fix: Core is stuck with request to route with Key #1327

[astsiapanay]

No description provided.

[ai-dial-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 22 package(s) with unknown licenses.
• ⚠️ 3 packages with OpenSSF Scorecard issues.

See the Details below.

License Issues

settings.gradle

Package	Version	License	Issue Type
com.gradle:common-custom-user-data-gradle-plugin	2.1	Null	Unknown License
com.gradle:develocity-gradle-plugin	4.2	Null	Unknown License
org.apache.jclouds.api:atmos	2.7.3	Null	Unknown License
org.apache.jclouds.api:filesystem	2.7.3	Null	Unknown License
org.apache.jclouds.api:glacier	2.7.3	Null	Unknown License
org.apache.jclouds.api:oauth	2.7.3	Null	Unknown License
org.apache.jclouds.api:openstack-keystone	2.7.3	Null	Unknown License
org.apache.jclouds.api:openstack-swift	2.7.3	Null	Unknown License
org.apache.jclouds.api:rackspace-cloudfiles	2.7.3	Null	Unknown License
org.apache.jclouds.api:rackspace-cloudidentity	2.7.3	Null	Unknown License
org.apache.jclouds.api:s3	2.7.3	Null	Unknown License
org.apache.jclouds.api:sts	2.7.3	Null	Unknown License
org.apache.jclouds.common:googlecloud	2.7.3	Null	Unknown License
org.apache.jclouds.provider:aws-s3	2.7.3	Null	Unknown License
org.apache.jclouds.provider:azureblob	2.7.3	Null	Unknown License
org.apache.jclouds.provider:b2	2.7.3	Null	Unknown License
org.apache.jclouds.provider:google-cloud-storage	2.7.3	Null	Unknown License
org.apache.jclouds.provider:rackspace-cloudfiles-uk	2.7.3	Null	Unknown License
org.apache.jclouds.provider:rackspace-cloudfiles-us	2.7.3	Null	Unknown License
org.apache.jclouds:jclouds-allblobstore	2.7.3	Null	Unknown License
org.apache.jclouds:jclouds-blobstore	2.7.3	Null	Unknown License
org.apache.jclouds:jclouds-core	2.7.3	Null	Unknown License

