Skip to content

feat: add DPoP sender-constrained token support (RFC 9449) #12447

feat: add DPoP sender-constrained token support (RFC 9449)

feat: add DPoP sender-constrained token support (RFC 9449) #12447

Triggered via pull request May 20, 2026 16:54
@davidbemerdavidbemer
synchronize #1544
dpop
Status Failure
Total duration 4m 53s
Artifacts 19

ci.yml

on: pull_request
Matrix: build
Validate PR Title
3s
Validate PR Title
Lint & Type Check
11s
Lint & Type Check
gitleaks
11s
gitleaks
All Checks Passed
0s
All Checks Passed
Fit to window
Zoom out
Zoom in

Annotations

2 errors, 1 warning, and 8 notices
Lint & Type Check
Process completed with exit code 1.
Coverage
Critical error. This error possibly occurred because the permissions of the workflow are set incorrectly. You can see the correct setting of permissions here: https://github.com/py-cov-action/python-coverage-comment-action#basic-usage Otherwise please look for open issues or open one in https://github.com/py-cov-action/python-coverage-comment-action/ Traceback (most recent call last): File "/usr/local/lib/python3.11/site-packages/coverage_comment/subprocess.py", line 18, in run return subprocess.run( ^^^^^^^^^^^^^^^ File "/usr/local/lib/python3.11/subprocess.py", line 571, in run raise CalledProcessError(retcode, process.args, subprocess.CalledProcessError: Command '('coverage', 'json', '-o', '-')' returned non-zero exit status 2. The above exception was the direct cause of the following exception: Traceback (most recent call last): File "/usr/local/lib/python3.11/site-packages/coverage_comment/main.py", line 39, in main exit_code = action( ^^^^^^^ File "/usr/local/lib/python3.11/site-packages/coverage_comment/main.py", line 75, in action coverage = coverage_module.get_coverage_info( ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/usr/local/lib/python3.11/site-packages/coverage_comment/coverage.py", line 75, in get_coverage_info json_coverage = subprocess.run( ^^^^^^^^^^^^^^^ File "/usr/local/lib/python3.11/site-packages/coverage_comment/subprocess.py", line 27, in run raise SubProcessError("\n".join([exc.stdout, exc.stderr])) from exc coverage_comment.subprocess.SubProcessError: {"meta": {"version": "7.3.1", "timestamp": "2026-05-20T16:59:32.363792", "branch_coverage": false, "show_contexts": false}, "files": {"descope/__init__.py": {"executed_lines": [1, 12, 13, 14, 21, 22, 39, 49, 50, 58], "summary": {"covered_lines": 10, "num_statements": 10, "percent_covered": 100.0, "percent_covered_display": "100", "missing_lines": 0, "excluded_lines": 0}, "missing_lines": [], "excluded_lines": []}, "descope/_auth_base.py": {"executed_lines": [2, 5, 6, 8, 9, 10], "summary": {"covered_lines": 5, "num_statements": 5, "percent_covered": 100.0, "percent_covered_display": "100", "missing_lines": 0, "excluded_lines": 0}, "missing_lines": [], "excluded_lines": []}, "descope/_http_base.py": {"executed_lines": [1, 3, 6, 7, 9, 10], "summary": {"covered_lines": 5, "num_statements": 5, "percent_covered": 100.0, "percent_covered_display": "100", "missing_lines": 0, "excluded_lines": 0}, "missing_lines": [], "excluded_lines": []}, "descope/auth.py": {"executed_lines": [1, 3, 4, 5, 6, 7, 8, 9, 11, 12, 13, 15, 27, 37, 38, 39, 40, 41, 44, 45, 47, 55, 57, 58, 66, 67, 69, 71, 72, 73, 74, 76, 77, 79, 80, 81, 82, 89, 90, 91, 92, 99, 100, 101, 102, 103, 105, 106, 107, 109, 110, 111, 117, 118, 119, 120, 121, 123, 124, 125, 126, 127, 128, 130, 131, 132, 133, 135, 136, 138, 139, 140, 141, 142, 143, 144, 145, 146, 147, 148, 149, 150, 151, 152, 153, 154, 155, 156, 157, 158, 159, 160, 162, 164, 166, 167, 168, 175, 176, 178, 180, 181, 182, 189, 190, 192, 194, 195, 196, 197, 203, 204, 205, 206, 208, 209, 210, 211, 217, 218, 220, 221, 223, 229, 230, 235, 236, 237, 244, 245, 246, 248, 249, 250, 251, 257, 258, 259, 260, 261, 267, 268, 269, 275, 276, 277, 282, 284, 285, 286, 292, 294, 297, 298, 300, 306, 308, 312, 313, 314, 315, 316, 317, 320, 321, 322, 323, 324, 329, 331, 333, 341, 349, 356, 364, 368, 369, 370, 375, 376, 377, 378, 384, 385, 386, 388, 389, 390, 392, 393, 394, 396, 397, 398, 405, 407, 408, 409, 416, 417, 418, 419, 426, 429, 430, 431, 432, 434, 435, 436, 438, 440, 441, 448, 449, 454, 455, 461, 462, 464, 465, 466, 472, 473, 476, 478, 479, 486, 488, 489, 491, 492, 493, 495, 511, 517, 518, 524, 525, 526, 528, 534, 536, 542, 543, 549, 550, 552, 553, 556, 558, 559, 560, 561, 562, 563, 564], "summary": {"covered_lines": 257, "num_statements": 264, "percent_covered": 97.34848484848484, "percent_covered_display": "97", "missing_lines": 7, "excluded_lines": 0}, "missing_lines": [295, 325, 327, 365, 480, 509, 529], "excluded_lines": []}, "descope/authmethod/__init__.
gitleaks
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: gitleaks/gitleaks-action@ff98106e4c7b2bc287b24eaf42907196329070c7. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
test with 3.9 on windows-latest
NOTICE: windows-latest requests are being redirected to windows-2025-vs2026 by June 15, 2026
test with 3.10 on windows-latest
NOTICE: windows-latest requests are being redirected to windows-2025-vs2026 by June 15, 2026
test with 3.11 on windows-latest
NOTICE: windows-latest requests are being redirected to windows-2025-vs2026 by June 15, 2026
test with 3.13 on windows-latest
NOTICE: windows-latest requests are being redirected to windows-2025-vs2026 by June 15, 2026
test with 3.14 on windows-latest
NOTICE: windows-latest requests are being redirected to windows-2025-vs2026 by June 15, 2026
test with 3.12 on windows-latest
NOTICE: windows-latest requests are being redirected to windows-2025-vs2026 by June 15, 2026
Coverage
Coverage
Starting action

