Started by GitHub push by ti-chi-bot[bot]Started by GitHub push by ti-chi-bot[bot]00230632306355312553121.029421294210847336358635815751b271fa111189bad5238beff6fad1570659804ff1b271fa111189bad5238beff6fad1570659804fforigin/main1b271fa111189bad5238beff6fad1570659804ff1b271fa111189bad5238beff6fad1570659804fforigin/main1b271fa111189bad5238beff6fad1570659804ff1b271fa111189bad5238beff6fad1570659804fforigin/mainhttps://github.com/PingCAP-QE/ci.githttps://do.pingcap.net/jenkins/blue/organizations/jenkins/seed/detail/seed/1575/artifactshttps://do.pingcap.net/jenkins/blue/organizations/jenkins/seed/detail/seed/1575/changeshttps://do.pingcap.net/jenkins/blue/organizations/jenkins/seed/detail/seed/1575/https://do.pingcap.net/jenkins/blue/organizations/jenkins/seed/detail/seed/1575/testsfalse#15755531257187seed #15751575falsefalse15753653834SUCCESS1775209477445https://do.pingcap.net/jenkins/job/seed/1575/default-2lpshpipelines/pingcap/tidb/release-6.5/pull_integration_tidb_tools_test.groovypipelines/pingcap/tidb/release-8.5/pull_integration_mysql_test.groovypipelines/pingcap/tidb/release-9.0-beta/pull_integration_ddl_test.groovypipelines/pingcap/tidb/release-8.5/pull_common_test.groovypipelines/pingcap/tidb/release-7.5/pull_integration_tidb_tools_test.groovypipelines/pingcap/tidb/release-8.1/pull_integration_mysql_test.groovypipelines/pingcap/tidb/latest/pull_integration_ddl_test.groovypipelines/pingcap/tidb/release-8.5/pull_integration_tidb_tools_test.groovypipelines/pingcap/tidb/latest/pull_integration_copr_test.groovypipelines/pingcap/tidb/release-7.5/pull_integration_ddl_test.groovypipelines/pingcap/tidb/release-6.1/pull_integration_tidb_tools_test.groovypipelines/pingcap/tidb/release-7.1/pull_integration_ddl_test.groovypipelines/pingcap/tidb/release-8.1/pull_integration_tidb_tools_test.groovypipelines/pingcap/tidb/release-6.1/pull_integration_copr_test.groovypipelines/pingcap/tidb/release-8.4/pull_mysql_client_test.groovypipelines/pingcap/tidb/release-8.3/pull_integration_common_test.groovypipelines/pingcap/tidb/release-7.1/pull_integration_tidb_tools_test.groovypipelines/pingcap/tidb/release-9.0-beta/pull_common_test.groovypipelines/pingcap/tidb/release-8.2/pull_integration_copr_test.groovypipelines/pingcap/tidb/release-9.0-beta/pull_mysql_client_test.groovypipelines/pingcap/tidb/release-8.1/pull_mysql_client_test.groovypipelines/pingcap/tidb/release-6.5/pull_integration_copr_test.groovypipelines/pingcap/tidb/latest/pull_common_test.groovypipelines/pingcap/tidb/release-7.1/pull_integration_common_test.groovypipelines/pingcap/tidb/release-7.1/pull_integration_binlog_test.groovypipelines/pingcap/tidb/release-8.2/pull_integration_common_test.groovypipelines/pingcap/tidb/release-8.4/pull_integration_mysql_test.groovypipelines/pingcap/tidb/release-9.0-beta/pull_integration_mysql_test.groovypipelines/pingcap/tidb/release-8.3/pull_integration_ddl_test.groovypipelines/pingcap/tidb/release-8.1/pull_integration_ddl_test.groovypipelines/pingcap/tidb/release-6.5-20241101-v6.5.7/pull_integration_ddl_test.groovypipelines/pingcap/tidb/release-6.5/pull_common_test.groovypipelines/pingcap/tidb/release-9.0-beta/pull_integration_tidb_tools_test.groovypipelines/pingcap/tidb/release-8.5/pull_integration_ddl_test.groovypipelines/pingcap/tidb/release-6.5-20241101-v6.5.7/pull_integration_copr_test.groovypipelines/pingcap/