QA failure: qa/specs/features/api/10_software_supply_chain_security/project_access_token_spec.rb
## Overview
* Environment: gstg-cny
* Coordinated pipeline: https://ops.gitlab.net/gitlab-org/release/tools/-/pipelines/6047418
* Auto-deploy package: 19.3.202608040506-7725732be39.2fe086f7365
### Pipeline:
* **https://ops.gitlab.net/gitlab-org/quality/staging/-/jobs/25716642**
```
2026-08-04T07:03:08.532107Z 01O
2026-08-04T07:03:08.532109Z 01O 1) Software Supply Chain Security Project access token for the same project can be used to create a file via the project API
2026-08-04T07:03:08.532114Z 01O [31mFailure/Error:[0m
2026-08-04T07:03:08.532117Z 01O [31m expect do[0m
2026-08-04T07:03:08.532119Z 01O [31m create(:file,[0m
2026-08-04T07:03:08.532122Z 01O [31m api_client: user_api_client,[0m
2026-08-04T07:03:08.532125Z 01O [31m project: project,[0m
2026-08-04T07:03:08.532128Z 01O [31m branch: "new_branch_#{SecureRandom.hex(8)}")[0m
2026-08-04T07:03:08.532132Z 01O [31m rescue StandardError => e[0m
2026-08-04T07:03:08.532136Z 01O [31m QA::Runtime::Logger.error("Full failure message: #{e.message}")[0m
2026-08-04T07:03:08.532139Z 01O [31m raise[0m
2026-08-04T07:03:08.532142Z 01O [31m end.not_to raise_error[0m
2026-08-04T07:03:08.532145Z 01O [31m[0m
2026-08-04T07:03:08.532147Z 01O [31m expected no Exception, got #<QA::Resource::Errors::ResourceFabricationFailedError:"Fabrication of QA::Resource::Project using th...%28%28query%3A%28match_phrase%3A%28json.correlation_id%3A%27a25bb3225f24ed87-ATL%27%29%29%29%29%29"> with backtrace:[0m
2026-08-04T07:03:08.532154Z 01O [31m # ./qa/resource/api_fabricator.rb:134:in `api_post_to'[0m
2026-08-04T07:03:08.532158Z 01O [31m # ./qa/resource/api_fabricator.rb:108:in `api_post'[0m
2026-08-04T07:03:08.532161Z 01O [31m # ./qa/resource/api_fabricator.rb:27:in `fabricate_via_api!'[0m
2026-08-04T07:03:08.532165Z 01O [31m # ./qa/resource/project.rb:126:in `rescue in fabricate_via_api!'[0m
2026-08-04T07:03:08.532169Z 01O [31m # ./qa/resource/project.rb:123:in `fabricate_via_api!'[0m
2026-08-04T07:03:08.532172Z 01O [31m # ./qa/resource/base.rb:74:in `block (2 levels) in fabricate_via_api!'[0m
2026-08-04T07:03:08.532176Z 01O [31m # ./qa/resource/base.rb:117:in `log_and_record_fabrication'[0m
2026-08-04T07:03:08.532180Z 01O [31m # ./qa/resource/base.rb:74:in `block in fabricate_via_api!'[0m
2026-08-04T07:03:08.532185Z 01O [31m # ./qa/resource/base.rb:107:in `do_fabricate!'[0m
2026-08-04T07:03:08.532189Z 01O [31m # ./qa/resource/base.rb:73:in `fabricate_via_api!'[0m
2026-08-04T07:03:08.532192Z 01O [31m # ./qa/resource/base.rb:48:in `fabricate!'[0m
2026-08-04T07:03:08.532195Z 01O [31m # ./qa/resource/file.rb:10:in `block in <class:File>'[0m
2026-08-04T07:03:08.532199Z 01O [31m # ./qa/resource/base.rb:314:in `instance_exec'[0m
2026-08-04T07:03:08.532202Z 01O [31m # ./qa/resource/base.rb:314:in `attribute_value'[0m
2026-08-04T07:03:08.532205Z 01O [31m # ./qa/resource/base.rb:173:in `block in attribute'[0m
2026-08-04T07:03:08.532209Z 01O [31m # ./qa/resource/file.rb:26:in `initialize'[0m
2026-08-04T07:03:08.532211Z 01O [31m # ./qa/specs/features/api/10_software_supply_chain_security/project_access_token_spec.rb:23:in `block (5 levels) in <module:QA>'[0m
2026-08-04T07:03:08.532216Z 01O [31m # ./qa/specs/features/api/10_software_supply_chain_security/project_access_token_spec.rb:22:in `block (4 levels) in <module:QA>'[0m
2026-08-04T07:03:08.844849Z 01E /builds/gitlab-org/quality/staging/.gems/bin/gitlab-qa: Command `docker run -t --rm --net=bridge --env QA_CAN_TEST_GIT_PROTOCOL_V2="$QA_CAN_TEST_GIT_PROTOCOL_V2" ...` failed! [31m✘[0m (Gitlab::QA::Support::ShellCommand::StatusError)
2026-08-04T07:03:08.844898Z 01E /builds/gitlab-org/quality/staging/.gems/bin/gitlab-qa: Command `docker run -t --rm --net=bridge --env QA_CAN_TEST_GIT_PROTOCOL_V2="$QA_CAN_TEST_GIT_PROTOCOL_V2" ...` failed! [31m✘[0m (Gitlab::QA::Support::ShellCommand::StatusError)
2026-08-04T07:03:08.846312Z 01O [31m # /home/gitlab/spec/support/fast_quarantine.rb:22:in `block (2 levels) in <top (required)>'[0m
2026-08-04T07:03:08.846327Z 01O [31m # ./qa/specs/runner.rb:124:in `run_rspec'[0m
2026-08-04T07:03:08.846331Z 01O [31m # ./qa/specs/runner.rb:32:in `perform'[0m
2026-08-04T07:03:08.846334Z 01O [31m # ./qa/scenario/template.rb:10:in `block in perform'[0m
2026-08-04T07:03:08.846337Z 01O [31m # ./qa/scenario/template.rb:8:in `perform'[0m
2026-08-04T07:03:08.846340Z 01O [31m # ./qa/scenario/template.rb:63:in `perform'[0m
2026-08-04T07:03:08.846343Z 01O [31m # ./qa/scenario/template.rb:10:in `block in perform'[0m
2026-08-04T07:03:08.846346Z 01O [31m # ./qa/scenario/template.rb:8:in `perform'[0m
2026-08-04T07:03:08.846349Z 01O [31m # ./qa/scenario/bootable.rb:52:in `launch!'[0m
2026-08-04T07:03:08.846352Z 01O [36m# ./qa/specs/features/api/10_software_supply_chain_security/project_access_token_spec.rb:22:in `block (4 levels) in <module:QA>'[0m
2026-08-04T07:03:08.846358Z 01O [36m# /home/gitlab/spec/support/fast_quarantine.rb:22:in `block (2 levels) in <top (required)>'[0m
2026-08-04T07:03:08.846362Z 01O [36m# ./qa/specs/runner.rb:124:in `run_rspec'[0m
2026-08-04T07:03:08.846365Z 01O [36m# ./qa/specs/runner.rb:32:in `perform'[0m
2026-08-04T07:03:08.846367Z 01O [36m# ./qa/scenario/template.rb:10:in `block in perform'[0m
2026-08-04T07:03:08.846371Z 01O [36m# ./qa/scenario/template.rb:8:in `perform'[0m
2026-08-04T07:03:08.846374Z 01O [36m# ./qa/scenario/template.rb:63:in `perform'[0m
2026-08-04T07:03:08.846377Z 01O [36m# ./qa/scenario/template.rb:10:in `block in perform'[0m
2026-08-04T07:03:08.846380Z 01O [36m# ./qa/scenario/template.rb:8:in `perform'[0m
2026-08-04T07:03:08.846388Z 01O [36m# ./qa/scenario/bootable.rb:52:in `launch!'[0m
2026-08-04T07:03:08.846392Z 01O
2026-08-04T07:03:08.846394Z 01O 2) Software Supply Chain Security Project access token for a different project cannot be used to create a file via the project API
2026-08-04T07:03:08.846400Z 01O [31mFailure/Error: let!(:project) { create(:project, name: "project-to-test-project-access-token") }[0m
2026-08-04T07:03:08.846405Z 01O [31m[0m
2026-08-04T07:03:08.846407Z 01O [31mQA::Resource::Errors::ResourceFabricationFailedError:[0m
2026-08-04T07:03:08.846417Z 01O [31m Fabrication of QA::Resource::Project using the API failed (400) with `{"message":{"base":["14:connections to all backends failing; last error: UNKNOWN: ipv4:10.224.13.53:8075: Failed to connect to remote host: Connection refused. debug_error_string:{UNAVAILABLE:connections to all backends failing; last error: UNKNOWN: ipv4:10.224.13.53:8075: Failed to connect to remote host: Connection refused}"]}}`.[0m
2026-08-04T07:03:08.846429Z 01O [31m Correlation Id: a25bb341ab01b051-ATL[0m
2026-08-04T07:03:08.846433Z 01O [31m Sentry Url: https://new-sentry.gitlab.net/organizations/gitlab/issues/?environment=gstg&project=3&query=correlation_id%3A%22a25bb341ab01b051-ATL%22[0m
2026-08-04T07:03:08.846439Z 01O [31m Kibana - Discover Url: https://nonprod-log.gitlab.net/app/discover#/?_a=%28index:%27ed942d00-5186-11ea-ad8a-f3610a492295%27%2Cquery%3A%28language%3Akuery%2Cquery%3A%27json.correlation_id%20%3A%20%22a25bb341ab01b051-ATL%22%27%29%29&_g=%28time%3A%28from%3A%272026-08-03T07:03:08.191Z%27%2Cto%3A%272026-08-04T07:03:08.191Z%27%29%29[0m
