Updates/bazel fixes #2441
No reviewers
Labels
No labels
1week
2weeks
Failed compliance check
IP cameras
NATS
Possible security concern
Review effort 1/5
Review effort 2/5
Review effort 3/5
Review effort 4/5
Review effort 5/5
UI
aardvark
accessibility
amd64
api
arm64
auth
back-end
bgp
blog
bug
build
checkers
ci-cd
cleanup
cnpg
codex
core
dependencies
device-management
documentation
duplicate
dusk
ebpf
enhancement
eta 1d
eta 1hr
eta 3d
eta 3hr
feature
fieldsurvey
github_actions
go
good first issue
help wanted
invalid
javascript
k8s
log-collector
mapper
mtr
needs-triage
netflow
network-sweep
observability
oracle
otel
plug-in
proton
python
question
reddit
redhat
research
rperf
rperf-checker
rust
sdk
security
serviceradar-agent
serviceradar-agent-gateway
serviceradar-web
serviceradar-web-ng
siem
snmp
sysmon
topology
ubiquiti
wasm
wontfix
zen-engine
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
carverauto/serviceradar!2441
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "refs/pull/2441/head"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Imported from GitHub pull request.
Original GitHub pull request: #1973
Original author: @mfreeman451
Original URL: https://github.com/carverauto/serviceradar/pull/1973
Original created: 2025-11-20T23:58:31Z
Original updated: 2025-11-20T23:59:59Z
Original head: carverauto/serviceradar:updates/bazel_fixes
Original base: main
Original merged: 2025-11-20T23:58:38Z by @mfreeman451
User description
IMPORTANT: Please sign the Developer Certificate of Origin
Thank you for your contribution to ServiceRadar. Please note, when contributing, the developer must include
a DCO sign-off statement indicating the DCO acceptance in one commit message. Here
is an example DCO Signed-off-by line in a commit message:
Describe your changes
Issue ticket number and link
Code checklist before requesting a review
PR Type
Enhancement, Bug fix
Description
Disable Turbopack globally in Bazel builds to avoid sandbox issues
Remove Proton package from build configuration
Fix CI/CD release workflow to use local execution with rpmbuild
Copy web sources to bin directory for proper package.json resolution
Diagram Walkthrough
File Walkthrough
.bazelrc
Disable Turbopack globally in Bazel configuration.bazelrc
builds
NEXT_PRIVATE_SKIP_TURBOPACK=1andTURBOPACK=0in buildconfiguration
release.yml
Switch release workflow to local rpmbuild execution.github/workflows/release.yml
--config=no_remotebazel clean --expungeto regenerate external repos with rpmbuildavailable
packages.bzl
Remove Proton package from Bazel buildpackaging/packages.bzl
and systemd configuration
engine component
components.json
Remove Proton component from package manifestpackaging/components.json
configuration
directories
BUILD.bazel
Copy web sources to bin and disable Turbopackweb/BUILD.bazel
allow_execroot_entry_point_with_no_copy_data_to_binfrom Trueto False
package.json resolution
next.config.bazel.mjs
Force webpack and disable Turbopack in Next.js configweb/next.config.bazel.mjs
Imported GitHub PR comment.
Original author: @qodo-code-review[bot]
Original URL: https://github.com/carverauto/serviceradar/pull/1973#issuecomment-3560702246
Original created: 2025-11-20T23:59:02Z
PR Compliance Guide 🔍
Below is a summary of compliance checks for this PR:
No security concerns identified
No security vulnerabilities detected by AI analysis. Human verification advised for critical code.🎫 No ticket provided
Codebase context is not defined
Follow the guide to enable codebase context checks.
Generic: Meaningful Naming and Self-Documenting Code
Objective: Ensure all identifiers clearly express their purpose and intent, making code
self-documenting
Status: Passed
Generic: Secure Error Handling
Objective: To prevent the leakage of sensitive system information through error messages while
providing sufficient detail for internal debugging.
Status: Passed
Generic: Secure Logging Practices
Objective: To ensure logs are useful for debugging and auditing without exposing sensitive
information like PII, PHI, or cardholder data.
Status: Passed
Generic: Security-First Input Validation and Data Handling
Objective: Ensure all data inputs are validated, sanitized, and handled securely to prevent
vulnerabilities
Status: Passed
Generic: Comprehensive Audit Trails
Objective: To create a detailed and reliable record of critical system actions for security analysis
and compliance.
Status:
Audit Logging: The new release workflow steps execute package publishing without adding any explicit
audit logging of critical actions or outcomes within the workflow context.
Referred Code
Generic: Robust Error Handling and Edge Case Management
Objective: Ensure comprehensive error handling that provides meaningful context and graceful
degradation
Status:
Missing Fallback: The updated workflow forces local Bazel execution without the prior fallback/conditional
error handling, reducing resilience if local tooling or installs fail.
Referred Code
Compliance status legend
🟢 - Fully Compliant🟡 - Partial Compliant
🔴 - Not Compliant
⚪ - Requires Further Human Verification
🏷️ - Compliance label
Imported GitHub PR comment.
Original author: @qodo-code-review[bot]
Original URL: https://github.com/carverauto/serviceradar/pull/1973#issuecomment-3560703834
Original created: 2025-11-20T23:59:59Z
PR Code Suggestions ✨
Explore these optional code suggestions:
Justify removal of the Proton component
The PR removes the "proton" stream processing engine without justification. The
suggestion requests an explanation for this major architectural change and its
impact.
Examples:
packaging/components.json [283]
packaging/packages.bzl [475]
Solution Walkthrough:
Before:
After:
Suggestion importance[1-10]: 9
__
Why: This suggestion correctly identifies the unexplained removal of the
protoncomponent, a major architectural change that is critical for understanding the PR's purpose and overall impact on the system.Avoid installing unnecessary recommended packages
Add the
--no-install-recommendsflag to theapt-get installcommand to preventthe installation of non-essential recommended packages.
.github/workflows/release.yml [238-239]
Suggestion importance[1-10]: 6
__
Why: This is a valid best practice for CI/CD workflows that improves efficiency by reducing installation time and disk usage, and minimizes the potential attack surface by not installing unnecessary packages.
Use a stricter check for undefined variables
Change the environment variable checks from a falsy check (
!process.env.VAR) toa strict
undefinedcheck (process.env.VAR === undefined) to avoid overwritingintentionally empty variables.
web/next.config.bazel.mjs [17-23]
Suggestion importance[1-10]: 3
__
Why: The suggestion is technically correct about the difference between a falsy check and an
undefinedcheck, but in this specific context, the impact is negligible as an empty string is not a meaningful value for these environment variables.