tidb/release-6.5/pull_integration_binlog_test.groovypipelines/pingcap/tidb/release-8.5/pull_mysql_client_test.groovypipelines/pingcap/tidb/release-6.5-20241101-v6.5.7/pull_integration_common_test.groovypipelines/pingcap/tidb/release-8.1/pull_integration_copr_test.groovypipelines/pingcap/tidb/release-6.5/pull_integration_common_test.groovypipelines/pingcap/tidb/release-8.5/pull_integration_common_test.groovypipelines/pingcap/tidb/release-8.2/pull_mysql_client_test.groovypipelines/pingcap/tidb/release-7.5/pull_common_test.groovypipelines/pingcap/tidb/release-8.2/pull_common_test.groovypipelines/pingcap/tidb/release-8.1/pull_common_test.groovypipelines/pingcap/tidb/release-9.0-beta/pull_integration_copr_test.groovypipelines/tikv/copr-test/latest/pull_integration_test.groovypipelines/pingcap/tidb/release-8.5/pull_integration_copr_test.groovypipelines/pingcap/tidb/release-6.5-20241101-v6.5.7/pull_integration_mysql_test.groovypipelines/pingcap/tidb/release-7.1/pull_integration_mysql_test.groovypipelines/pingcap/tidb/release-7.1/pull_integration_copr_test.groovypipelines/pingcap/tidb/release-7.5/pull_integration_mysql_test.groovypipelines/pingcap/tidb/release-8.4/pull_common_test.groovypipelines/pingcap/tidb/release-8.4/pull_integration_common_test.groovypipelines/pingcap/tidb/release-8.1/pull_integration_common_test.groovypipelines/pingcap/tidb/release-6.1/pull_integration_common_test.groovypipelines/pingcap/tidb/release-8.1/pull_integration_binlog_test.groovypipelines/pingcap/tidb/release-7.5/pull_mysql_client_test.groovypipelines/pingcap/tidb/release-9.0-beta/pull_integration_common_test.groovypipelines/pingcap/tidb/release-6.1/pull_integration_binlog_test.groovypipelines/pingcap/tidb/release-8.3/pull_integration_mysql_test.groovypipelines/pingcap/tidb/release-8.4/pull_integration_copr_test.groovypipelines/pingcap/tidb/release-6.1/pull_common_test.groovypipelines/pingcap/tidb/release-8.3/pull_common_test.groovypipelines/pingcap/tidb/release-8.2/pull_integration_mysql_test.groovypipelines/pingcap/tidb/release-6.5/pull_integration_mysql_test.groovypipelines/pingcap/tidb/release-8.3/pull_mysql_client_test.groovypipelines/pingcap/tidb/release-6.5/pull_integration_ddl_test.groovypipelines/pingcap/tidb/release-8.2/pull_integration_ddl_test.groovypipelines/pingcap/tidb/release-6.1/pull_integration_ddl_test.groovypipelines/pingcap/tidb/release-7.1/pull_common_test.groovypipelines/pingcap/tidb/release-7.5/pull_integration_copr_test.groovypipelines/pingcap/tidb/latest/pull_integration_mysql_test.groovypipelines/pingcap/tidb/latest/pull_mysql_client_test.groovypipelines/pingcap/tidb/release-8.4/pull_integration_ddl_test.groovypipelines/pingcap/tidb/release-8.3/pull_integration_copr_test.groovypipelines/pingcap/tidb/release-7.5/pull_integration_binlog_test.groovypipelines/pingcap/tidb/release-7.5/pull_integration_common_test.groovypipelines/pingcap/tidb/release-6.5-20241101-v6.5.7/pull_common_test.groovypipelines/pingcap/tidb/latest/pull_integration_common_test.groovypipelines/pingcap/tidb/release-6.1/pull_integration_mysql_test.groovy1b271fa111189bad5238beff6fad1570659804ff1775209443000https://do.pingcap.net/jenkins/user/noreplynoreplynoreply@github.comfix(pipelines): stop exposing github token to PR jobs (#4460) ## Summary - remove global `GITHUB_TOKEN = credentials('github-bot-token')` injection from `pull_*` pipelines that execute untrusted PR code - keep non-sensitive `environment` entries such as `OCI_ARTIFACT_HOST` unchanged - limit the scope to PR-triggered pipelines; merged pipelines are not changed in this patch ## Risk These PR jobs were exposing a GitHub bot token to the full Jenkins execution environment even though the variable was not consumed later in the pipeline. A malicious PR could potentially read the token from the process environment. ## Verification - `git diff --check` - verified no `pull_*.groovy` file still contains `GITHUB_TOKEN = credentials(...)` or `GH_TOKEN = credentials(...)` - verified no empty `environment {}` blocks remain after the cleanup 2026-04-03 09:44:03 +00001b271fa111189bad5238beff6fad1570659804fffix(pipelines): stop exposing github token to PR jobs (#4460)editpipelines/pingcap/tidb/latest/pull_integration_mysql_test.groovyeditpipelines/pingcap/tidb/release-8.5/pull_integration_copr_test.groovyeditpipelines/pingcap/tidb/release-6.5/pull_integration_copr_test.groovyeditpipelines/pingcap/tidb/release-6.5/pull_integration_ddl_test.groovyeditpipelines/pingcap/tidb/release-8.4/pull_integration_common_test.groovyeditpipelines/pingcap/tidb/release-8.5/pull_integration_mysql_test.groovyeditpipelines/pingcap/tidb/release-9.0-beta/pull_integration_copr_test.groovyeditpipelines/pingcap/tidb/release-9.0-beta/pull_integration_common_test.groovyeditpipelines/pingcap/tidb/release-6.5/pull_integration_common_test.groovyeditpipelines/pingcap/tidb/release-8.5/pull_common_test.groovyeditpipelines/pingcap/tidb/release-6.5/pull_integration_binlog_test.groovyeditpipelines/pingcap/tidb/release-7.1/pull_common_test.groovyeditpipelines/pingcap/tidb/release-7.5/pull_integration_tidb_tools_test.groovyeditpipelines/pingcap/tidb/release-8.2/pull_integration_ddl_test.groovyeditpipelines/pingcap/tidb/release-7.1/pull_integration_copr_test.groovyeditpipelines/pingcap/tidb/release-9.0-beta/pull_common_test.groovyeditpipelines/pingcap/tidb/release-9.0-beta/pull_mysql_client_test.groovyeditpipelines/pingcap/tidb/release-6.5-20241101-v6.5.7/pull_common_test.groovyeditpipelines/pingcap/tidb/latest/pull_integration_copr_test.groovyeditpipelines/pingcap/tidb/release-7.5/pull_mysql_client_test.groovyeditpipelines/pingcap/tidb/latest/pull_mysql_client_test.groovyeditpipelines/pingcap/tidb/release-6.5/pull_integration_mysql_test.groovyeditpipelines/pingcap/tidb/release-7.1/pull_integration_ddl_test.groovyeditpipelines/pingcap/tidb/release-8.1/pull_integration_tidb_tools_test.groovyeditpipelines/pingcap/tidb/latest/pull_common_test.groovyeditpipelines/pingcap/tidb/release-8.4/pull_integration_mysql_test.groovyeditpipelines/pingcap/tidb/release-9.0-beta/pull_integration_mysql_test.groovyeditpipelines/pingcap/tidb/release-8.4/pull_integration_ddl_test.groovyeditpipelines/pingcap/tidb/release-8.3/pull_integration_copr_test.groovyeditpipelines/pingcap/tidb/release-8.4/pull_integration_copr_test.groovyeditpipelines/pingcap/tidb/release-6.1/pull_integration_copr_test.groovyeditpipelines/pingcap/tidb/release-8.5/pull_mysql_client_test.groovyeditpipelines/pingcap/tidb/release-7.1/pull_integration_tidb_tools_test.groovyeditpipelines/pingcap/tidb/release-6.1/pull_integration_ddl_test.groovyeditpipelines/pingcap/tidb/release-6.5-20241101-v6.5.7/pull_integration_common_test.groovyeditpipelines/pingcap/