Make the default config sources more robust when a security manager is installed #8544

mcculls · 2025-03-12T15:42:22Z

What Does This Do

If we don't have permission to access system properties or the environment then fall back to defaults.

Motivation

Supports installation of helpers, even when their target location is lacking permission to lookup configuration.

Contributor Checklist

Format the title according the contribution guidelines
Assign the type: and (comp: or inst:) labels in addition to any usefull labels
Don't use close, fix or any linking keywords when referencing an issue.
Use solves instead, and assign the PR milestone to the issue
Update the public documentation in case of new configuration flag or behavior

Jira ticket: APMS-14831

…s installed If we don't have permission to access system properties or the environment then fall back to defaults.

pr-commenter · 2025-03-12T16:18:18Z

Benchmarks

Startup

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	mcculls/protect-config-system-calls
git_commit_date	1741794879	1741796465
git_commit_sha	`ab73c44`	`640cddb`
release_version	1.48.0-SNAPSHOT~ab73c4495d	1.48.0-SNAPSHOT~640cddb347

See matching parameters

	Baseline	Candidate
application	insecure-bank	insecure-bank
ci_job_date	1741798933	1741798933
ci_job_id	844875908	844875908
ci_pipeline_id	58592865	58592865
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version	Linux runner-2wkmbgws-project-304-concurrent-7-ieq34gyn 6.8.0-1024-aws #26~22.04.1-Ubuntu SMP Wed Feb 19 06:54:57 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux	Linux runner-2wkmbgws-project-304-concurrent-7-ieq34gyn 6.8.0-1024-aws #26~22.04.1-Ubuntu SMP Wed Feb 19 06:54:57 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
module	Agent	Agent
parent	None	None
variant	iast	iast

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 58 metrics, 5 unstable metrics.

Startup time reports for petclinic

gantt
    title petclinic - global startup overhead: candidate=1.48.0-SNAPSHOT~640cddb347, baseline=1.48.0-SNAPSHOT~ab73c4495d

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.052 s) : 0, 1052344
Total [baseline] (10.491 s) : 0, 10491194
Agent [candidate] (1.042 s) : 0, 1041920
Total [candidate] (10.458 s) : 0, 10457623
section appsec
Agent [baseline] (1.191 s) : 0, 1190758
Total [baseline] (10.768 s) : 0, 10767625
Agent [candidate] (1.192 s) : 0, 1192005
Total [candidate] (10.758 s) : 0, 10757748
section iast
Agent [baseline] (1.18 s) : 0, 1179980
Total [baseline] (11.072 s) : 0, 11072360
Agent [candidate] (1.175 s) : 0, 1175498
Total [candidate] (11.02 s) : 0, 11019927
section profiling
Agent [baseline] (1.263 s) : 0, 1263223
Total [baseline] (10.862 s) : 0, 10862136
Agent [candidate] (1.272 s) : 0, 1271959
Total [candidate] (10.944 s) : 0, 10944151

baseline results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.052 s	-
Agent	appsec	1.191 s	138.414 ms (13.2%)
Agent	iast	1.18 s	127.637 ms (12.1%)
Agent	profiling	1.263 s	210.88 ms (20.0%)
Total	tracing	10.491 s	-
Total	appsec	10.768 s	276.431 ms (2.6%)
Total	iast	11.072 s	581.166 ms (5.5%)
Total	profiling	10.862 s	370.942 ms (3.5%)

candidate results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.042 s	-
Agent	appsec	1.192 s	150.086 ms (14.4%)
Agent	iast	1.175 s	133.578 ms (12.8%)
Agent	profiling	1.272 s	230.039 ms (22.1%)
Total	tracing	10.458 s	-
Total	appsec	10.758 s	300.125 ms (2.9%)
Total	iast	11.02 s	562.303 ms (5.4%)
Total	profiling	10.944 s	486.528 ms (4.7%)

gantt
    title petclinic - break down per module: candidate=1.48.0-SNAPSHOT~640cddb347, baseline=1.48.0-SNAPSHOT~ab73c4495d

    dateFormat X
    axisFormat %s
section tracing
BytebuddyAgent [baseline] (726.107 ms) : 0, 726107
BytebuddyAgent [candidate] (719.121 ms) : 0, 719121
GlobalTracer [baseline] (242.302 ms) : 0, 242302
GlobalTracer [candidate] (240.564 ms) : 0, 240564
AppSec [baseline] (55.582 ms) : 0, 55582
AppSec [candidate] (55.244 ms) : 0, 55244
Remote Config [baseline] (705.336 µs) : 0, 705
Remote Config [candidate] (684.319 µs) : 0, 684
Telemetry [baseline] (12.599 ms) : 0, 12599
Telemetry [candidate] (11.377 ms) : 0, 11377
section appsec
BytebuddyAgent [baseline] (741.645 ms) : 0, 741645
BytebuddyAgent [candidate] (742.206 ms) : 0, 742206
GlobalTracer [baseline] (237.202 ms) : 0, 237202
GlobalTracer [candidate] (238.37 ms) : 0, 238370
AppSec [baseline] (177.33 ms) : 0, 177330
AppSec [candidate] (176.483 ms) : 0, 176483
Remote Config [baseline] (660.445 µs) : 0, 660
Remote Config [candidate] (656.464 µs) : 0, 656
Telemetry [baseline] (8.257 ms) : 0, 8257
Telemetry [candidate] (8.26 ms) : 0, 8260
IAST [baseline] (21.418 ms) : 0, 21418
IAST [candidate] (22.042 ms) : 0, 22042
section iast
BytebuddyAgent [baseline] (844.588 ms) : 0, 844588
BytebuddyAgent [candidate] (840.572 ms) : 0, 840572
GlobalTracer [baseline] (231.552 ms) : 0, 231552
GlobalTracer [candidate] (231.568 ms) : 0, 231568
AppSec [baseline] (56.752 ms) : 0, 56752
AppSec [candidate] (55.577 ms) : 0, 55577
Remote Config [baseline] (600.874 µs) : 0, 601
Remote Config [candidate] (605.051 µs) : 0, 605
Telemetry [baseline] (8.684 ms) : 0, 8684
Telemetry [candidate] (8.669 ms) : 0, 8669
IAST [baseline] (22.849 ms) : 0, 22849
IAST [candidate] (23.524 ms) : 0, 23524
section profiling
BytebuddyAgent [baseline] (711.101 ms) : 0, 711101
BytebuddyAgent [candidate] (715.248 ms) : 0, 715248
GlobalTracer [baseline] (351.035 ms) : 0, 351035
GlobalTracer [candidate] (353.315 ms) : 0, 353315
AppSec [baseline] (54.932 ms) : 0, 54932
AppSec [candidate] (54.562 ms) : 0, 54562
Remote Config [baseline] (673.872 µs) : 0, 674
Remote Config [candidate] (689.679 µs) : 0, 690
Telemetry [baseline] (8.949 ms) : 0, 8949
Telemetry [candidate] (9.012 ms) : 0, 9012
ProfilingAgent [baseline] (96.048 ms) : 0, 96048
ProfilingAgent [candidate] (98.484 ms) : 0, 98484
Profiling [baseline] (96.072 ms) : 0, 96072
Profiling [candidate] (98.508 ms) : 0, 98508

