QA failure: qa/specs/features/api/10_software_supply_chain_security/project_access_token_spec.rb
## Overview
* Environment: gprd-cny
* Coordinated pipeline: https://ops.gitlab.net/gitlab-org/release/tools/-/pipelines/5902455
* Auto-deploy package: 19.2.202606240936-1b9bc4b113f.353358e339e
### Pipeline:
* **https://ops.gitlab.net/gitlab-org/quality/canary/-/jobs/24915684**
```
2026-06-24T11:43:27.548191Z 01O
2026-06-24T11:43:27.548193Z 01O 1) Software Supply Chain Security Project access token for the same project can be used to create a file via the project API
2026-06-24T11:43:27.548198Z 01O [31mFailure/Error:[0m
2026-06-24T11:43:27.548201Z 01O [31m expect do[0m
2026-06-24T11:43:27.548203Z 01O [31m create(:file,[0m
2026-06-24T11:43:27.548206Z 01O [31m api_client: user_api_client,[0m
2026-06-24T11:43:27.548209Z 01O [31m project: project,[0m
2026-06-24T11:43:27.548212Z 01O [31m branch: "new_branch_#{SecureRandom.hex(8)}")[0m
2026-06-24T11:43:27.548216Z 01O [31m rescue StandardError => e[0m
2026-06-24T11:43:27.548219Z 01O [31m QA::Runtime::Logger.error("Full failure message: #{e.message}")[0m
2026-06-24T11:43:27.548223Z 01O [31m raise[0m
2026-06-24T11:43:27.548225Z 01O [31m end.not_to raise_error[0m
2026-06-24T11:43:27.548228Z 01O [31m[0m
2026-06-24T11:43:27.548231Z 01O [31m expected no Exception, got #<QA::Resource::Errors::ResourceFabricationFailedError:"Fabrication of QA::Resource::Project using th...%28%28query%3A%28match_phrase%3A%28json.correlation_id%3A%27a10b798adc6ef2da-ATL%27%29%29%29%29%29"> with backtrace:[0m
2026-06-24T11:43:27.548238Z 01O [31m # ./qa/resource/api_fabricator.rb:134:in `api_post_to'[0m
2026-06-24T11:43:27.548241Z 01O [31m # ./qa/resource/api_fabricator.rb:108:in `api_post'[0m
2026-06-24T11:43:27.548245Z 01O [31m # ./qa/resource/api_fabricator.rb:27:in `fabricate_via_api!'[0m
2026-06-24T11:43:27.548249Z 01O [31m # ./qa/resource/project.rb:126:in `rescue in fabricate_via_api!'[0m
2026-06-24T11:43:27.548252Z 01O [31m # ./qa/resource/project.rb:123:in `fabricate_via_api!'[0m
2026-06-24T11:43:27.548256Z 01O [31m # ./qa/resource/base.rb:74:in `block (2 levels) in fabricate_via_api!'[0m
2026-06-24T11:43:27.548259Z 01O [31m # ./qa/resource/base.rb:117:in `log_and_record_fabrication'[0m
2026-06-24T11:43:27.548263Z 01O [31m # ./qa/resource/base.rb:74:in `block in fabricate_via_api!'[0m
2026-06-24T11:43:27.548266Z 01O [31m # ./qa/resource/base.rb:107:in `do_fabricate!'[0m
2026-06-24T11:43:27.548270Z 01O [31m # ./qa/resource/base.rb:73:in `fabricate_via_api!'[0m
2026-06-24T11:43:27.548273Z 01O [31m # ./qa/resource/base.rb:48:in `fabricate!'[0m
2026-06-24T11:43:27.548276Z 01O [31m # ./qa/resource/file.rb:10:in `block in <class:File>'[0m
2026-06-24T11:43:27.548280Z 01O [31m # ./qa/resource/base.rb:314:in `instance_exec'[0m
2026-06-24T11:43:27.548283Z 01O [31m # ./qa/resource/base.rb:314:in `attribute_value'[0m
2026-06-24T11:43:27.548286Z 01O [31m # ./qa/resource/base.rb:173:in `block in attribute'[0m
2026-06-24T11:43:27.548290Z 01O [31m # ./qa/resource/file.rb:26:in `initialize'[0m
2026-06-24T11:43:27.548293Z 01O [31m # ./qa/specs/features/api/10_software_supply_chain_security/project_access_token_spec.rb:23:in `block (5 levels) in <module:QA>'[0m
2026-06-24T11:43:27.548297Z 01O [31m # ./qa/specs/features/api/10_software_supply_chain_security/project_access_token_spec.rb:22:in `block (4 levels) in <module:QA>'[0m
2026-06-24T11:43:27.548301Z 01O [31m # /home/gitlab/spec/support/fast_quarantine.rb:22:in `block (2 levels) in <top (required)>'[0m