tidb/release-8.4/pull_mysql_client_test.groovyeditpipelines/pingcap/tidb/release-6.1/pull_integration_binlog_test.groovyeditpipelines/pingcap/tidb/release-7.1/pull_integration_mysql_test.groovyeditpipelines/pingcap/tidb/release-8.5/pull_integration_common_test.groovyeditpipelines/pingcap/tidb/release-8.5/pull_integration_ddl_test.groovyeditpipelines/pingcap/tidb/release-6.1/pull_integration_tidb_tools_test.groovyeditpipelines/pingcap/tidb/release-6.5/pull_integration_tidb_tools_test.groovyeditpipelines/pingcap/tidb/release-7.5/pull_integration_mysql_test.groovyeditpipelines/pingcap/tidb/release-9.0-beta/pull_integration_tidb_tools_test.groovyeditpipelines/pingcap/tidb/release-8.5/pull_integration_tidb_tools_test.groovyeditpipelines/pingcap/tidb/release-8.1/pull_integration_mysql_test.groovyeditpipelines/pingcap/tidb/release-8.3/pull_integration_ddl_test.groovyeditpipelines/pingcap/tidb/release-8.3/pull_integration_mysql_test.groovyeditpipelines/pingcap/tidb/release-7.5/pull_integration_copr_test.groovyeditpipelines/pingcap/tidb/release-8.1/pull_integration_copr_test.groovyeditpipelines/pingcap/tidb/release-6.1/pull_common_test.groovyeditpipelines/pingcap/tidb/release-6.1/pull_integration_mysql_test.groovyeditpipelines/tikv/copr-test/latest/pull_integration_test.groovyeditpipelines/pingcap/tidb/release-6.5-20241101-v6.5.7/pull_integration_copr_test.groovyeditpipelines/pingcap/tidb/release-9.0-beta/pull_integration_ddl_test.groovyeditpipelines/pingcap/tidb/release-7.5/pull_integration_ddl_test.groovyeditpipelines/pingcap/tidb/release-8.1/pull_integration_binlog_test.groovyeditpipelines/pingcap/tidb/release-7.1/pull_integration_binlog_test.groovyeditpipelines/pingcap/tidb/latest/pull_integration_common_test.groovyeditpipelines/pingcap/tidb/release-8.1/pull_integration_common_test.groovyeditpipelines/pingcap/tidb/release-8.2/pull_common_test.groovyeditpipelines/pingcap/tidb/release-8.3/pull_common_test.groovyeditpipelines/pingcap/tidb/release-7.5/pull_integration_binlog_test.groovyeditpipelines/pingcap/tidb/release-8.1/pull_common_test.groovyeditpipelines/pingcap/tidb/release-8.1/pull_mysql_client_test.groovyeditpipelines/pingcap/tidb/release-8.2/pull_mysql_client_test.groovyeditpipelines/pingcap/tidb/release-7.5/pull_common_test.groovyeditpipelines/pingcap/tidb/release-8.2/pull_integration_common_test.groovyeditpipelines/pingcap/tidb/release-6.1/pull_integration_common_test.groovyeditpipelines/pingcap/tidb/release-6.5/pull_common_test.groovyeditpipelines/pingcap/tidb/release-8.2/pull_integration_copr_test.groovyeditpipelines/pingcap/tidb/release-8.2/pull_integration_mysql_test.groovyeditpipelines/pingcap/tidb/release-8.3/pull_mysql_client_test.groovyeditpipelines/pingcap/tidb/release-7.1/pull_integration_common_test.groovyeditpipelines/pingcap/tidb/release-6.5-20241101-v6.5.7/pull_integration_ddl_test.groovyeditpipelines/pingcap/tidb/release-7.5/pull_integration_common_test.groovyeditpipelines/pingcap/tidb/release-6.5-20241101-v6.5.7/pull_integration_mysql_test.groovyeditpipelines/pingcap/tidb/latest/pull_integration_ddl_test.groovyeditpipelines/pingcap/tidb/release-8.1/pull_integration_ddl_test.groovyeditpipelines/pingcap/tidb/release-8.3/pull_integration_common_test.groovyeditpipelines/pingcap/tidb/release-8.4/pull_common_test.groovygithttps://do.pingcap.net/jenkins/user/noreplynoreplynoreply