-08-19T16:00:00.000Z",
+  "lastModified": "2024-12-13T16:36:12.551Z",
+  "lastRotated": "2024-12-13T16:36:12.551Z",
+  "scopes": [
+    "assume:anonymous",
+    "assume:github-team:MozillaSecurity/fuzzing-team-reviewers",
+    "assume:github-team:MozillaSecurity/mozilla-fuzzers",
+    "assume:github-team:MozillaSecurity/mozillasecurity-admins",
+    "assume:github-team:MozillaSecurity/tc-admin",
+    "assume:github-team:mozilla/foundation-security-advisories-maintenance",
+    "assume:github-team:mozilla/gecko-webidl-js",
+    "assume:hook-id:project-fuzzing/*",
+    "assume:login-identity:github/1735164|pyoor",
+    "assume:project-admin:fuzzing",
+    "assume:project:fuzzing:*",
+    "assume:repo-admin:github.com/MozillaSecurity/*",
+    "assume:repo:github.com/MozillaSecurity/*",
+    "assume:worker-id:proj-fuzzing/*",
+    "assume:worker-pool:proj-fuzzing/*",
+    "auth:create-client:github/1735164|pyoor/*",
+    "auth:create-client:project/fuzzing/*",
+    "auth:create-role:hook-id:project-fuzzing/*",
+    "auth:create-role:project:fuzzing:*",
+    "auth:create-role:repo:github.com/MozillaSecurity/*",
+    "auth:current-scopes",
+    "auth:delete-client:github/1735164|pyoor/*",
+    "auth:delete-client:project/fuzzing/*",
+    "auth:delete-role:hook-id:project-fuzzing/*",
+    "auth:delete-role:project:fuzzing:*",
+    "auth:delete-role:repo:github.com/MozillaSecurity/*",
+    "auth:disable-client:project/fuzzing/*",
+    "auth:enable-client:project/fuzzing/*",
+    "auth:expand-scopes",
+    "auth:get-client:*",
+    "auth:get-role:*",
+    "auth:list-clients",
+    "auth:list-roles",
+    "auth:reset-access-token:github/1735164|pyoor/*",
+    "auth:reset-access-token:project/fuzzing/*",
+    "auth:sentry:docker-worker",
+    "auth:sentry:generic-worker",
+    "auth:update-client:github/1735164|pyoor/*",
+    "auth:update-client:project/fuzzing/*",
+    "auth:update-role:hook-id:project-fuzzing/*",
+    "auth:update-role:project:fuzzing:*",
+    "auth:update-role:repo:github.com/MozillaSecurity/*",
+    "auth:websocktunnel-token:communitytc/*",
+    "docker-worker:cache:*",
+    "docker-worker:capability:device:hostSharedMemory",
+    "docker-worker:capability:device:kvm",
+    "docker-worker:capability:device:loopbackAudio",
+    "docker-worker:capability:disableSeccomp",
+    "docker-worker:capability:privileged",
+    "generic-worker:allow-rdp:proj-fuzzing/*",
+    "generic-worker:cache:*",
+    "generic-worker:capability:device:hostSharedMemory",
+    "generic-worker:capability:device:loopbackAudio",
+    "generic-worker:capability:privileged",
+    "generic-worker:os-group:proj-fuzzing/*",
+    "generic-worker:run-as-administrator:proj-fuzzing/*",
+    "github:get-badge:*",
+    "github:get-repository:*",
+    "github:latest-status:*",
+    "github:list-builds",
+    "hooks:get:*",
+    "hooks:list-hooks:*",
+    "hooks:list-last-fires:*",
+    "hooks:modify-hook:project-fuzzing/*",
+    "hooks:status:*",
+    "hooks:trigger-hook:project-fuzzing/*",
+    "index:find-task:*",
+    "index:insert-task:project.fuzzing.*",
+    "index:list-namespaces:*",
+    "index:list-tasks:*",
+    "notify:email:*",
+    "notify:irc-channel:*",
+    "notify:irc-user:*",
+    "project:fuzzing:*",
+    "purge-cache:all-purge-requests",
+    "purge-cache:proj-fuzzing/*",
+    "purge-cache:purge-requests:*",
+    "queue:cancel-task:-/*",
+    "queue:cancel-task:fuzzing/*",
+    "queue:cancel-task:taskcluster-github/*",
+    "queue:cancel-task:taskcluster-ui/*",
+    "queue:claim-work:proj-fuzzing/*",
+    "queue:claimed-list:*",
+    "queue:create-task:high:proj-fuzzing/*",
+    "queue:create-task:highest:built-in/fail",
+    "queue:create-task:highest:built-in/succeed",
+    "queue:create-task:highest:proj-fuzzing/*",
+    "queue:create-task:highest:proj-misc/tutorial",
+    "queue:create-task:low:proj-fuzzing/*",
+    "queue:create-task:lowest:proj-fuzzing/*",
+    "queue:create-task:medium:proj-fuzzing/*",
+    "queue:create-task:project:none",
+    "queue:create-task:very-high:proj-fuzzing/*",
+    "queue:create-task:very-low:proj-fuzzing/*",
+    "queue:get-artifact:login-identity/github/1735164|pyoor/*",
+    "queue:get-artifact:private/docker-worker/*",
+    "queue:get-artifact:private/generic-worker/*",
+    "queue:get-artifact:project/fuzzing/*",
+    "queue:get-artifact:public/*",
+    "queue:get-provisioner:*",
+    "queue:get-task:*",
+    "queue:get-worker-type:*",
+    "queue:get-worker:*",
+    "queue:list-artifacts:*",
+    "queue:list-dependent-tasks:*",
+    "queue:list-provisioners",
+    "queue:list-task-group:*",
+    "queue:list-worker-types:*",
+    "queue:list-workers:*",
+    "queue:pending-count:*",
+    "queue:pending-list:*",
+    "queue:quarantine-worker:proj-fuzzing/*",
+    "queue:rerun-task:-/*",
+    "queue:rerun-task:taskcluster-github/*",
+    "queue:rerun-task:taskcluster-ui/*",
+    "queue:route:checks",
+    "queue:route:index.project.fuzzing.*",
+    "queue:route:notify.*",
+    "queue:schedule-task:-/*",
+    "queue:schedule-task:taskcluster-github/*",
+    "queue:schedule-task:taskcluster-ui/*",
+    "queue:scheduler-id:-",
+    "queue:scheduler-id:fuzzing",
+    "queue:scheduler-id:taskcluster-github",
+    "queue:scheduler-id:taskcluster-ui",
+    "queue:status:*",
+    "queue:worker-id:proj-fuzzing/*",
+    "secrets:get:project/fuzzing/*",
+    "secrets:get:worker-pool:proj-fuzzing/*",
+    "secrets:list-secrets",
+    "secrets:set:project/fuzzing/*",
+    "secrets:set:worker-pool:proj-fuzzing/*",
+    "web:read-pulse",
+    "worker-manager:create-worker:proj-fuzzing/*",
+    "worker-manager:get-worker-pool:*",
+    "worker-manager:get-worker:*",
+    "worker-manager:list-providers",
+    "worker-manager:list-worker-pool-errors:*",
+    "worker-manager:list-worker-pools",
+    "worker-manager:list-workers:*",
+    "worker-manager:manage-worker-pool:proj-fuzzing/*",
+    "worker-manager:provider:community-tc-workers-*",
+    "worker-manager:provider:null-provider",
+    "worker-manager:remove-worker:proj-fuzzing/*"
+  ]
+}