OpenSSF Scorecard

Scorecard details

Package	Version	Score	Details
maven/aopalliance:aopalliance	1.0	Unknown	Unknown
maven/com.google.inject.extensions:guice-assistedinject	7.0.0	🟢 5.2	Details Check Score Reason Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Packaging ⚠️ -1 packaging workflow not detected Maintained ⚠️ 2 3 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 2 Code-Review ⚠️ 1 Found 5/29 approved changesets -- score normalized to 1 Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies 🟢 10 all dependencies are pinned Fuzzing 🟢 10 project is fuzzed Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Signed-Releases ⚠️ -1 no releases found Security-Policy 🟢 10 security policy file detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Vulnerabilities ⚠️ 1 9 existing vulnerabilities detected
maven/com.google.inject:guice	7.0.0	🟢 5.2	Details Check Score Reason Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Packaging ⚠️ -1 packaging workflow not detected Maintained ⚠️ 2 3 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 2 Code-Review ⚠️ 1 Found 5/29 approved changesets -- score normalized to 1 Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies 🟢 10 all dependencies are pinned Fuzzing 🟢 10 project is fuzzed Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Signed-Releases ⚠️ -1 no releases found Security-Policy 🟢 10 security policy file detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Vulnerabilities ⚠️ 1 9 existing vulnerabilities detected
maven/com.gradle:common-custom-user-data-gradle-plugin	2.1	Unknown	Unknown
maven/com.gradle:develocity-gradle-plugin	4.2	Unknown	Unknown
maven/com.sun.istack:istack-commons-runtime	4.1.2	🟢 5.5	Details Check Score Reason Packaging ⚠️ -1 packaging workflow not detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Code-Review 🟢 10 all changesets reviewed Maintained ⚠️ 0 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 Binary-Artifacts 🟢 10 no binaries found in the repo Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Security-Policy 🟢 10 security policy file detected Vulnerabilities 🟢 10 0 existing vulnerabilities detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
maven/jakarta.activation:jakarta.activation-api	2.1.3	Unknown	Unknown
maven/jakarta.annotation:jakarta.annotation-api	2.0.0	Unknown	Unknown
maven/jakarta.inject:jakarta.inject-api	2.0.1	Unknown	Unknown
maven/jakarta.ws.rs:jakarta.ws.rs-api	3.0.0	Unknown	Unknown
maven/jakarta.xml.bind:jakarta.xml.bind-api	4.0.2	Unknown	Unknown
maven/org.apache.jclouds.api:atmos	2.7.3	Unknown	Unknown
maven/org.apache.jclouds.api:filesystem	2.7.3	Unknown	Unknown
maven/org.apache.jclouds.api:glacier	2.7.3	Unknown	Unknown
maven/org.apache.jclouds.api:oauth	2.7.3	Unknown	Unknown
maven/org.apache.jclouds.api:openstack-keystone	2.7.3	Unknown	Unknown
maven/org.apache.jclouds.api:openstack-swift	2.7.3	Unknown	Unknown
maven/org.apache.jclouds.api:rackspace-cloudfiles	2.7.3	Unknown	Unknown
maven/org.apache.jclouds.api:rackspace-cloudidentity	2.7.3	Unknown	Unknown
maven/org.apache.jclouds.api:s3	2.7.3	Unknown	Unknown
maven/org.apache.jclouds.api:sts	2.7.3	Unknown	Unknown
maven/org.apache.jclouds.common:googlecloud	2.7.3	Unknown	Unknown
maven/org.apache.jclouds.provider:aws-s3	2.7.3	Unknown	Unknown
maven/org.apache.jclouds.provider:azureblob	2.7.3	Unknown	Unknown
maven/org.apache.jclouds.provider:b2	2.7.3	Unknown	Unknown
maven/org.apache.jclouds.provider:google-cloud-storage	2.7.3	Unknown	Unknown
maven/org.apache.jclouds.provider:rackspace-cloudfiles-uk	2.7.3	Unknown	Unknown
maven/org.apache.jclouds.provider:rackspace-cloudfiles-us	2.7.3	Unknown	Unknown
maven/org.apache.jclouds:jclouds-allblobstore	2.7.3	⚠️ 1.3	Details Check Score Reason Packaging ⚠️ -1 packaging workflow not detected Maintained ⚠️ 0 project is archived Code-Review ⚠️ 0 Found 2/30 approved changesets -- score normalized to 0 Token-Permissions ⚠️ -1 No tokens found Dangerous-Workflow ⚠️ -1 no workflows found CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Security-Policy ⚠️ 0 security policy file not detected License ⚠️ 0 license file not detected Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches Signed-Releases ⚠️ -1 no releases found Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies ⚠️ -1 no dependencies found Fuzzing ⚠️ 0 project is not fuzzed SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Vulnerabilities ⚠️ 0 38 existing vulnerabilities detected
maven/org.apache.jclouds:jclouds-blobstore	2.7.3	⚠️ 1.3	Details Check Score Reason Packaging ⚠️ -1 packaging workflow not detected Maintained ⚠️ 0 project is archived Code-Review ⚠️ 0 Found 2/30 approved changesets -- score normalized to 0 Token-Permissions ⚠️ -1 No tokens found Dangerous-Workflow ⚠️ -1 no workflows found CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Security-Policy ⚠️ 0 security policy file not detected License ⚠️ 0 license file not detected Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches Signed-Releases ⚠️ -1 no releases found Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies ⚠️ -1 no dependencies found Fuzzing ⚠️ 0 project is not fuzzed SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Vulnerabilities ⚠️ 0 38 existing vulnerabilities detected
