[claponcet]

Motivation

Add Java Lambda SCA system-test coverage for APPSEC-71306.

Stacked on #8128 (clara.poncet/java-lambda-response-schema-weblog). Related Java agent smoke coverage: DataDog/dd-trace-java#13059.

Changes

• Add APPSEC_LAMBDA_SCA, reuse the five existing SCA reachability tests, and wire the scenario into the end-to-end workflow and CI change selection.
• Add the vulnerable-call endpoints and Junrar 7.5.5 to the Java Lambda weblogs. Keep Junrar in a separate JAR so runtime dependency resolution can identify it.
• Enable the tests for Java Lambda from 1.68.0-SNAPSHOT and check endpoint responses before telemetry assertions.

Validated on the API Gateway v2 emulator (java-apigw-http) with the local Java tracer 1.68.0-SNAPSHOT: all five SCA tests passed. ./format.sh also passed. The other Java Lambda event variants have not been run locally.

Workflow

1. ⚠️ Create your PR as draft ⚠️
2. Work on you PR until the CI passes
3. Mark it as ready for review
   • Tests, manifest, weblog are modified -> you'll need a review from system-tests-reviewers: ask to one of youre co-worker familiar with the tested feature.
   • Framework is modified, or non obvious usage of it -> get a review from system-tests-core (slack)

🚀 Once your PR is reviewed and the CI green, you can merge it!

🛟 #apm-shared-testing 🛟

[github-actions]

CODEOWNERS have been resolved as:

utils/build/docker/java_lambda/src/main/java/com/datadoghq/lambda/ScaReachability.java  @DataDog/system-tests-reviewers
.github/workflows/run-end-to-end.yml                                    @DataDog/system-tests-core
docs/understand/weblogs/end-to-end_weblog.md                            @DataDog/system-tests-core
manifests/java_lambda.yml                                               @DataDog/system-tests-reviewers
manifests/nodejs_lambda.yml                                             @DataDog/system-tests-reviewers
manifests/python_lambda.yml                                             @DataDog/system-tests-reviewers
manifests/ruby_lambda.yml                                               @DataDog/system-tests-reviewers
tests/appsec/test_sca_reachability.py                                   @DataDog/asm-libraries
utils/_context/_scenarios/__init__.py                                   @DataDog/system-tests-core
utils/_context/_scenarios/aws_lambda.py                                 @DataDog/system-tests-core
utils/build/docker/java_lambda/java-alb-multi.Dockerfile                @DataDog/system-tests-reviewers
utils/build/docker/java_lambda/java-alb.Dockerfile                      @DataDog/system-tests-reviewers
utils/build/docker/java_lambda/java-apigw-http.Dockerfile               @DataDog/system-tests-reviewers
utils/build/docker/java_lambda/java-apigw-rest.Dockerfile               @DataDog/system-tests-reviewers
utils/build/docker/java_lambda/java-function-url.Dockerfile             @DataDog/system-tests-reviewers
utils/build/docker/java_lambda/pom.xml                                  @DataDog/system-tests-reviewers
utils/build/docker/java_lambda/src/main/java/com/datadoghq/lambda/Handler.java  @DataDog/system-tests-reviewers
utils/build/docker/lambda_proxy/main.py                                 @DataDog/system-tests-reviewers
utils/scripts/libraries_and_scenarios_rules.yml                         @DataDog/system-tests-core

[datadog-prod-us1-3]

 

🎉 All green!

🧪 All tests passed
❄️ No new flaky tests detected

_{This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 81127bb | Docs | View more details | Give us feedback!}

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-28T23:49:06.369293Z	2356c4d	Draft marked ready

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[jandro996]

Thanks for addressing the feedback, LGTM.