Startup time reports for insecure-bank

gantt
    title insecure-bank - global startup overhead: candidate=1.48.0-SNAPSHOT~640cddb347, baseline=1.48.0-SNAPSHOT~ab73c4495d

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.049 s) : 0, 1048731
Total [baseline] (8.727 s) : 0, 8727486
Agent [candidate] (1.049 s) : 0, 1049361
Total [candidate] (8.689 s) : 0, 8689220
section iast
Agent [baseline] (1.19 s) : 0, 1189825
Total [baseline] (9.353 s) : 0, 9352521
Agent [candidate] (1.173 s) : 0, 1173087
Total [candidate] (9.224 s) : 0, 9224051
section iast_HARDCODED_SECRET_DISABLED
Agent [baseline] (1.172 s) : 0, 1172448
Total [baseline] (9.228 s) : 0, 9227797
Agent [candidate] (1.173 s) : 0, 1173295
Total [candidate] (9.236 s) : 0, 9236063
section iast_TELEMETRY_OFF
Agent [baseline] (1.172 s) : 0, 1171669
Total [baseline] (9.298 s) : 0, 9298445
Agent [candidate] (1.172 s) : 0, 1171647
Total [candidate] (9.254 s) : 0, 9253746

baseline results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.049 s	-
Agent	iast	1.19 s	141.094 ms (13.5%)
Agent	iast_HARDCODED_SECRET_DISABLED	1.172 s	123.718 ms (11.8%)
Agent	iast_TELEMETRY_OFF	1.172 s	122.938 ms (11.7%)
Total	tracing	8.727 s	-
Total	iast	9.353 s	625.035 ms (7.2%)
Total	iast_HARDCODED_SECRET_DISABLED	9.228 s	500.311 ms (5.7%)
Total	iast_TELEMETRY_OFF	9.298 s	570.959 ms (6.5%)

candidate results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.049 s	-
Agent	iast	1.173 s	123.726 ms (11.8%)
Agent	iast_HARDCODED_SECRET_DISABLED	1.173 s	123.934 ms (11.8%)
Agent	iast_TELEMETRY_OFF	1.172 s	122.286 ms (11.7%)
Total	tracing	8.689 s	-
Total	iast	9.224 s	534.831 ms (6.2%)
Total	iast_HARDCODED_SECRET_DISABLED	9.236 s	546.844 ms (6.3%)
Total	iast_TELEMETRY_OFF	9.254 s	564.526 ms (6.5%)

gantt
    title insecure-bank - break down per module: candidate=1.48.0-SNAPSHOT~640cddb347, baseline=1.48.0-SNAPSHOT~ab73c4495d

    dateFormat X
    axisFormat %s
section tracing
BytebuddyAgent [baseline] (724.078 ms) : 0, 724078
BytebuddyAgent [candidate] (722.801 ms) : 0, 722801
GlobalTracer [baseline] (241.48 ms) : 0, 241480
GlobalTracer [candidate] (241.087 ms) : 0, 241087
AppSec [baseline] (55.399 ms) : 0, 55399
AppSec [candidate] (55.464 ms) : 0, 55464
Remote Config [baseline] (678.063 µs) : 0, 678
Remote Config [candidate] (695.001 µs) : 0, 695
Telemetry [baseline] (12.139 ms) : 0, 12139
Telemetry [candidate] (14.348 ms) : 0, 14348
section iast
BytebuddyAgent [baseline] (851.972 ms) : 0, 851972
BytebuddyAgent [candidate] (838.412 ms) : 0, 838412
GlobalTracer [baseline] (233.12 ms) : 0, 233120
GlobalTracer [candidate] (230.863 ms) : 0, 230863
IAST [baseline] (23.12 ms) : 0, 23120
IAST [candidate] (22.886 ms) : 0, 22886
AppSec [baseline] (57.107 ms) : 0, 57107
AppSec [candidate] (56.656 ms) : 0, 56656
Remote Config [baseline] (619.476 µs) : 0, 619
Remote Config [candidate] (604.079 µs) : 0, 604
Telemetry [baseline] (8.711 ms) : 0, 8711
Telemetry [candidate] (8.813 ms) : 0, 8813
section iast_HARDCODED_SECRET_DISABLED
BytebuddyAgent [baseline] (838.222 ms) : 0, 838222
BytebuddyAgent [candidate] (838.097 ms) : 0, 838097
GlobalTracer [baseline] (230.917 ms) : 0, 230917
GlobalTracer [candidate] (231.12 ms) : 0, 231120
IAST [baseline] (23.517 ms) : 0, 23517
IAST [candidate] (22.99 ms) : 0, 22990
AppSec [baseline] (55.6 ms) : 0, 55600
AppSec [candidate] (56.784 ms) : 0, 56784
Remote Config [baseline] (601.961 µs) : 0, 602
Remote Config [candidate] (612.04 µs) : 0, 612
Telemetry [baseline] (8.616 ms) : 0, 8616
Telemetry [candidate] (8.739 ms) : 0, 8739
section iast_TELEMETRY_OFF
BytebuddyAgent [baseline] (837.288 ms) : 0, 837288
BytebuddyAgent [candidate] (838.332 ms) : 0, 838332
GlobalTracer [baseline] (230.626 ms) : 0, 230626
GlobalTracer [candidate] (230.092 ms) : 0, 230092
IAST [baseline] (22.713 ms) : 0, 22713
IAST [candidate] (22.387 ms) : 0, 22387
AppSec [baseline] (56.81 ms) : 0, 56810
AppSec [candidate] (56.708 ms) : 0, 56708
Remote Config [baseline] (614.623 µs) : 0, 615
Remote Config [candidate] (603.902 µs) : 0, 604
Telemetry [baseline] (8.704 ms) : 0, 8704
Telemetry [candidate] (8.544 ms) : 0, 8544

Load

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
end_time	2025-03-12T16:30:17	2025-03-12T16:38:04
git_branch	master	mcculls/protect-config-system-calls
git_commit_date	1741794879	1741796465
git_commit_sha	`ab73c44`	`640cddb`
release_version	1.48.0-SNAPSHOT~ab73c4495d	1.48.0-SNAPSHOT~640cddb347
start_time	2025-03-12T16:30:03	2025-03-12T16:37:50

See matching parameters

	Baseline	Candidate
application	insecure-bank	insecure-bank
ci_job_date	1741797883	1741797883
ci_job_id	844875909	844875909
ci_pipeline_id	58592865	58592865
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version	Linux runner-2wkmbgws-project-304-concurrent-8-2kpx0qu4 6.8.0-1024-aws #26~22.04.1-Ubuntu SMP Wed Feb 19 06:54:57 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux	Linux runner-2wkmbgws-project-304-concurrent-8-2kpx0qu4 6.8.0-1024-aws #26~22.04.1-Ubuntu SMP Wed Feb 19 06:54:57 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
variant	iast	iast

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 14 metrics, 16 unstable metrics.

Request duration reports for insecure-bank

gantt
    title insecure-bank - request duration [CI 0.99] : candidate=1.48.0-SNAPSHOT~640cddb347, baseline=1.48.0-SNAPSHOT~ab73c4495d
    dateFormat X
    axisFormat %s
section baseline
no_agent (382.17 µs) : 362, 403
.   : milestone, 382,
iast (521.551 µs) : 500, 543
.   : milestone, 522,
iast_FULL (732.038 µs) : 710, 754
.   : milestone, 732,
iast_GLOBAL (570.875 µs) : 548, 593
.   : milestone, 571,
iast_HARDCODED_SECRET_DISABLED (519.726 µs) : 498, 542
.   : milestone, 520,
iast_INACTIVE (471.84 µs) : 450, 493
.   : milestone, 472,
iast_TELEMETRY_OFF (508.968 µs) : 487, 531
.   : milestone, 509,
tracing (465.236 µs) : 444, 486
.   : milestone, 465,
section candidate
no_agent (391.937 µs) : 372, 412
.   : milestone, 392,
iast (519.865 µs) : 498, 542
.   : milestone, 520,
iast_FULL (738.634 µs) : 717, 761
.   : milestone, 739,
iast_GLOBAL (565.053 µs) : 543, 587
.   : milestone, 565,
iast_HARDCODED_SECRET_DISABLED (520.691 µs) : 499, 542
.   : milestone, 521,
iast_INACTIVE (466.393 µs) : 445, 487
.   : milestone, 466,
iast_TELEMETRY_OFF (508.743 µs) : 486, 532
.   : milestone, 509,
tracing (462.738 µs) : 441, 485
.   : milestone, 463,

baseline results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	382.17 µs [361.785 µs, 402.554 µs]	-
iast	521.551 µs [499.886 µs, 543.217 µs]	139.382 µs (36.5%)
iast_FULL	732.038 µs [710.014 µs, 754.061 µs]	349.868 µs (91.5%)
iast_GLOBAL	570.875 µs [548.266 µs, 593.484 µs]	188.705 µs (49.4%)
iast_HARDCODED_SECRET_DISABLED	519.726 µs [497.729 µs, 541.722 µs]	137.556 µs (36.0%)
iast_INACTIVE	471.84 µs [450.365 µs, 493.315 µs]	89.67 µs (23.5%)
iast_TELEMETRY_OFF	508.968 µs [487.033 µs, 530.902 µs]	126.798 µs (33.2%)
tracing	465.236 µs [444.404 µs, 486.067 µs]	83.066 µs (21.7%)

candidate results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	391.937 µs [372.358 µs, 411.517 µs]	-
iast	519.865 µs [497.797 µs, 541.933 µs]	127.927 µs (32.6%)
iast_FULL	738.634 µs [716.617 µs, 760.651 µs]	346.697 µs (88.5%)
iast_GLOBAL	565.053 µs [543.114 µs, 586.992 µs]	173.116 µs (44.2%)
iast_HARDCODED_SECRET_DISABLED	520.691 µs [498.998 µs, 542.384 µs]	128.753 µs (32.9%)
iast_INACTIVE	466.393 µs [445.446 µs, 487.339 µs]	74.455 µs (19.0%)
iast_TELEMETRY_OFF	508.743 µs [485.584 µs, 531.901 µs]	116.805 µs (29.8%)
tracing	462.738 µs [440.903 µs, 484.572 µs]	70.8 µs (18.1%)

Request duration reports for petclinic

gantt
    title petclinic - request duration [CI 0.99] : candidate=1.48.0-SNAPSHOT~640cddb347, baseline=1.48.0-SNAPSHOT~ab73c4495d
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.365 ms) : 1345, 1384
.   : milestone, 1365,
appsec (1.725 ms) : 1701, 1749
.   : milestone, 1725,
appsec_no_iast (1.758 ms) : 1734, 1783
.   : milestone, 1758,
code_origins (1.688 ms) : 1661, 1716
.   : milestone, 1688,
iast (1.526 ms) : 1502, 1550
.   : milestone, 1526,
profiling (1.537 ms) : 1513, 1561
.   : milestone, 1537,
tracing (1.491 ms) : 1465, 1517
.   : milestone, 1491,
section candidate
no_agent (1.371 ms) : 1350, 1391
.   : milestone, 1371,
appsec (1.752 ms) : 1729, 1775
.   : milestone, 1752,
appsec_no_iast (1.731 ms) : 1706, 1756
.   : milestone, 1731,
code_origins (1.663 ms) : 1636, 1691
.   : milestone, 1663,
iast (1.514 ms) : 1489, 1538
.   : milestone, 1514,
profiling (1.562 ms) : 1537, 1587
.   : milestone, 1562,
tracing (1.506 ms) : 1480, 1531
.   : milestone, 1506,

baseline results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	1.365 ms [1.345 ms, 1.384 ms]	-
appsec	1.725 ms [1.701 ms, 1.749 ms]	359.98 µs (26.4%)
appsec_no_iast	1.758 ms [1.734 ms, 1.783 ms]	393.754 µs (28.9%)
code_origins	1.688 ms [1.661 ms, 1.716 ms]	323.735 µs (23.7%)
iast	1.526 ms [1.502 ms, 1.55 ms]	161.419 µs (11.8%)
profiling	1.537 ms [1.513 ms, 1.561 ms]	172.26 µs (12.6%)
tracing	1.491 ms [1.465 ms, 1.517 ms]	126.222 µs (9.2%)

candidate results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	1.371 ms [1.35 ms, 1.391 ms]	-
appsec	1.752 ms [1.729 ms, 1.775 ms]	381.253 µs (27.8%)
appsec_no_iast	1.731 ms [1.706 ms, 1.756 ms]	360.391 µs (26.3%)
code_origins	1.663 ms [1.636 ms, 1.691 ms]	292.675 µs (21.4%)
iast	1.514 ms [1.489 ms, 1.538 ms]	143.065 µs (10.4%)
profiling	1.562 ms [1.537 ms, 1.587 ms]	191.366 µs (14.0%)
tracing	1.506 ms [1.48 ms, 1.531 ms]	135.175 µs (9.9%)

Dacapo

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	mcculls/protect-config-system-calls
git_commit_date	1741794879	1741796465
git_commit_sha	`ab73c44`	`640cddb`
release_version	1.48.0-SNAPSHOT~ab73c4495d	1.48.0-SNAPSHOT~640cddb347

See matching parameters

	Baseline	Candidate
application	biojava	biojava
ci_job_date	1741798379	1741798379
ci_job_id	844875912	844875912
ci_pipeline_id	58592865	58592865
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version	Linux runner-h-q5abda-project-304-concurrent-1-31kcu34k 6.8.0-1024-aws #26~22.04.1-Ubuntu SMP Wed Feb 19 06:54:57 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux	Linux runner-h-q5abda-project-304-concurrent-1-31kcu34k 6.8.0-1024-aws #26~22.04.1-Ubuntu SMP Wed Feb 19 06:54:57 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
variant	appsec	appsec

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 11 metrics, 1 unstable metrics.

Execution time for tomcat

gantt
    title tomcat - execution time [CI 0.99] : candidate=1.48.0-SNAPSHOT~640cddb347, baseline=1.48.0-SNAPSHOT~ab73c4495d
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.467 ms) : 1456, 1479
.   : milestone, 1467,
appsec (2.335 ms) : 2291, 2379
.   : milestone, 2335,
iast (2.124 ms) : 2068, 2180
.   : milestone, 2124,
iast_GLOBAL (2.159 ms) : 2103, 2216
.   : milestone, 2159,
profiling (3.038 ms) : 2828, 3248
.   : milestone, 3038,
tracing (1.946 ms) : 1903, 1988
.   : milestone, 1946,
section candidate
no_agent (1.468 ms) : 1457, 1479
.   : milestone, 1468,
appsec (2.333 ms) : 2289, 2377
.   : milestone, 2333,
iast (2.104 ms) : 2048, 2160
.   : milestone, 2104,
iast_GLOBAL (2.157 ms) : 2101, 2213
.   : milestone, 2157,
profiling (1.969 ms) : 1925, 2014
.   : milestone, 1969,
tracing (1.954 ms) : 1911, 1996
.   : milestone, 1954,

baseline results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	1.467 ms [1.456 ms, 1.479 ms]	-
appsec	2.335 ms [2.291 ms, 2.379 ms]	867.604 µs (59.1%)
iast	2.124 ms [2.068 ms, 2.18 ms]	656.844 µs (44.8%)
iast_GLOBAL	2.159 ms [2.103 ms, 2.216 ms]	692.184 µs (47.2%)
profiling	3.038 ms [2.828 ms, 3.248 ms]	1.571 ms (107.1%)
tracing	1.946 ms [1.903 ms, 1.988 ms]	478.368 µs (32.6%)

candidate results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	1.468 ms [1.457 ms, 1.479 ms]	-
appsec	2.333 ms [2.289 ms, 2.377 ms]	865.308 µs (58.9%)
iast	2.104 ms [2.048 ms, 2.16 ms]	636.081 µs (43.3%)
iast_GLOBAL	2.157 ms [2.101 ms, 2.213 ms]	688.632 µs (46.9%)
profiling	1.969 ms [1.925 ms, 2.014 ms]	501.497 µs (34.2%)
tracing	1.954 ms [1.911 ms, 1.996 ms]	485.579 µs (33.1%)

Execution time for biojava

gantt
    title biojava - execution time [CI 0.99] : candidate=1.48.0-SNAPSHOT~640cddb347, baseline=1.48.0-SNAPSHOT~ab73c4495d
    dateFormat X
    axisFormat %s
section baseline
no_agent (15.247 s) : 15247000, 15247000
.   : milestone, 15247000,
appsec (15.208 s) : 15208000, 15208000
.   : milestone, 15208000,
iast (18.231 s) : 18231000, 18231000
.   : milestone, 18231000,
iast_GLOBAL (18.034 s) : 18034000, 18034000
.   : milestone, 18034000,
profiling (15.039 s) : 15039000, 15039000
.   : milestone, 15039000,
tracing (14.675 s) : 14675000, 14675000
.   : milestone, 14675000,
section candidate
no_agent (14.956 s) : 14956000, 14956000
.   : milestone, 14956000,
appsec (14.917 s) : 14917000, 14917000
.   : milestone, 14917000,
iast (18.511 s) : 18511000, 18511000
.   : milestone, 18511000,
iast_GLOBAL (18.0 s) : 18000000, 18000000
.   : milestone, 18000000,
profiling (15.625 s) : 15625000, 15625000
.   : milestone, 15625000,
tracing (14.918 s) : 14918000, 14918000
.   : milestone, 14918000,

baseline results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	15.247 s [15.247 s, 15.247 s]	-
appsec	15.208 s [15.208 s, 15.208 s]	-39.0 ms (-0.3%)
iast	18.231 s [18.231 s, 18.231 s]	2.984 s (19.6%)
iast_GLOBAL	18.034 s [18.034 s, 18.034 s]	2.787 s (18.3%)
profiling	15.039 s [15.039 s, 15.039 s]	-208.0 ms (-1.4%)
tracing	14.675 s [14.675 s, 14.675 s]	-572.0 ms (-3.8%)

candidate results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	14.956 s [14.956 s, 14.956 s]	-
appsec	14.917 s [14.917 s, 14.917 s]	-39.0 ms (-0.3%)
iast	18.511 s [18.511 s, 18.511 s]	3.555 s (23.8%)
iast_GLOBAL	18.0 s [18.0 s, 18.0 s]	3.044 s (20.4%)
profiling	15.625 s [15.625 s, 15.625 s]	669.0 ms (4.5%)
tracing	14.918 s [14.918 s, 14.918 s]	-38.0 ms (-0.3%)

…case in this module

…s installed (#8544) * Make the default config sources more robust when a security manager is installed If we don't have permission to access system properties or the environment then fall back to defaults. * Exclude from instruction coverage as hard to test security exception case in this module

| Package | Type | Package file | Manager | Update | Change | |---|---|---|---|---|---| | org.flywaydb.flyway | plugin | misk/gradle/libs.versions.toml | gradle | minor | `11.6.0` -> `11.7.0` | | [com.squareup.okio:okio-fakefilesystem](https://github.com/square/okio) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `3.10.2` -> `3.11.0` | | [com.squareup.okio:okio](https://github.com/square/okio) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `3.10.2` -> `3.11.0` | | [com.autonomousapps.dependency-analysis](https://github.com/autonomousapps/dependency-analysis-android-gradle-plugin) | plugin | misk/gradle/libs.versions.toml | gradle | minor | `2.15.0` -> `2.16.0` | | [com.datadoghq:dd-trace-api](https://github.com/datadog/dd-trace-java) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `1.47.3` -> `1.48.1` | | [com.datadoghq:dd-trace-ot](https://github.com/datadog/dd-trace-java) | dependencies | misk/gradle/libs.versions.toml | gradle | minor | `1.47.3` -> `1.48.1` | | [software.amazon.awssdk:sdk-core](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.18` -> `2.31.20` | | [software.amazon.awssdk:sqs](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.18` -> `2.31.20` | | [software.amazon.awssdk:dynamodb-enhanced](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.18` -> `2.31.20` | | [software.amazon.awssdk:dynamodb](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.18` -> `2.31.20` | | [software.amazon.awssdk:aws-core](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.18` -> `2.31.20` | | [software.amazon.awssdk:bom](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.18` -> `2.31.20` | | [software.amazon.awssdk:auth](https://aws.amazon.com/sdkforjava) | dependencies | misk/gradle/libs.versions.toml | gradle | patch | `2.31.18` -> `2.31.20` | --- ### Release Notes <details> <summary>square/okio (com.squareup.okio:okio-fakefilesystem)</summary> ### [`v3.11.0`](https://github.com/square/okio/blob/HEAD/CHANGELOG.md#Version-3110) *2025-04-09* - Fix: Clear the deflater's byte array reference - New: Faster implementation of `String.decodeHex()` on Kotlin/JS. - New: Declare `EXACTLY_ONCE` execution for blocks like `Closeable.use {}` and `FileSystem.read {}`. - Upgrade: \[Kotlin 2.1.20]\[kotlin\_2\_1\_20]. </details> <details> <summary>autonomousapps/dependency-analysis-android-gradle-plugin (com.autonomousapps.dependency-analysis)</summary> ### [`v2.16.0`](https://github.com/autonomousapps/dependency-analysis-android-gradle-plugin/blob/HEAD/CHANGELOG.md#Version-2160) - \[Feat]: support `com.android.test` projects. - \[Feat]: support typesafe project accessors with opt-in. ```kotlin dependencyAnalysis { useTypesafeProjectAccessors(true) // false by default } ``` </details> <details> <summary>datadog/dd-trace-java (com.datadoghq:dd-trace-api)</summary> ### [`v1.48.1`](https://github.com/DataDog/dd-trace-java/releases/tag/v1.48.1): 1.48.1 ### Components #### Tracer internal logging - 🐛 Remove print line causing unnecessary logs ([#8687](DataDog/dd-trace-java#8687) - [@sarahchen6](https://github.com/sarahchen6)) ### [`v1.48.0`](https://github.com/DataDog/dd-trace-java/releases/tag/v1.48.0): 1.48.0 ### Known Bugs > \[!NOTE] > If you are experiencing issues with spamming timeout logs, please update to the [latest version](https://github.com/DataDog/dd-trace-java/releases/latest) or set [JDK_SOCKET_ENABLED](https://github.com/DataDog/dd-trace-java/blob/33fc3c9a9b7cda3beda88b8b3e5224ae2b10764a/dd-trace-api/src/main/java/datadog/trace/api/config/GeneralConfig.java#L98) to false. ### Components #### Application Security Management (IAST) - ✨ Fix vulnerability location org.jose4j.lang.HashUtil ([#8610](DataDog/dd-trace-java#8610) - [@jandro996](https://github.com/jandro996)) - ✨ Fix weak randomness in oracle.ucp.util.OpaqueString ([#8609](DataDog/dd-trace-java#8609) - [@jandro996](https://github.com/jandro996)) - ✨ Fix weak hash false positive in oracle.security.o5logon.O5Logon ([#8608](DataDog/dd-trace-java#8608) - [@jandro996](https://github.com/jandro996)) - 🐛 Prevent before callsites targeting constructors in super calls ([#8549](DataDog/dd-trace-java#8549) - [@manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) #### Application Security Management (WAF) - ✨ Update login events public SDK to V2 ([#8620](DataDog/dd-trace-java#8620) - [@manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) - 🐛 Send RASP LFI capability only when AppSec is statically enabled ([#8573](DataDog/dd-trace-java#8573) - [@jandro996](https://github.com/jandro996)) - ✨ Improve detection of missing request end events ([#8510](DataDog/dd-trace-java#8510) - [@smola](https://github.com/smola)) - 🧹 Remove remote configuration for API Security sampling rate ([#8486](DataDog/dd-trace-java#8486) - [@smola](https://github.com/smola)) - ✨ Add setUser to user monitoring SDK ([#8482](DataDog/dd-trace-java#8482) - [@manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) - ✨ Add missing address for signup event ([#8469](DataDog/dd-trace-java#8469) - [@manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) - ✨ Allow login events SDK to be used with appsec disabled ([#8464](DataDog/dd-trace-java#8464) - [@manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) - ✨ Add support for endpoint discovery in spring mvc ([#8352](DataDog/dd-trace-java#8352) - [@manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) - ✨ New API Security sampling algorithm ([#8178](DataDog/dd-trace-java#8178) - [@ValentinZakharov](https://github.com/ValentinZakharov)) #### Build & Tooling - ✨ Add buffer size customizability to JDK UDS support ([#8629](DataDog/dd-trace-java#8629) - [@sarahchen6](https://github.com/sarahchen6)) - ✨ Add JDK built-in support for UDS on Java 16+ ([#8314](DataDog/dd-trace-java#8314) - [@sarahchen6](https://github.com/sarahchen6)) #### Configuration at Runtime - 🐛 Send RASP LFI capability only when AppSec is statically enabled ([#8573](DataDog/dd-trace-java#8573) - [@jandro996](https://github.com/jandro996)) #### Continuous Integration Visibility - 🐛 Prevent double reporting of Scalatest events when using SBT with test forking ([#8682](DataDog/dd-trace-java#8682) - [@nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - 🐛 Shutdown CI Visibility test event handlers before tracer ([#8677](DataDog/dd-trace-java#8677) - [@nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - 🐛 Do not apply JUnit 4 instrumentation to MUnit runners ([#8675](DataDog/dd-trace-java#8675), [#8683](DataDog/dd-trace-java#8683) - [@nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - ✨ Remove error log when source path resolution fails on isModified check ([#8663](DataDog/dd-trace-java#8663) - [@daniel-mohedano](https://github.com/daniel-mohedano)) - ✨ Implement tests reordering for JUnit 4 ([#8650](DataDog/dd-trace-java#8650) - [@daniel-mohedano](https://github.com/daniel-mohedano)) - 🐛 Set default Attempt to Fix retries if none provided from the backend ([#8615](DataDog/dd-trace-java#8615) - [@daniel-mohedano](https://github.com/daniel-mohedano)) - ✨ Allow to manually set PR info ([#8566](DataDog/dd-trace-java#8566) - [@nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - 🐛 Fix Test Optimization init when repo root cannot be determined ([#8533](DataDog/dd-trace-java#8533) - [@nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - ✨ Add capabilities tagging ([#8499](DataDog/dd-trace-java#8499), [#8540](DataDog/dd-trace-java#8540) - [@daniel-mohedano](https://github.com/daniel-mohedano)) #### Crash tracking - 🐛 Remove dependency on bash from crash/oome uploder scripts ([#8652](DataDog/dd-trace-java#8652) - [@jbachorik](https://github.com/jbachorik)) #### Data Streams Monitoring - ✨ e2e pipeline configuration when data jobs is enabled ([#8553](DataDog/dd-trace-java#8553) - [@kr-igor](https://github.com/kr-igor)) #### Dynamic Instrumentation - 🐛 Fix In-Product when config is empty ([#8679](DataDog/dd-trace-java#8679) - [@jpbempel](https://github.com/jpbempel)) - ✨ Add support for filtering shaded third-party libs ([#8612](DataDog/dd-trace-java#8612) - [@jpbempel](https://github.com/jpbempel)) - ✨ Add In-Product Enablement ([#8587](DataDog/dd-trace-java#8587) - [@jpbempel](https://github.com/jpbempel)) - ✨⚡ Reduce footprint of SourceFile tracking ([#8524](DataDog/dd-trace-java#8524) - [@jpbempel](https://github.com/jpbempel)) - ✨⚡ Optimize the SourceFile tracking ([#8520](DataDog/dd-trace-java#8520) - [@jpbempel](https://github.com/jpbempel)) #### OpenTracing - 🧹 Remove activeScope() use in OpenTracing shim ([#8478](DataDog/dd-trace-java#8478) - [@mcculls](https://github.com/mcculls)) #### Profiling - ✨ Add profiler env check command to AgentCLI ([#8671](DataDog/dd-trace-java#8671) - [@jbachorik](https://github.com/jbachorik)) - ✨ Bump ddprof to 1.23.0 ([#8668](DataDog/dd-trace-java#8668) - [@jbachorik](https://github.com/jbachorik)) - Fix a crash related to ElfParser::loadSymbolTable ([#191](DataDog/dd-trace-java#191)) by [@yanglong1010](https://github.com/yanglong1010) in DataDog/java-profiler#192 - Unwind String.indexOf intrinsic on AArch64 by [@MattAlp](https://github.com/MattAlp) in DataDog/java-profiler#193 - Fix Java 24 support by [@jbachorik](https://github.com/jbachorik) in DataDog/java-profiler#194 - A set of fixes related to clang, aarch64 and musl pecularities of vmstructs stack unwinder by [@jbachorik](https://github.com/jbachorik) in DataDog/java-profiler#199 - 🐛 Remove process information from JFR recording ([#8661](DataDog/dd-trace-java#8661) - [@r1viollet](https://github.com/r1viollet)) - 🐛 Make TempLocationManager USER aware ([#8605](DataDog/dd-trace-java#8605) - [@jbachorik](https://github.com/jbachorik)) - ✨ Extract git tags from embedded git.properties and datadog_git.properties ([#8561](DataDog/dd-trace-java#8561) - [@wmouchere](https://github.com/wmouchere)) #### Telemetry - 🐛 Fix appsec.rasp.error and appsec.waf.error telemetry metrics ([#8624](DataDog/dd-trace-java#8624) - [@jandro996](https://github.com/jandro996)) - ✨ Create metric: appsec.rasp.rule.skipped ([#8618](DataDog/dd-trace-java#8618) - [@jandro996](https://github.com/jandro996)) - ✨ Extract git tags from embedded git.properties and datadog_git.properties ([#8561](DataDog/dd-trace-java#8561) - [@wmouchere](https://github.com/wmouchere)) #### Testing - 🧹 Simplify ssi tests one-pipeline ([#8558](DataDog/dd-trace-java#8558) - [@robertomonteromiguel](https://github.com/robertomonteromiguel)) - ✨ Add smoke tests for java's concurrent API ([#8438](DataDog/dd-trace-java#8438) - [@sarahchen6](https://github.com/sarahchen6)) #### Trace context propagation - ✨ Adding Support for `TRACE_PROPAGATION_BEHAVIOR_EXTRACT` ([#8535](DataDog/dd-trace-java#8535) - [@mhlidd](https://github.com/mhlidd)) #### Tracer core - 🐛 Ensure shaded helpers have unique names ([#8559](DataDog/dd-trace-java#8559) - [@amarziali](https://github.com/amarziali)) - ✨ Support common config sources for user-provided git info ([#8547](DataDog/dd-trace-java#8547) - [@nikita-tkachenko-datadog](https://github.com/nikita-tkachenko-datadog)) - ✨ Make the default config sources more robust when a security manager is installed ([#8544](DataDog/dd-trace-java#8544) - [@mcculls](https://github.com/mcculls)) - ✨ Support targeting services with configurations in stable configuration file ([#8526](DataDog/dd-trace-java#8526) - [@mtoffl01](https://github.com/mtoffl01)) - ✨ Add new parser for `DD_TAGS` and prioritizing `DD_SERVICE` ([#8296](DataDog/dd-trace-java#8296) - [@mhlidd](https://github.com/mhlidd)) #### Tracer internal logging - 🐛 Add missing debug log for the cloudPayloadTaggingServices config ([#8600](DataDog/dd-trace-java#8600) - [@ygree](https://github.com/ygree)) - ✨ Add the possibility to output the logs of the Java tracer in JSON ([#8083](DataDog/dd-trace-java#8083) - [@cecile75](https://github.com/cecile75)) #### Tracer public API - ✨ Introducing `DD_TRACE_EXPERIMENTAL_FEATURES_ENABLED` Config ([#8536](DataDog/dd-trace-java#8536) - [@mhlidd](https://github.com/mhlidd)) - ✨ Config Consistency Round 2 ([#8489](DataDog/dd-trace-java#8489) - [@mhlidd](https://github.com/mhlidd)) ### Instrumentations #### - 🐛 Fix NPE in getMdcCopy of LoggingEventInstrumentation ([#8599](DataDog/dd-trace-java#8599) - [@ygree](https://github.com/ygree)) #### Apache Spark instrumentation - ✨ Instrument Runtime.exit() to finish spark application spans ([#8572](DataDog/dd-trace-java#8572) - [@paul-laffon-dd](https://github.com/paul-laffon-dd)) - ✨ Configure OpenLineage if present in Spark instrumentation ([#8541](DataDog/dd-trace-java#8541) - [@mobuchowski](https://github.com/mobuchowski)) #### Armeria Instrumentation - ✨ Support armeria grpc 1.32.3 ([#8606](DataDog/dd-trace-java#8606) - [@github-actions](https://github.com/github-actions)\[bot]) #### AWS DynamoDB Instrumentation - ✨ Create DynamoDB instrumentation + add span pointers for `updateItem` and `deleteItem` ([#8490](DataDog/dd-trace-java#8490) - [@nhulston](https://github.com/nhulston)) #### AWS SDK instrumentation - ✨ Add DynamoDB in DEFAULT_TRACE_CLOUD_PAYLOAD_TAGGING_SERVICES ([#8595](DataDog/dd-trace-java#8595) - [@joeyzhao2018](https://github.com/joeyzhao2018)) #### Azure Functions instrumentation - ✨ Enable tracer computed trace metrics by default for Azure Functions ([#8518](DataDog/dd-trace-java#8518) - [@duncanpharvey](https://github.com/duncanpharvey)) - 💡 Add azure-functions instrumentation ([#8432](DataDog/dd-trace-java#8432) - [@duncanpharvey](https://github.com/duncanpharvey)) #### Core Java language instrumentation - 🐛 Fix ForkJoinPool.execute() instrumentation on Java 21+ ([#8560](DataDog/dd-trace-java#8560) - [@PerfectSlayer](https://github.com/PerfectSlayer)) #### Eclipse Vert.x instrumentation - ✨ Add vertx postgresql client instrumentation ([#8471](DataDog/dd-trace-java#8471) - [@vandonr](https://github.com/vandonr) - thanks for the contribution!) #### Kafka instrumentation - ✨ Support and test kafka-clients 4 ([#8581](DataDog/dd-trace-java#8581) - [@amarziali](https://github.com/amarziali)) #### Kotlin instrumentation - ✨ Avoid disconnected traces when using Kotlin flowOn ([#8651](DataDog/dd-trace-java#8651) - [@mcculls](https://github.com/mcculls)) #### OpenTelemetry instrumentation - 🧹 Migrate OtelContext wrapper to new internal Context API ([#8645](DataDog/dd-trace-java#8645) - [@mcculls](https://github.com/mcculls)) #### Spring instrumentation - 🐛 Support CompletableFuture on spring webmvc controllers ([#8659](DataDog/dd-trace-java#8659) - [@amarziali](https://github.com/amarziali)) - ✨ Add support for endpoint discovery in spring mvc ([#8352](DataDog/dd-trace-java#8352) - [@manuel-alvarez-alvarez](https://github.com/manuel-alvarez-alvarez)) #### WebSocket Instrumentation - ✨ Instrument Jetty websocket pojo ([#8562](DataDog/dd-trace-java#8562) - [@amarziali](https://github.com/amarziali)) - 💡 Instrument Java Websocket API (JSR356) ([#8440](DataDog/dd-trace-java#8440) - [@amarziali](https://github.com/amarziali)) #### All other instrumentations - ✨ Introduce cache for peer.hostname lookup ([#8601](DataDog/dd-trace-java#8601) - [@mcculls](https://github.com/mcculls)) - ✨ Support pekko http 1.1 ([#8532](DataDog/dd-trace-java#8532) - [@amarziali](https://github.com/amarziali)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "after 6pm every weekday,before 2am every weekday" in timezone Australia/Melbourne, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). GitOrigin-RevId: 331314f71acaced3adc75ea5d7e855c248d593fc