maven/org.apache.jclouds:jclouds-core	2.7.3	⚠️ 1.3	Details Check Score Reason Packaging ⚠️ -1 packaging workflow not detected Maintained ⚠️ 0 project is archived Code-Review ⚠️ 0 Found 2/30 approved changesets -- score normalized to 0 Token-Permissions ⚠️ -1 No tokens found Dangerous-Workflow ⚠️ -1 no workflows found CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Security-Policy ⚠️ 0 security policy file not detected License ⚠️ 0 license file not detected Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches Signed-Releases ⚠️ -1 no releases found Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies ⚠️ -1 no dependencies found Fuzzing ⚠️ 0 project is not fuzzed SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Vulnerabilities ⚠️ 0 38 existing vulnerabilities detected
maven/org.checkerframework:checker-qual	3.43.0	🟢 3.7	Details Check Score Reason Code-Review 🟢 4 Found 8/20 approved changesets -- score normalized to 4 Packaging ⚠️ -1 packaging workflow not detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Maintained 🟢 10 30 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10 Token-Permissions ⚠️ -1 No tokens found Dangerous-Workflow ⚠️ -1 no workflows found Security-Policy ⚠️ 0 security policy file not detected License 🟢 9 license file detected Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Signed-Releases ⚠️ 0 Project has not signed or included provenance with any releases. Binary-Artifacts ⚠️ -1 internal error: failure checking for Gradle wrapper validating Action: failure listing workflow runs: internal error: ListWorkflowRunsByFileName: GET https://api.github.com/repos/typetools/checker-framework/actions/workflows/gradle-wrapper-validation.yml-DISABLED/runs?status=success: 404 Not Found [] Fuzzing ⚠️ 0 project is not fuzzed Vulnerabilities 🟢 10 0 existing vulnerabilities detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0
maven/org.eclipse.angus:angus-activation	2.0.2	🟢 3.3	Details Check Score Reason Code-Review ⚠️ 2 Found 5/22 approved changesets -- score normalized to 2 Packaging ⚠️ -1 packaging workflow not detected Binary-Artifacts 🟢 10 no binaries found in the repo Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Maintained ⚠️ 0 0 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 0 Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches Security-Policy 🟢 10 security policy file detected Vulnerabilities ⚠️ 0 22 existing vulnerabilities detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
maven/org.glassfish.jaxb:jaxb-core	4.0.5	🟢 6.3	Details Check Score Reason CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Packaging ⚠️ -1 packaging workflow not detected Maintained 🟢 6 4 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 6 Code-Review 🟢 7 Found 18/24 approved changesets -- score normalized to 7 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions License 🟢 10 license file detected Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches Security-Policy 🟢 10 security policy file detected Signed-Releases ⚠️ -1 no releases found Binary-Artifacts 🟢 10 no binaries found in the repo Fuzzing 🟢 10 project is fuzzed Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 SAST 🟢 7 SAST tool detected but not run on all commits Vulnerabilities 🟢 10 0 existing vulnerabilities detected
maven/org.glassfish.jaxb:jaxb-runtime	4.0.5	🟢 6.3	Details Check Score Reason CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Packaging ⚠️ -1 packaging workflow not detected Maintained 🟢 6 4 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 6 Code-Review 🟢 7 Found 18/24 approved changesets -- score normalized to 7 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions License 🟢 10 license file detected Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches Security-Policy 🟢 10 security policy file detected Signed-Releases ⚠️ -1 no releases found Binary-Artifacts 🟢 10 no binaries found in the repo Fuzzing 🟢 10 project is fuzzed Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 SAST 🟢 7 SAST tool detected but not run on all commits Vulnerabilities 🟢 10 0 existing vulnerabilities detected
maven/org.glassfish.jaxb:txw2	4.0.5	🟢 6.3	Details Check Score Reason CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Packaging ⚠️ -1 packaging workflow not detected Maintained 🟢 6 4 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 6 Code-Review 🟢 7 Found 18/24 approved changesets -- score normalized to 7 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions License 🟢 10 license file detected Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches Security-Policy 🟢 10 security policy file detected Signed-Releases ⚠️ -1 no releases found Binary-Artifacts 🟢 10 no binaries found in the repo Fuzzing 🟢 10 project is fuzzed Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 SAST 🟢 7 SAST tool detected but not run on all commits Vulnerabilities 🟢 10 0 existing vulnerabilities detected

Scanned Files

• settings.gradle

[astsiapanay]

/deploy-review

GitHub actions run: 21436940140

Stage	Status
deploy-review	Failed ❌
matrix.application	Skipped ➖

[astsiapanay]

/deploy-review

GitHub actions run: 21438716169

Stage	Status
deploy-review	Success ✅
chat	Failed ❌

[ai-dial-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 2 package(s) with unknown licenses.

See the Details below.

License Issues

settings.gradle

Package	Version	License	Issue Type
com.gradle:common-custom-user-data-gradle-plugin	2.1	Null	Unknown License
com.gradle:develocity-gradle-plugin	4.2	Null	Unknown License

OpenSSF Scorecard

Package	Version	Score	Details
maven/com.gradle:common-custom-user-data-gradle-plugin	2.1	Unknown	Unknown
maven/com.gradle:develocity-gradle-plugin	4.2	Unknown	Unknown

Scanned Files

• settings.gradle