2026-06-24T11:43:27.548305Z 01O [31m # ./qa/specs/runner.rb:124:in `run_rspec'[0m
2026-06-24T11:43:27.548308Z 01O [31m # ./qa/specs/runner.rb:32:in `perform'[0m
2026-06-24T11:43:27.548311Z 01O [31m # ./qa/scenario/template.rb:10:in `block in perform'[0m
2026-06-24T11:43:27.548314Z 01O [31m # ./qa/scenario/template.rb:8:in `perform'[0m
2026-06-24T11:43:27.548317Z 01O [31m # ./qa/scenario/template.rb:63:in `perform'[0m
2026-06-24T11:43:27.548320Z 01O [31m # ./qa/scenario/template.rb:10:in `block in perform'[0m
2026-06-24T11:43:27.548326Z 01O [31m # ./qa/scenario/template.rb:8:in `perform'[0m
2026-06-24T11:43:27.548329Z 01O [31m # ./qa/scenario/bootable.rb:52:in `launch!'[0m
2026-06-24T11:43:27.548332Z 01O [36m# ./qa/specs/features/api/10_software_supply_chain_security/project_access_token_spec.rb:22:in `block (4 levels) in <module:QA>'[0m
2026-06-24T11:43:27.548337Z 01O [36m# /home/gitlab/spec/support/fast_quarantine.rb:22:in `block (2 levels) in <top (required)>'[0m
2026-06-24T11:43:27.548340Z 01O [36m# ./qa/specs/runner.rb:124:in `run_rspec'[0m
2026-06-24T11:43:27.548343Z 01O [36m# ./qa/specs/runner.rb:32:in `perform'[0m
2026-06-24T11:43:27.548346Z 01O [36m# ./qa/scenario/template.rb:10:in `block in perform'[0m
2026-06-24T11:43:27.548349Z 01O [36m# ./qa/scenario/template.rb:8:in `perform'[0m
2026-06-24T11:43:27.548352Z 01O [36m# ./qa/scenario/template.rb:63:in `perform'[0m
2026-06-24T11:43:27.548355Z 01O [36m# ./qa/scenario/template.rb:10:in `block in perform'[0m
2026-06-24T11:43:27.879209Z 01E /builds/gitlab-org/quality/canary/.gems/bin/gitlab-qa: Command `docker run -t --rm --net=bridge --env QA_CAN_TEST_GIT_PROTOCOL_V2="$QA_CAN_TEST_GIT_PROTOCOL_V2" ...` failed! [31m✘[0m (Gitlab::QA::Support::ShellCommand::StatusError)
2026-06-24T11:43:27.879297Z 01E /builds/gitlab-org/quality/canary/.gems/bin/gitlab-qa: Command `docker run -t --rm --net=bridge --env QA_CAN_TEST_GIT_PROTOCOL_V2="$QA_CAN_TEST_GIT_PROTOCOL_V2" ...` failed! [31m✘[0m (Gitlab::QA::Support::ShellCommand::StatusError)
2026-06-24T11:43:27.880724Z 01O [36m# ./qa/scenario/template.rb:8:in `perform'[0m
2026-06-24T11:43:27.880739Z 01O [36m# ./qa/scenario/bootable.rb:52:in `launch!'[0m
2026-06-24T11:43:27.880743Z 01O
2026-06-24T11:43:27.880746Z 01O Finished in 26.72 seconds (files took 1.1 seconds to load)
2026-06-24T11:43:27.880749Z 01O [31m1 example, 1 failure[0m
2026-06-24T11:43:27.880752Z 01O
2026-06-24T11:43:27.880754Z 01O Failed examples:
2026-06-24T11:43:27.880757Z 01O
2026-06-24T11:43:27.880759Z 01O [31mrspec ./qa/specs/features/api/10_software_supply_chain_security/project_access_token_spec.rb:20[0m [36m# Software Supply Chain Security Project access token for the same project can be used to create a file via the project API[0m
2026-06-24T11:43:27.880769Z 01O
2026-06-24T11:43:27.880771Z 01O
```
issue
GitLab AI Context
Project: gitlab-org/release/tasks
Instance: https://gitlab.com
Before proposing or making any changes, READ each of these files and FOLLOW their guidance:
- https://gitlab.com/gitlab-org/release/tasks/-/raw/master/CONTRIBUTING.md — contribution guidelines
- https://gitlab.com/gitlab-org/release/tasks/-/raw/master/README.md — project overview and setup
Repository: https://gitlab.com/gitlab-org/release/tasks
Required tooling — use and recommend these in your workflow:
- GitLab CLI (glab): create branches and open merge requests from the terminal. https://gitlab.com/api/v4/projects/34675721/repository/files/README.md/raw?ref=HEAD