Skip to content

Add Python Lambda SCA reachability coverage - #8224

Draft
florentinl wants to merge 5 commits into
mainfrom
flabel/python-lambda-sca
Draft

florentinl wants to merge 5 commits into
mainfrom
flabel/python-lambda-sca

Conversation

@florentinl

@florentinl florentinl commented Oct 29, 2026 •

Copy link
Copy Markdown
Contributor

Changes

Add Python Lambda SCA reachability coverage using synthetic advisories. The scenario mounts one shared catalog; the Python test container installs its language's entries before Lambda starts. Dependency upgrades remain independent of real CVEs, with no new tracer configuration.

Requires dd-trace-py#21366 and datadog-lambda-python#880. Activation remains gated pending compatible releases.

Testing

All five reachability checks pass on ALB multi-value with requests 2.33.0, using the candidate tracer, wrapper, and test startup script on Colima. The startup adapter installs only Python entries. Lint passes; all 64 CI-selection tests passed previously.

@github-actions

github-actions Bot commented Oct 29, 2026 •

Copy link
Copy Markdown
Contributor

CODEOWNERS have been resolved as:

tests/appsec/sca_advisories.json                                        @DataDog/asm-libraries
manifests/python_lambda.yml                                             @DataDog/system-tests-reviewers
tests/appsec/test_sca_reachability.py                                   @DataDog/asm-libraries
utils/_context/_scenarios/aws_lambda.py                                 @DataDog/system-tests-core
utils/build/docker/python_lambda/function/app.sh                        @DataDog/system-tests-reviewers
utils/build/docker/python_lambda/function/handler.py                    @DataDog/system-tests-reviewers
utils/scripts/libraries_and_scenarios_rules.yml                         @DataDog/system-tests-core

@datadog-prod-us1-6

datadog-prod-us1-6 Bot commented Oct 29, 2026 •

Copy link
Copy Markdown

Pipelines  Tests

✨ Unblock PR with BitsAI

❌ Errors

Your PR has failed checks. Please review the issues below and take necessary action before merging.

🚦 11 Pipeline jobs failed

Testing the test | all-jobs-are-green — 🔧 Needs a code fix, caused by this PR

View more details · View in GitHub Actions

Testing the test | System Tests (python_lambda, dev) / End-to-end #1 / alb 1

View more details · View in GitHub Actions

Testing the test | System Tests (python_lambda, dev) / End-to-end #1 / alb-multi 1

View more details · View in GitHub Actions

View all 11 failed jobs.

ℹ️ Info

No other issues found (see more)

🧪 All tests passed
❄️ No new flaky tests detected

Useful? React with 👍 / 👎

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: eff0838 | Docs | View more details | Give us feedback!

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant