Skip to content

Comments

[Golang] Activate API10 body analysis tests#6236

Merged
RomainMuller merged 4 commits intomainfrom
romain.marcadier/APPSEC-61152/activate-api10-body-tests
Feb 20, 2026
Merged

[Golang] Activate API10 body analysis tests#6236
RomainMuller merged 4 commits intomainfrom
romain.marcadier/APPSEC-61152/activate-api10-body-tests

Conversation

@RomainMuller
Copy link
Contributor

Summary

The Go tracer now reads the correct env var name
DD_API_SECURITY_DOWNSTREAM_BODY_ANALYSIS_SAMPLE_RATE (per the
updated RFC), so the four tests previously marked as
bug (APPSEC-61152) can be activated at v2.7.0-dev.

Depends on: DataDog/dd-trace-go#4398

Co-Authored-By: Claude Opus 4 noreply@anthropic.com

The Go tracer now reads the correct env var name
`DD_API_SECURITY_DOWNSTREAM_BODY_ANALYSIS_SAMPLE_RATE` (per the
updated RFC), so the four tests previously marked as
`bug (APPSEC-61152)` can be activated at `v2.7.0-dev`.

Co-Authored-By: Claude Opus 4 <noreply@anthropic.com>
JJ-Change-Id: qryqpl
@Strech Strech force-pushed the appsec-60450-correct-appsec-rasp-scenario-sampling-env-name branch 3 times, most recently from d6cd796 to e172081 Compare February 10, 2026 10:52
Base automatically changed from appsec-60450-correct-appsec-rasp-scenario-sampling-env-name to main February 11, 2026 09:30
@github-actions
Copy link
Contributor

CODEOWNERS have been resolved as:

manifests/golang.yml                                                    @DataDog/dd-trace-go-guild

@RomainMuller RomainMuller marked this pull request as ready for review February 19, 2026 15:36
@RomainMuller RomainMuller requested a review from a team as a code owner February 19, 2026 15:36
Copy link

@chatgpt-codex-connector chatgpt-codex-connector bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 6b4712ed4e

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

tests/appsec/rasp/test_api10.py::Test_API10_redirect: v2.7.0-dev
tests/appsec/rasp/test_api10.py::Test_API10_redirect_status: v2.5.0-dev
tests/appsec/rasp/test_api10.py::Test_API10_request_body: bug (APPSEC-61152)
tests/appsec/rasp/test_api10.py::Test_API10_request_body: v2.7.0-dev

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Activate Test_API10_all with the same fixed version

This change promotes the three API10 body-analysis tests tied to APPSEC-61152 to v2.7.0-dev, but leaves tests/appsec/rasp/test_api10.py::Test_API10_all on the same bug (APPSEC-61152) marker. Because Test_API10_all asserts both request/response body tags together, it remains skipped even after the bugfix this commit is enabling, which drops combined-path coverage and can hide regressions in the full API10 flow.

Useful? React with 👍 / 👎.

@datadog-datadog-prod-us1-2
Copy link

datadog-datadog-prod-us1-2 bot commented Feb 19, 2026

✅ Tests

🎉 All green!

❄️ No new flaky tests detected
🧪 All tests passed

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 4f12459 | Docs | Datadog PR Page | Was this helpful? Give us feedback!

Copy link

@chatgpt-codex-connector chatgpt-codex-connector bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 4f124591ab

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

tests/appsec/rasp/test_api10.py::Test_API10_redirect: v2.7.0-dev
tests/appsec/rasp/test_api10.py::Test_API10_redirect_status: v2.5.0-dev
tests/appsec/rasp/test_api10.py::Test_API10_request_body: bug (APPSEC-61152)
tests/appsec/rasp/test_api10.py::Test_API10_request_body: v2.7.0-dev

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Activate Test_API10_all at v2.7.0-dev

This change promotes the three APPSEC-61152 API10 body-related entries to v2.7.0-dev, but tests/appsec/rasp/test_api10.py::Test_API10_all is still marked bug (APPSEC-61152) in the same manifest section. Since Test_API10_all validates request and response body tags together, Go versions where the fix is present will still skip the combined-path assertion and can miss regressions in full API10 body analysis.

Useful? React with 👍 / 👎.

@RomainMuller RomainMuller merged commit 4753fd3 into main Feb 20, 2026
26 checks passed
@RomainMuller RomainMuller deleted the romain.marcadier/APPSEC-61152/activate-api10-body-tests branch February 20, 2026 09:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants