-
Notifications
You must be signed in to change notification settings - Fork 303
Create metric: appsec.waf.error #8381
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Create metric: appsec.waf.error #8381
Conversation
BenchmarksStartupParameters
See matching parameters
SummaryFound 0 performance improvements and 0 performance regressions! Performance is the same for 56 metrics, 7 unstable metrics. Startup time reports for petclinicgantt
title petclinic - global startup overhead: candidate=1.47.0-SNAPSHOT~a482447aeb, baseline=1.47.0-SNAPSHOT~a47c3cefc3
dateFormat X
axisFormat %s
section tracing
Agent [baseline] (1.044 s) : 0, 1043719
Total [baseline] (10.471 s) : 0, 10471131
Agent [candidate] (1.041 s) : 0, 1040844
Total [candidate] (10.496 s) : 0, 10496422
section appsec
Agent [baseline] (1.183 s) : 0, 1182728
Total [baseline] (10.801 s) : 0, 10800762
Agent [candidate] (1.187 s) : 0, 1187148
Total [candidate] (10.748 s) : 0, 10748494
section iast
Agent [baseline] (1.176 s) : 0, 1175598
Total [baseline] (11.097 s) : 0, 11097048
Agent [candidate] (1.175 s) : 0, 1175205
Total [candidate] (11.014 s) : 0, 11013775
section profiling
Agent [baseline] (1.271 s) : 0, 1271168
Total [baseline] (10.868 s) : 0, 10868255
Agent [candidate] (1.273 s) : 0, 1273332
Total [candidate] (10.896 s) : 0, 10896262
gantt
title petclinic - break down per module: candidate=1.47.0-SNAPSHOT~a482447aeb, baseline=1.47.0-SNAPSHOT~a47c3cefc3
dateFormat X
axisFormat %s
section tracing
BytebuddyAgent [baseline] (719.51 ms) : 0, 719510
BytebuddyAgent [candidate] (718.636 ms) : 0, 718636
GlobalTracer [baseline] (240.149 ms) : 0, 240149
GlobalTracer [candidate] (239.789 ms) : 0, 239789
AppSec [baseline] (55.806 ms) : 0, 55806
AppSec [candidate] (55.786 ms) : 0, 55786
Remote Config [baseline] (702.478 µs) : 0, 702
Remote Config [candidate] (699.258 µs) : 0, 699
Telemetry [baseline] (12.211 ms) : 0, 12211
Telemetry [candidate] (10.713 ms) : 0, 10713
section appsec
BytebuddyAgent [baseline] (735.162 ms) : 0, 735162
BytebuddyAgent [candidate] (737.405 ms) : 0, 737405
GlobalTracer [baseline] (236.655 ms) : 0, 236655
GlobalTracer [candidate] (237.416 ms) : 0, 237416
AppSec [baseline] (175.634 ms) : 0, 175634
AppSec [candidate] (177.368 ms) : 0, 177368
Remote Config [baseline] (669.279 µs) : 0, 669
Remote Config [candidate] (668.583 µs) : 0, 669
Telemetry [baseline] (8.622 ms) : 0, 8622
Telemetry [candidate] (8.308 ms) : 0, 8308
IAST [baseline] (21.501 ms) : 0, 21501
IAST [candidate] (21.291 ms) : 0, 21291
section iast
BytebuddyAgent [baseline] (838.744 ms) : 0, 838744
BytebuddyAgent [candidate] (838.6 ms) : 0, 838600
GlobalTracer [baseline] (231.42 ms) : 0, 231420
GlobalTracer [candidate] (231.394 ms) : 0, 231394
AppSec [baseline] (57.608 ms) : 0, 57608
AppSec [candidate] (57.588 ms) : 0, 57588
Remote Config [baseline] (644.39 µs) : 0, 644
Remote Config [candidate] (634.103 µs) : 0, 634
Telemetry [baseline] (8.911 ms) : 0, 8911
Telemetry [candidate] (8.735 ms) : 0, 8735
IAST [baseline] (22.951 ms) : 0, 22951
IAST [candidate] (22.911 ms) : 0, 22911
section profiling
ProfilingAgent [baseline] (97.165 ms) : 0, 97165
ProfilingAgent [candidate] (97.416 ms) : 0, 97416
BytebuddyAgent [baseline] (713.257 ms) : 0, 713257
BytebuddyAgent [candidate] (714.885 ms) : 0, 714885
GlobalTracer [baseline] (352.421 ms) : 0, 352421
GlobalTracer [candidate] (353.447 ms) : 0, 353447
AppSec [baseline] (55.901 ms) : 0, 55901
AppSec [candidate] (55.058 ms) : 0, 55058
Remote Config [baseline] (683.683 µs) : 0, 684
Remote Config [candidate] (678.753 µs) : 0, 679
Telemetry [baseline] (9.087 ms) : 0, 9087
Telemetry [candidate] (9.106 ms) : 0, 9106
Profiling [baseline] (97.19 ms) : 0, 97190
Profiling [candidate] (97.442 ms) : 0, 97442
Startup time reports for insecure-bankgantt
title insecure-bank - global startup overhead: candidate=1.47.0-SNAPSHOT~a482447aeb, baseline=1.47.0-SNAPSHOT~a47c3cefc3
dateFormat X
axisFormat %s
section tracing
Agent [baseline] (1.046 s) : 0, 1045553
Total [baseline] (8.643 s) : 0, 8642982
Agent [candidate] (1.042 s) : 0, 1041917
Total [candidate] (8.683 s) : 0, 8683231
section iast
Agent [baseline] (1.179 s) : 0, 1179082
Total [baseline] (9.248 s) : 0, 9247984
Agent [candidate] (1.179 s) : 0, 1179330
Total [candidate] (9.31 s) : 0, 9309840
section iast_HARDCODED_SECRET_DISABLED
Agent [baseline] (1.18 s) : 0, 1179688
Total [baseline] (9.291 s) : 0, 9290627
Agent [candidate] (1.172 s) : 0, 1171651
Total [candidate] (9.275 s) : 0, 9274665
section iast_TELEMETRY_OFF
Agent [baseline] (1.177 s) : 0, 1177127
Total [baseline] (9.305 s) : 0, 9304554
Agent [candidate] (1.171 s) : 0, 1170941
Total [candidate] (9.271 s) : 0, 9271292
gantt
title insecure-bank - break down per module: candidate=1.47.0-SNAPSHOT~a482447aeb, baseline=1.47.0-SNAPSHOT~a47c3cefc3
dateFormat X
axisFormat %s
section tracing
BytebuddyAgent [baseline] (721.549 ms) : 0, 721549
BytebuddyAgent [candidate] (718.612 ms) : 0, 718612
GlobalTracer [baseline] (240.535 ms) : 0, 240535
GlobalTracer [candidate] (240.154 ms) : 0, 240154
AppSec [baseline] (55.982 ms) : 0, 55982
AppSec [candidate] (56.475 ms) : 0, 56475
Remote Config [baseline] (713.031 µs) : 0, 713
Remote Config [candidate] (695.532 µs) : 0, 696
Telemetry [baseline] (11.55 ms) : 0, 11550
Telemetry [candidate] (10.792 ms) : 0, 10792
section iast
BytebuddyAgent [baseline] (841.517 ms) : 0, 841517
BytebuddyAgent [candidate] (842.523 ms) : 0, 842523
GlobalTracer [baseline] (231.863 ms) : 0, 231863
GlobalTracer [candidate] (231.809 ms) : 0, 231809
IAST [baseline] (23.148 ms) : 0, 23148
IAST [candidate] (22.828 ms) : 0, 22828
AppSec [baseline] (57.603 ms) : 0, 57603
AppSec [candidate] (57.489 ms) : 0, 57489
Remote Config [baseline] (630.797 µs) : 0, 631
Remote Config [candidate] (619.001 µs) : 0, 619
Telemetry [baseline] (8.865 ms) : 0, 8865
Telemetry [candidate] (8.738 ms) : 0, 8738
section iast_HARDCODED_SECRET_DISABLED
BytebuddyAgent [baseline] (842.757 ms) : 0, 842757
BytebuddyAgent [candidate] (836.091 ms) : 0, 836091
GlobalTracer [baseline] (231.351 ms) : 0, 231351
GlobalTracer [candidate] (230.566 ms) : 0, 230566
IAST [baseline] (23.075 ms) : 0, 23075
IAST [candidate] (22.918 ms) : 0, 22918
AppSec [baseline] (57.606 ms) : 0, 57606
AppSec [candidate] (57.44 ms) : 0, 57440
Remote Config [baseline] (612.347 µs) : 0, 612
Remote Config [candidate] (607.312 µs) : 0, 607
Telemetry [baseline] (8.747 ms) : 0, 8747
Telemetry [candidate] (8.763 ms) : 0, 8763
section iast_TELEMETRY_OFF
BytebuddyAgent [baseline] (840.187 ms) : 0, 840187
BytebuddyAgent [candidate] (835.823 ms) : 0, 835823
GlobalTracer [baseline] (231.984 ms) : 0, 231984
GlobalTracer [candidate] (231.554 ms) : 0, 231554
IAST [baseline] (28.083 ms) : 0, 28083
