FIX: preventing the axios vulnerability

Dockerfile

@@ -22,7 +22,7 @@ ENV PUPPETEER_SKIP_CHROMIUM_DOWNLOAD=true \
 # run aws cli without mounting secret, because CI already has AWS credentials
 FROM build_base AS ci_image
 RUN aws codeartifact login --tool npm --namespace @dadosfera --repository dadosfera-npm --domain dadosfera --domain-owner 611330257153 --region us-east-1
-RUN npm ci
+RUN npm ci --ignore-scripts
 COPY . .
 
 
@@ -37,7 +37,7 @@ FROM build_base AS dev
 RUN --mount=type=secret,id=aws,target=/root/.aws/credentials \
   aws codeartifact login --tool npm --namespace @dadosfera --repository dadosfera-npm --domain dadosfera --domain-owner 611330257153 --region us-east-1
 # flag --build-from-source is required to force-build sqlite3
-RUN npm ci
+RUN npm ci --ignore-scripts
 COPY . .
 ENTRYPOINT npm run start:dev
 

Dockerfile.local

@@ -22,7 +22,7 @@ ENV PUPPETEER_SKIP_CHROMIUM_DOWNLOAD=true \
 FROM build_base AS build
 RUN --mount=type=secret,id=aws,target=/root/.aws/credentials \
   aws codeartifact login --tool npm --namespace @dadosfera --repository dadosfera-npm --domain dadosfera --domain-owner 611330257153 --region us-east-1
-RUN npm ci
+RUN  npm ci --ignore-scripts
 COPY . .
 RUN npm run build
 

package-lock.json

@@ -31,7 +31,7 @@
         "@nestjs/schematics": "^9.2.0",
         "@nestjs/swagger": "^6.3.0",
         "@nestjs/testing": "^9.4.3",
-        "axios": "^0.30.2",
+        "axios": "0.30.3",
         "cache-manager": "^5.1.4",
         "cache-manager-ioredis-yet": "^1.1.0",
         "class-transformer": "^0.5.1",
@@ -5598,9 +5598,9 @@
       }
     },
     "node_modules/axios": {
-      "version": "0.30.2",
-      "resolved": "https://registry.npmjs.org/axios/-/axios-0.30.2.tgz",
-      "integrity": "sha512-0pE4RQ4UQi1jKY6p7u6i1Tkzqmu+d+/tHS7Q7rKunWLB9WyilBTpHHpXzPNMDj5hTbK0B0PTLSz07yqMBiF6xg==",
+      "version": "0.30.3",
+      "resolved": "https://registry.npmjs.org/axios/-/axios-0.30.3.tgz",
+      "integrity": "sha512-5/tmEb6TmE/ax3mdXBc/Mi6YdPGxQsv+0p5YlciXWt3PHIn0VamqCXhRMtScnwY3lbgSXLneOuXAKUhgmSRpwg==",
       "license": "MIT",
       "dependencies": {
         "follow-redirects": "^1.15.4",

package.json

@@ -49,7 +49,7 @@
     "@nestjs/schematics": "^9.2.0",
     "@nestjs/swagger": "^6.3.0",
     "@nestjs/testing": "^9.4.3",
-    "axios": "^0.30.2",
+    "axios": "0.30.3",
     "cache-manager": "^5.1.4",
     "cache-manager-ioredis-yet": "^1.1.0",
     "class-transformer": "^0.5.1",
@@ -81,6 +81,7 @@
     "swagger-ui-express": "^4.6.3"
   },
   "overrides": {
+    "axios": "0.30.3",
     "form-data": "^4.0.4",
     "body-parser": "^1.20.3",
     "cross-spawn": "^7.0.5",
@@ -117,5 +118,8 @@
     "ts-node": "^10.9.1",
     "tsconfig-paths": "^3.14.2",
     "typescript": "^4.9.5"
+  },
+  "resolutions": {
+    "axios": "0.30.3"
   }
 }

src/modules/platform-api/platform-api.controller.ts

@@ -834,24 +834,6 @@ export class PlatformApiController {
     );
   }
 
-  @Post('pipeline/:pipelineId/pipeline_run/:runId/cancel')
-  @ApiOperation({ summary: 'Cancel a running pipeline run' })
-  @RequireAllPermissions(PERMISSIONS_GROUPS.PIPELINE.permissions.UPDATE)
-  async cancelPipelineRun(
-    @Param('pipelineId') pipelineId: string,
-    @Param('runId') runId: string,
-    @User() user: RequestUser,
-  ) {
-    const normalizedPipelineId = this.normalizePipelineId(pipelineId);
-    const normalizedRunId = this.normalizePipelineId(runId);
-
-    return this.platformApiService.proxy(
-      'POST',
-      `/pipeline/${normalizedPipelineId}/pipeline_run/${normalizedRunId}/cancel`,
-      user,
-    );
-  }
-
   // ==================== JOBS - COLUMN EDITING ROUTES ====================
 