Artifacts

Produced during runtime
Name Size Digest
coverage.macos-latest.3.10 Expired
4.22 KB
sha256:4d6c13c991165f5679636c0bb37f65f5e917459e48220d70fe6d5bf64d881bf3
coverage.macos-latest.3.11 Expired
4.22 KB
sha256:58792374644667bd9686daffc4cad10bcd2075f7e06153fd26128b6cfc85345f
coverage.macos-latest.3.12 Expired
4.2 KB
sha256:d10bba52de8977975cc20cea9af327118267408ae296516e0bad4a2c6e3181e2
coverage.macos-latest.3.13 Expired
4.21 KB
sha256:e772d6365521031d988912476c4bc5418e06a07572224850e26f3baf1d83a996
coverage.macos-latest.3.14 Expired
4.12 KB
sha256:737716cefeab66b706906c79916bb6768b80b746cff1b113967718e1dd415ff4
coverage.macos-latest.3.9 Expired
4.18 KB
sha256:7d22139e3a970ac5718a3ec4ae1e2b28c28587ade85e3739891449f3b806eff7
coverage.ubuntu-latest.3.10 Expired
4.22 KB
sha256:e272359d5e77c349c873379a1acaf2caff7c1c02134ab96f3ef220edbdf38f4e
coverage.ubuntu-latest.3.11 Expired
4.22 KB
sha256:e48f022c5d2def829e1f5a808c8454d267b701589581953c89b8e72559e4af25
coverage.ubuntu-latest.3.12 Expired
4.21 KB
sha256:7ff98db25c9b6200dcd308797559bb106538ab54d9aa767ab8f0b8ad867be2a4
coverage.ubuntu-latest.3.13 Expired
4.21 KB
sha256:a7c9776d0870ee95cdc36769c409e7b1c69febb9793548b24c6639a8b3205912
coverage.ubuntu-latest.3.14 Expired
4.12 KB
sha256:8a3fad5c25869a4653264c77d45492cbb13aa8feb5956e303cf22c3f31d4e15d
coverage.ubuntu-latest.3.9 Expired
4.18 KB
sha256:d9a023ffb1d5f9c8da13d6dd45630c8ec525ae6a94018648b6815cb5398c4c57
coverage.windows-latest.3.10 Expired
4.22 KB
sha256:5574486f4309e529ae1847943da53513a6b4d999f7e9bc04ded68061775fd59c
coverage.windows-latest.3.11 Expired
4.22 KB
sha256:50e1fc05f9799d3928f559bed8f9700e89dcd6ba539f6d80a1003cd68cfd0175
coverage.windows-latest.3.12 Expired
4.21 KB
sha256:70b1e48236f6fe0ddd263f2bcea5267f6b1f112f608c08826277768f0a6914cb
coverage.windows-latest.3.13 Expired
4.21 KB
sha256:32cbe09b0dc6ab4f76af4284833bcddae760927316c85d1a628660aade98b7f2
coverage.windows-latest.3.14 Expired
4.12 KB
sha256:33bb2f22131848c91946d7ab966e687e1f143736d70576e7f40d8bf77275dbfd
coverage.windows-latest.3.9 Expired
4.18 KB
sha256:dfc600e5f0c63861a24dec03306b744575717621f0f990fed71b67031de4c046
gitleaks-results.sarif Expired
6.61 KB
sha256:8c167b06d54d45e4aa7fdfa907c584dd714d143ebb84bcccfcc3b733997df883