IAST [candidate] (26.144 ms) : 0, 26144
AppSec [baseline] (52.073 ms) : 0, 52073
AppSec [candidate] (52.978 ms) : 0, 52978
Remote Config [baseline] (633.61 µs) : 0, 634
Remote Config [candidate] (622.332 µs) : 0, 622
Telemetry [baseline] (8.763 ms) : 0, 8763
Telemetry [candidate] (8.594 ms) : 0, 8594
LoadParameters
See matching parameters
SummaryFound 0 performance improvements and 0 performance regressions! Performance is the same for 13 metrics, 15 unstable metrics. Request duration reports for insecure-bankgantt
title insecure-bank - request duration [CI 0.99] : candidate=1.47.0-SNAPSHOT~a482447aeb, baseline=1.47.0-SNAPSHOT~a47c3cefc3
dateFormat X
axisFormat %s
section baseline
no_agent (378.264 µs) : 358, 398
. : milestone, 378,
iast (513.22 µs) : 490, 536
. : milestone, 513,
iast_FULL (730.876 µs) : 709, 753
. : milestone, 731,
iast_GLOBAL (569.138 µs) : 546, 593
. : milestone, 569,
iast_HARDCODED_SECRET_DISABLED (510.924 µs) : 489, 533
. : milestone, 511,
iast_INACTIVE (466.042 µs) : 444, 488
. : milestone, 466,
iast_TELEMETRY_OFF (501.539 µs) : 478, 525
. : milestone, 502,
tracing (462.175 µs) : 441, 484
. : milestone, 462,
section candidate
no_agent (381.982 µs) : 361, 403
. : milestone, 382,
iast (519.607 µs) : 496, 544
. : milestone, 520,
iast_FULL (732.502 µs) : 711, 754
. : milestone, 733,
iast_GLOBAL (567.041 µs) : 545, 589
. : milestone, 567,
iast_HARDCODED_SECRET_DISABLED (514.01 µs) : 492, 536
. : milestone, 514,
iast_INACTIVE (461.886 µs) : 441, 483
. : milestone, 462,
iast_TELEMETRY_OFF (504.033 µs) : 481, 527
. : milestone, 504,
tracing (458.605 µs) : 438, 479
. : milestone, 459,
Request duration reports for petclinicgantt
title petclinic - request duration [CI 0.99] : candidate=1.47.0-SNAPSHOT~a482447aeb, baseline=1.47.0-SNAPSHOT~a47c3cefc3
dateFormat X
axisFormat %s
section baseline
no_agent (1.361 ms) : 1341, 1381
. : milestone, 1361,
appsec (1.753 ms) : 1729, 1777
. : milestone, 1753,
appsec_no_iast (1.749 ms) : 1723, 1775
. : milestone, 1749,
iast (1.502 ms) : 1477, 1527
. : milestone, 1502,
profiling (1.554 ms) : 1530, 1579
. : milestone, 1554,
tracing (1.515 ms) : 1491, 1539
. : milestone, 1515,
section candidate
no_agent (1.362 ms) : 1342, 1381
. : milestone, 1362,
appsec (1.776 ms) : 1753, 1799
. : milestone, 1776,
appsec_no_iast (1.767 ms) : 1743, 1790
. : milestone, 1767,
iast (1.515 ms) : 1491, 1539
. : milestone, 1515,
profiling (1.529 ms) : 1505, 1552
. : milestone, 1529,
tracing (1.508 ms) : 1484, 1532
. : milestone, 1508,
DacapoParameters
See matching parameters
SummaryFound 0 performance improvements and 0 performance regressions! Performance is the same for 12 metrics, 0 unstable metrics. Execution time for tomcatgantt
title tomcat - execution time [CI 0.99] : candidate=1.47.0-SNAPSHOT~a482447aeb, baseline=1.47.0-SNAPSHOT~a47c3cefc3
dateFormat X
axisFormat %s
section baseline
no_agent (1.463 ms) : 1452, 1474
. : milestone, 1463,
appsec (2.347 ms) : 2303, 2390
. : milestone, 2347,
iast (2.107 ms) : 2052, 2162
. : milestone, 2107,
iast_GLOBAL (2.137 ms) : 2082, 2193
. : milestone, 2137,
profiling (1.95 ms) : 1907, 1993
. : milestone, 1950,
tracing (1.944 ms) : 1901, 1986
. : milestone, 1944,
section candidate
no_agent (1.471 ms) : 1460, 1483
. : milestone, 1471,
appsec (2.358 ms) : 2315, 2402
. : milestone, 2358,
iast (2.104 ms) : 2049, 2159