   @Put('jobs/:jobId/input')

src/services/elasticsearch/elasticsearch.service.ts

@@ -50,9 +50,6 @@ interface PipelineDocument {
   type: string;
   in_use: number;
   keywords: MultiLangArray;
-  // Pipeline run tracking
-  last_run_status?: string;
-  last_run_canceled_at?: string;
 }
 
 @Injectable()
@@ -361,119 +358,6 @@ export class ElasticsearchService {
     }
   }
 
-  async updateLastRunStatus(
-    customerName: string,
-    pipelineId: string,
-    lastRunStatus: string,
-  ): Promise<any> {
-    const index = this.getIndex(customerName);
-    const now = new Date().toISOString();
-
-    this.logger.info('Elasticsearch: Updating last run status', {
-      index,
-      pipelineId,
-      lastRunStatus,
-    });
-
-    try {
-      const response = await this.client.post(
-        `/${index}/_update/${pipelineId}`,
-        {
-          doc: {
-            last_run_status: lastRunStatus,
-            ...(lastRunStatus === 'CANCELED' ? { last_run_canceled_at: now } : {}),
-          },
-        },
-        { params: { refresh: 'wait_for' } },
-      );
-
-      this.logger.info('Elasticsearch: Last run status updated', {
-        pipelineId,
-        result: response.data.result,
-      });
-
-      return response.data;
-    } catch (error) {
-      this.handleError('updateLastRunStatus', error, { pipelineId, index });
-      throw error;
-    }
-  }
-
-  private getDataAssetIndex(customerName: string): string {
-    return `${customerName}_data_assets_catalog`;
-  }
-
-  async findDataAssetByTable(
-    customerName: string,
-    tableName: string,
-    tableSchema: string,
-  ): Promise<{ id: string; nimbus_id: number | null; [key: string]: any } | null> {
-    const index = this.getDataAssetIndex(customerName);
-
-    this.logger.info('Elasticsearch: Searching data asset', {
-      index,
-      tableName,
-      tableSchema,
-    });
-
-    try {
-      const response = await this.client.post(`/${index}/_search`, {
-        query: {
-          bool: {
-            must: [
-              { term: { 'table_name.keyword': tableName.toUpperCase() } },
-              { term: { 'table_schema.keyword': tableSchema.toUpperCase() } },
-            ],
-          },
-        },
-        size: 1,
-      });
-
-      const hits = response.data.hits?.hits || [];
-      if (hits.length === 0) {
-        this.logger.warn('Elasticsearch: Data asset not found', { tableName, tableSchema, index });
-        return null;
-      }
-
-      return { ...hits[0]._source, _es_id: hits[0]._id };
-    } catch (error) {
-      this.handleError('findDataAssetByTable', error, { tableName, tableSchema, index });
-      throw error;
-    }
-  }
-
-  async updateDataAsset(
-    customerName: string,
-    assetId: string,
-    updates: Record<string, any>,
-  ): Promise<any> {
-    const index = this.getDataAssetIndex(customerName);
-
-    this.logger.info('Elasticsearch: Updating data asset', {
-      index,
-      assetId,
-      fields: Object.keys(updates),
-    });
-
-    try {
-      const response = await this.client.post(
-        `/${index}/_update/${assetId}`,
-        { doc: updates },
-        { params: { refresh: 'wait_for' } },
-      );
-
-      this.logger.info('Elasticsearch: Data asset updated', {
-        assetId,
-        result: response.data.result,
-      });
-
-      return response.data;
-    } catch (error) {
-      this.handleError('updateDataAsset', error, { assetId, index });
-      throw error;
-    }
-  }
-
   private handleError(
     operation: string,
     error: any,