Make the default config sources more robust when a security manager i…

d099b5f

…s installed If we don't have permission to access system properties or the environment then fall back to defaults.

mcculls added type: enhancement comp: core Tracer core labels Mar 12, 2025

mcculls requested a review from a team as a code owner March 12, 2025 15:42

mcculls requested a review from dougqh March 12, 2025 15:42

PerfectSlayer approved these changes Mar 12, 2025

View reviewed changes

Exclude from instruction coverage as hard to test security exception …

640cddb

…case in this module

mcculls mentioned this pull request Mar 12, 2025

🍒 8544 - Make the default config sources more robust when a security manager is installed #8545

Merged

mcculls enabled auto-merge (squash) March 12, 2025 19:14

mcculls merged commit 0d9c7d2 into master Mar 12, 2025
220 checks passed

mcculls deleted the mcculls/protect-config-system-calls branch March 12, 2025 19:15

github-actions bot added this to the 1.48.0 milestone Mar 12, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Make the default config sources more robust when a security manager is installed #8544

Make the default config sources more robust when a security manager is installed #8544

mcculls commented Mar 12, 2025 •

edited by jira bot

Loading

pr-commenter bot commented Mar 12, 2025 •

edited

Loading

Make the default config sources more robust when a security manager is installed #8544

Make the default config sources more robust when a security manager is installed #8544

Conversation

mcculls commented Mar 12, 2025 • edited by jira bot Loading

What Does This Do

Motivation

Contributor Checklist

pr-commenter bot commented Mar 12, 2025 • edited Loading

Benchmarks

Startup

Parameters

Summary

Load

Parameters

Summary

Dacapo

Parameters

Summary

mcculls commented Mar 12, 2025 •

edited by jira bot

Loading

pr-commenter bot commented Mar 12, 2025 •

edited

Loading