. : milestone, 2104,
iast_GLOBAL (2.141 ms) : 2086, 2196
. : milestone, 2141,
profiling (1.952 ms) : 1908, 1995
. : milestone, 1952,
tracing (1.941 ms) : 1899, 1984
. : milestone, 1941,
Execution time for biojavagantt
title biojava - execution time [CI 0.99] : candidate=1.47.0-SNAPSHOT~a482447aeb, baseline=1.47.0-SNAPSHOT~a47c3cefc3
dateFormat X
axisFormat %s
section baseline
no_agent (15.687 s) : 15687000, 15687000
. : milestone, 15687000,
appsec (15.211 s) : 15211000, 15211000
. : milestone, 15211000,
iast (18.888 s) : 18888000, 18888000
. : milestone, 18888000,
iast_GLOBAL (17.951 s) : 17951000, 17951000
. : milestone, 17951000,
profiling (15.277 s) : 15277000, 15277000
. : milestone, 15277000,
tracing (14.959 s) : 14959000, 14959000
. : milestone, 14959000,
section candidate
no_agent (15.057 s) : 15057000, 15057000
. : milestone, 15057000,
appsec (15.013 s) : 15013000, 15013000
. : milestone, 15013000,
iast (19.048 s) : 19048000, 19048000
. : milestone, 19048000,
iast_GLOBAL (18.114 s) : 18114000, 18114000
. : milestone, 18114000,
profiling (15.124 s) : 15124000, 15124000
. : milestone, 15124000,
tracing (14.936 s) : 14936000, 14936000
. : milestone, 14936000,
|
7954ef0
to
9b670db
Compare
485c09d
to
a482447
Compare
@@ -242,6 +249,10 @@ public void prepareMetrics() { | |||
new RaspError(counter, ruleType, WafMetricCollector.wafVersion, i))) { | |||
return; | |||
} | |||
if (!rawMetricsQueue.offer( |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There is a comment at the beginning of the code block what could lead to a misunderstanding
RASP rule type for each possible error code
Could you change it?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM! only a minor comment
| Package | Type | Package file | Manager | Update | Change | |---|---|---|---|---|---| | [com.datadoghq:dd-trace-api](https://github.com/datadog/dd-trace-java) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `1.46.1` -> `1.47.0` | | [com.datadoghq:dd-trace-ot](https://github.com/datadog/dd-trace-java) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `1.46.1` -> `1.47.0` | | [software.amazon.awssdk:sdk-core](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.30.33` -> `2.30.34` | | [software.amazon.awssdk:sqs](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.30.33` -> `2.30.34` | | [software.amazon.awssdk:dynamodb-enhanced](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.30.33` -> `2.30.34` | | [software.amazon.awssdk:dynamodb](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.30.33` -> `2.30.34` | | [software.amazon.awssdk:aws-core](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.30.33` -> `2.30.34` | | [software.amazon.awssdk:bom](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.30.33` -> `2.30.34` | | [software.amazon.awssdk:auth](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.30.33` -> `2.30.34` | --- ### Release Notes <details> <summary>datadog/dd-trace-java (com.datadoghq:dd-trace-api)</summary> ### [`v1.47.0`](https://github.com/DataDog/dd-trace-java/releases/tag/v1.47.0): 1.47.0 ##### Components ##### Application Security Management (IAST) - 🐛 Exclude com.stripe.net.HttpURLConnectionClient to solve IAST SSRF vulnerability false positives ([#​8483](DataDog/dd-trace-java#8483) - [@​jandro996](https://github.com/jandro996)) - 🐛 Add exclusion to solve IAST