Hooks/project-bugbug/bugbug

@@ -29,10 +29,10 @@
     },
     "payload": {
       "env": {
-        "TAG": "v0.0.563"
+        "TAG": "v0.0.565"
       },
       "cache": {},
-      "image": "mozilla/bugbug-spawn-pipeline:v0.0.563",
+      "image": "mozilla/bugbug-spawn-pipeline:v0.0.565",
       "command": [
         "/usr/local/bin/python3",
         "/code/spawn_pipeline.py",

Hooks/project-bugbug/bugbug-checks

@@ -28,10 +28,10 @@
     },
     "payload": {
       "env": {
-        "TAG": "v0.0.563"
+        "TAG": "v0.0.565"
       },
       "cache": {},
-      "image": "mozilla/bugbug-spawn-pipeline:v0.0.563",
+      "image": "mozilla/bugbug-spawn-pipeline:v0.0.565",
       "command": [
         "/usr/local/bin/python3",
         "/code/spawn_pipeline.py",

Hooks/project-bugbug/bugbug-classify-patch

@@ -33,14 +33,14 @@
             "TC_SECRET_ID": "project/bugbug/production"
           },
           {
-            "TAG": "v0.0.563"
+            "TAG": "v0.0.565"
           }
         ]
       },
       "cache": {
         "bugbug-mercurial-repository": "/cache"
       },
-      "image": "mozilla/bugbug-commit-retrieval:v0.0.563",
+      "image": "mozilla/bugbug-commit-retrieval:v0.0.565",
       "command": [
         "bugbug-classify-commit",
         "regressor",

Hooks/project-bugbug/bugbug-landings-risk-report

@@ -28,10 +28,10 @@
     },
     "payload": {
       "env": {
-        "TAG": "v0.0.563"
+        "TAG": "v0.0.565"
       },
       "cache": {},
-      "image": "mozilla/bugbug-spawn-pipeline:v0.0.563",
+      "image": "mozilla/bugbug-spawn-pipeline:v0.0.565",
       "command": [
         "/usr/local/bin/python3",
         "/code/spawn_pipeline.py",

Hooks/project-bugbug/bugbug-test-select

@@ -38,14 +38,14 @@
             "TC_SECRET_ID": "project/bugbug/production"
           },
           {
-            "TAG": "v0.0.563"
+            "TAG": "v0.0.565"
           }
         ]
       },
       "cache": {
         "bugbug-mercurial-repository": "/cache"
       },
-      "image": "mozilla/bugbug-commit-retrieval:v0.0.563",
+      "image": "mozilla/bugbug-commit-retrieval:v0.0.565",
       "command": [
         "bugbug-classify-commit",
         "testlabelselect",