weak randomness vulnerability false positives ([#​8462](DataDog/dd-trace-java#8462) - [@​jandro996](https://github.com/jandro996)) - ✨ Fix weak randomness false positive in Kafka client ([#​8408](DataDog/dd-trace-java#8408) - [@​smola](https://github.com/smola)) - ✨ Fix location for SSRF with Kong Unirest ([#​8407](DataDog/dd-trace-java#8407) - [@​smola](https://github.com/smola)) - ✨ Exclude IBM Instana from IAST ([#​8406](DataDog/dd-trace-java#8406) - [@​smola](https://github.com/smola)) - 🐛 Fix org.json iast instrumentation test for latest dependency ([#​8347](DataDog/dd-trace-java#8347) - [@​jandro996](https://github.com/jandro996)) - ✨ Configuration to Disable APM Tracing ([#​8219](DataDog/dd-trace-java#8219) - [@​jandro996](https://github.com/jandro996)) - ✨ Address cookie vulnerability cardinality issues ([#​8210](DataDog/dd-trace-java#8210) - [@​jandro996](https://github.com/jandro996)) - ✨ Email HTML Injection detection in IAST ([#​8205](DataDog/dd-trace-java#8205) - [@​sezen-datadog](https://github.com/sezen-datadog)) ##### Application Security Management (WAF) - 🐛✨ Ensure usr.exists tag is not overridden when UsernameNotFoundException is thrown ([#​8376](DataDog/dd-trace-java#8376) - [@​manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) - 🐛✨ Ensure usr.exists tag is not overridden by auto instrumentation ([#​8374](DataDog/dd-trace-java#8374) - [@​manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) - ✨ Update appsec metrics with event_rules_version tag ([#​8354](DataDog/dd-trace-java#8354) - [@​sezen-datadog](https://github.com/sezen-datadog)) - ✨ Update metrics: appsec.waf.requests ([#​8353](DataDog/dd-trace-java#8353) - [@​Mariovido](https://github.com/Mariovido)) - ✨ Improve ASM support in vert.x 5.0 ([#​8285](DataDog/dd-trace-java#8285) - [@​manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) - ✨ Update metrics: appsec.waf.updates and appsec.waf.init ([#​8280](DataDog/dd-trace-java#8280) - [@​Mariovido](https://github.com/Mariovido)) - ✨ Configuration to Disable APM Tracing ([#​8219](DataDog/dd-trace-java#8219) - [@​jandro996](https://github.com/jandro996)) ##### Build & Tooling - 🐛 Do not generate Muzzle references for primitive arrays in method body ([#​8361](DataDog/dd-trace-java#8361) - [@​amarziali](https://github.com/amarziali)) - 📖 Improve dev env setup documentation for Windows ([#​8180](DataDog/dd-trace-java#8180) - [@​lucaspimentel](https://github.com/lucaspimentel)) ##### Continuous Integration Visibility - ✨ Add support for skip-EFD tagging ([#​8487](DataDog/dd-trace-java#8487) - [@​nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - 🐛 Fix an NPE in Gradle Android instrumentation ([#​8484](DataDog/dd-trace-java#8484) - [@​nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - ✨ Consider modified tests when applying fail-fast tests ordering ([#​8474](DataDog/dd-trace-java#8474) - [@​nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - ✨ Implement tests reordering for TestNG ([#​8467](DataDog/dd-trace-java#8467) - [@​nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - 🐛 Fix Gradle Launcher instrumentation to not interfere with Gradle Test Kit ([#​8465](DataDog/dd-trace-java#8465) - [@​nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - 🧹 Use separate TestEventHandlers per framework in CI Vis instrumentations ([#​8451](DataDog/dd-trace-java#8451) - [@​daniel-mohedano](https://github.com/daniel-mohedano)) - ✨ Remove warning log when JUnit 4 test method cannot be retrieved ([#​8445](DataDog/dd-trace-java#8445) - [@​nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - 🐛 Fix Scalatest tracing for tests that are reported asynchronously ([#​8444](DataDog/dd-trace-java#8444) - [@​nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - ✨ Implement attempt to fix tests ([#​8393](DataDog/dd-trace-java#8393) - [@​daniel-mohedano](https://github.com/daniel-mohedano)) - ✨ Implement test disabling ([#​8377](DataDog/dd-trace-java#8377) - [@​daniel-mohedano](https://github.com/daniel-mohedano)) - ✨ Update CODEOWNERS parser to not log errors on comments with leading whitespace ([#​8349](DataDog/dd-trace-java#8349) - [@​nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - ✨ Request Test Management tests list ([#​8345](DataDog/dd-trace-java#8345) - [@​daniel-mohedano](https://github.com/daniel-mohedano)) - ✨ Receive test management settings from CIVis settings request ([#​8331](DataDog/dd-trace-java#8331) - [@​daniel-mohedano](https://github.com/daniel-mohedano)) - ✨ Implement quarantined tests tagging ([#​8326](DataDog/dd-trace-java#8326) - [@​nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - ✨ Implement tests quarantining ([#​8320](DataDog/dd-trace-java#8320) - [@​nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - ✨ Add tag to specify if the user is setting DD_SERVICE ([#​8318](DataDog/dd-trace-java#8318) - [@​daniel-mohedano](https://github.com/daniel-mohedano)) ##### Crash tracking - ✨ Only fork jps when required ([#​8419](DataDog/dd-trace-java#8419) - [@​mcculls](https://github.com/mcculls)) - 🐛 Use Java home of the crashed process to launch crash uploader ([#​8348](DataDog/dd-trace-java#8348) - [@​jbachorik](https://github.com/jbachorik)) ##### Data Streams Monitoring - 🐛 Fix error happening when sqs message attributes are readonly ([#​8473](DataDog/dd-trace-java#8473) - [@​vandonr](https://github.com/vandonr)) - 🐛 Fix bug on proto schema extraction ([#​8403](DataDog/dd-trace-java#8403) - [@​vandonr](https://github.com/vandonr)) - 🐛 Fix service name overrides in consumers ([#​8387](DataDog/dd-trace-java#8387) - [@​piochelepiotr](https://github.com/piochelepiotr)) ##### Database Monitoring - ✨ Add DBMTracePreparedStatements to tracer configuration log ([#​8508](DataDog/dd-trace-java#8508) - [@​cecile75](https://github.com/cecile75)) ##### Dynamic Instrumentation - ✨ Look in another location for grpc service methods ([#​8468](DataDog/dd-trace-java#8468) - [@​evanchooly](https://github.com/evanchooly)) - 🐛 Fix Exception Replay with Lambda proxy classes ([#​8452](DataDog/dd-trace-java#8452) - [@​jpbempel](https://github.com/jpbempel)) - ✨ Add code origin support for spring-webmvc ([#​8416](DataDog/dd-trace-java#8416) - [@​evanchooly](https://github.com/evanchooly)) - ✨ Add support for scanning jar from loaded class ([#​8370](DataDog/dd-trace-java#8370) - [@​jpbempel](https://github.com/jpbempel)) - 🐛 Disable capture of entry values ([#​8369](DataDog/dd-trace-java#8369) - [@​jpbempel](https://github.com/jpbempel)) - 🐛 Fix CodeOrigin for `@Trace` annotation ([#​8344](DataDog/dd-trace-java#8344) - [@​jpbempel](https://github.com/jpbempel)) - 🐛 Fix equals/hashCode for CodeOrigin probe ([#​8319](DataDog/dd-trace-java#8319) - [@​jpbempel](https://github.com/jpbempel)) - ✨ Add code origin support to kafka message listeners ([#​8301](DataDog/dd-trace-java#8301) - [@​evanchooly](https://github.com/evanchooly)) ##### Metrics - ✨ Create metric: appsec.waf.error ([#​8381](DataDog/dd-trace-java#8381) - [@​sezen-datadog](https://github.com/sezen-datadog)) - ✨ Create metric: appsec.rasp.error ([#​8364](DataDog/dd-trace-java#8364) - [@​sezen-datadog](https://github.com/sezen-datadog)) ##### Profiling - ✨ Bump ddprof library to 1.22.0 ([#​8463](DataDog/dd-trace-java#8463) - [@​jbachorik](https://github.com/jbachorik)) - IBM J9 8u361 corresponds to OpenJDK 8u362 by [@​jbachorik](https://github.com/jbachorik) in DataDog/java-profiler#187 - Fix compatibility with musl libc 1.2.4 by [@​jbachorik](https://github.com/jbachorik) in DataDog/java-profiler#189 - Modify version extraction by [@​jbachorik](https://github.com/jbachorik) in DataDog/java-profiler#179 - Do not write null values to jvminfo event by [@​jbachorik](https://github.com/jbachorik) in DataDog/java-profiler#184 - Productize VMStructs-based stack walker by [@​jbachorik](https://github.com/jbachorik) in DataDog/java-profiler#177 - A few minor downport issues by [@​jbachorik](https://github.com/jbachorik) in DataDog/java-profiler#180 - Enable ASGCT by default on fairly safe J9 JDK versions by [@​jbachorik](https://github.com/jbachorik) in DataDog/java-profiler#181 - 🐛 Exclude OrderedThreadPoolExecutor from queue-time measurements ([#​8456](DataDog/dd-trace-java#8456) - [@​jbachorik](https://github.com/jbachorik)) - ✨ Record JVM info on JVMs without JFR ([#​8431](DataDog/dd-trace-java#8431) - [@​jbachorik](https://github.com/jbachorik)) - 🐛 Actually use CleanupTask in TempLocationManager ([#​8420](DataDog/dd-trace-java#8420) - [@​mcculls](https://github.com/mcculls)) - ✨ Only fork jps when required ([#​8419](DataDog/dd-trace-java#8419) - [@​mcculls](https://github.com/mcculls)) - 🐛 Adjust JFR checks for J9 ([#​8405](DataDog/dd-trace-java#8405) - [@​jbachorik](https://github.com/jbachorik)) - 🧹 Disable smap RSS parsing by default ([#​8342](DataDog/dd-trace-java#8342) - [@​MattAlp](https://github.com/MattAlp)) ##### Telemetry - 🐛 Add support for JBoss jar:file format to DependencyResolver ([#​8428](DataDog/dd-trace-java#8428) - [@​jandro996](https://github.com/jandro996)) - ✨ Update metrics: appsec.waf.requests ([#​8353](DataDog/dd-trace-java#8353) - [@​Mariovido](https://github.com/Mariovido)) ##### Trace context propagation - ✨ Introduce tracing propagator ([#​8313](DataDog/dd-trace-java#8313) - [@​PerfectSlayer](https://github.com/PerfectSlayer)) ##### Tracer core - 🐛 Fix Stable Config telemetry source names ([#​8460](DataDog/dd-trace-java#8460) - [@​BaptisteFoy](https://github.com/BaptisteFoy)) - ✨ Probe trace endpoints with a valid payload of empty arrays ([#​8414](DataDog/dd-trace-java#8414) - [@​mcculls](https://github.com/mcculls)) - ✨ Add 1 minute fail-safe to JUL/JMX class-loading callback ([#​8399](DataDog/dd-trace-java#8399) - [@​mcculls](https://github.com/mcculls)) - ✨ Migrate DSM injection calls to context-first APIs ([#​8383](DataDog/dd-trace-java#8383) - [@​PerfectSlayer](https://github.com/PerfectSlayer)) - 🧹 Move continuation capture methods from scope to tracer ([#​8371](DataDog/dd-trace-java#8371) - [@​mcculls](https://github.com/mcculls)) - ✨ Migrate context extraction calls to context-first APIs ([#​8368](DataDog/dd-trace-java#8368) - [@​PerfectSlayer](https://github.com/PerfectSlayer)) - 🧹 Migrate context injection calls to context-first APIs ([#​8358](DataDog/dd-trace-java#8358) - [@​PerfectSlayer](https://github.com/PerfectSlayer)) - 💡 Support reading configurations from files ([#​8338](DataDog/dd-trace-java#8338) - [@​mtoffl01](https://github.com/mtoffl01)) - 💡 Implementation of BaggagePropagator and BaggageContext ([#​8330](DataDog/dd-trace-java#8330) - [@​mhlidd](https://github.com/mhlidd)) - 🧹 Combine continuation implementations into one which supports multiple activations ([#​8324](DataDog/dd-trace-java#8324) - [@​mcculls](https://github.com/mcculls)) - ✨ Introduce tracing propagator ([#​8313](DataDog/dd-trace-java#8313) - [@​PerfectSlayer](https://github.com/PerfectSlayer)) - ✨ Remove old context propagation API ([#​8271](DataDog/dd-trace-java#8271) - [@​PerfectSlayer](https://github.com/PerfectSlayer)) ##### Instrumentations ##### AWS Lambda instrumentation - 🐛 Send error message and stack to Lambda extension ([#​8417](DataDog/dd-trace-java#8417) - [@​nhulston](https://github.com/nhulston)) ##### AWS SDK instrumentation - 🐛 Fix error happening when sqs message attributes are readonly ([#​8473](DataDog/dd-trace-java#8473) - [@​vandonr](https://github.com/vandonr)) - 💡 Inject trace context into AWS Step Functions input ([#​7585](DataDog/dd-trace-java#7585) - [@​DylanLovesCoffee](https://github.com/DylanLovesCoffee)) ##### Core Java language instrumentation - ✨ Look in another location for grpc service methods ([#​8468](DataDog/dd-trace-java#8468) - [@​evanchooly](https://github.com/evanchooly)) - ✨ Add code origin support for spring-webmvc ([#​8416](DataDog/dd-trace-java#8416) - [@​evanchooly](https://github.com/evanchooly)) - 💡 Implementation of BaggagePropagator and BaggageContext ([#​8330](DataDog/dd-trace-java#8330) - [@​mhlidd](https://github.com/mhlidd)) - ✨ Add code origin support to kafka message listeners ([#​8301](DataDog/dd-trace-java#8301) - [@​evanchooly](https://github.com/evanchooly)) ##### gRPC instrumentation - ✨ Look in another location for grpc service methods ([#​8468](DataDog/dd-trace-java#8468) - [@​evanchooly](https://github.com/evanchooly)) ##### Kafka instrumentation - ✨ Add messaging.destination.name tag to kafka integrations ([#​8366](DataDog/dd-trace-java#8366) - [@​rarguelloF](https://github.com/rarguelloF)) ##### Protocol Buffer instrumentation - 🐛 Fix bug on proto schema extraction ([#​8403](DataDog/dd-trace-java#8403) - [@​vandonr](https://github.com/vandonr)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "after 6pm every weekday,before 2am every weekday" in timezone Australia/Melbourne, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). GitOrigin-RevId: 108a0f86aa59ab4c938cbac0688dd4c19cb301fa
What Does This Do
This metric can be used to count the number of errors generated when calling ddwaf_run when evaluating WAF addresses, or rather non-RASP addresses.
Motivation
Additional Notes
Counterpart to the appsec.rasp.error found here #8364
Contributor Checklist
type:
and (comp:
orinst:
) labels in addition to any usefull labelsclose
,fix
or any linking keywords when referencing an issue.Use
solves
instead, and assign the PR milestone to the issueJira ticket: APPSEC-56703