2026-08-04T07:03:08.846448Z 01O [31m Kibana - Dashboard Url: https://nonprod-log.gitlab.net/app/dashboards#/view/b74dc030-6f56-11ed-9af2-6131f0ee4ce6?_g=%28time%3A%28from:%272026-08-03T07:03:08.191Z%27%2Cto%3A%272026-08-04T07:03:08.191Z%27%29%29&_a=%28filters%3A%21%28%28query%3A%28match_phrase%3A%28json.correlation_id%3A%27a25bb341ab01b051-ATL%27%29%29%29%29%29[0m
2026-08-04T07:03:08.846455Z 01O [36m# ./qa/resource/api_fabricator.rb:134:in `api_post_to'[0m
2026-08-04T07:03:08.846459Z 01O [36m# ./qa/resource/api_fabricator.rb:108:in `api_post'[0m
2026-08-04T07:03:08.846462Z 01O [36m# ./qa/resource/api_fabricator.rb:27:in `fabricate_via_api!'[0m
2026-08-04T07:03:08.846465Z 01O [36m# ./qa/resource/project.rb:126:in `rescue in fabricate_via_api!'[0m
2026-08-04T07:03:08.846469Z 01O [36m# ./qa/resource/project.rb:123:in `fabricate_via_api!'[0m
2026-08-04T07:03:08.846472Z 01O [36m# ./qa/resource/base.rb:74:in `block (2 levels) in fabricate_via_api!'[0m
2026-08-04T07:03:08.846502Z 01O [36m# ./qa/resource/base.rb:117:in `log_and_record_fabrication'[0m
2026-08-04T07:03:08.846507Z 01O [36m# ./qa/resource/base.rb:74:in `block in fabricate_via_api!'[0m
2026-08-04T07:03:08.846510Z 01O [36m# ./qa/resource/base.rb:107:in `do_fabricate!'[0m
2026-08-04T07:03:08.846513Z 01O [36m# ./qa/resource/base.rb:73:in `fabricate_via_api!'[0m
2026-08-04T07:03:08.846517Z 01O [36m# ./qa/factories/_shared.rb:6:in `block (2 levels) in <module:QA>'[0m
2026-08-04T07:03:08.846520Z 01O [36m# ./qa/specs/features/api/10_software_supply_chain_security/project_access_token_spec.rb:8:in `block (3 levels) in <module:QA>'[0m
2026-08-04T07:03:08.846524Z 01O [36m# /home/gitlab/spec/support/fast_quarantine.rb:22:in `block (2 levels) in <top (required)>'[0m
2026-08-04T07:03:08.846528Z 01O [36m# ./qa/specs/runner.rb:124:in `run_rspec'[0m
2026-08-04T07:03:08.846531Z 01O [36m# ./qa/specs/runner.rb:32:in `perform'[0m
2026-08-04T07:03:08.846534Z 01O [36m# ./qa/scenario/template.rb:10:in `block in perform'[0m
2026-08-04T07:03:08.846537Z 01O [36m# ./qa/scenario/template.rb:8:in `perform'[0m
2026-08-04T07:03:08.846540Z 01O [36m# ./qa/scenario/template.rb:63:in `perform'[0m
2026-08-04T07:03:08.846542Z 01O [36m# ./qa/scenario/template.rb:10:in `block in perform'[0m
2026-08-04T07:03:08.846545Z 01O [36m# ./qa/scenario/template.rb:8:in `perform'[0m
2026-08-04T07:03:08.846548Z 01O [36m# ./qa/scenario/bootable.rb:52:in `launch!'[0m
2026-08-04T07:03:08.846551Z 01O [36m# ------------------[0m
2026-08-04T07:03:08.846554Z 01O [36m# --- Caused by: ---[0m
2026-08-04T07:03:08.846556Z 01O [36m# QA::Resource::Errors::ResourceNotFoundError:[0m
2026-08-04T07:03:08.846560Z 01O [36m# Resource at https://staging.gitlab.com/api/v4/projects/gitlab-e2e-sandbox-group-1%2Fe2e-test-2026-08-04-07-02-47-2a79d6edb11fa1fa%2Fproject-to-test-project-access-token-7531250f11fb3d32?private_token=[MASKED] could not be found (404): `{"message":"404 Project Not Found"}`.[0m
2026-08-04T07:03:08.846572Z 01O [36m# Correlation Id: a25bb340ba1eca0c-ATL[0m
2026-08-04T07:03:08.846576Z 01O [36m# Sentry Url: https://new-sentry.gitlab.net/organizations/gitlab/issues/?environment=gstg&project=3&query=correlation_id%3A%22a25bb340ba1eca0c-ATL%22[0m
2026-08-04T07:03:08.846581Z 01O [36m# Kibana - Discover Url: https://nonprod-log.gitlab.net/app/discover#/?_a=%28index:%27ed942d00-5186-11ea-ad8a-f3610a492295%27%2Cquery%3A%28language%3Akuery%2Cquery%3A%27json.correlation_id%20%3A%20%22a25bb340ba1eca0c-ATL%22%27%29%29&_g=%28time%3A%28from%3A%272026-08-03T07:03:05.174Z%27%2Cto%3A%272026-08-04T07:03:05.174Z%27%29%29[0m
2026-08-04T07:03:08.846593Z 01O [36m# Kibana - Dashboard Url: https://nonprod-log.gitlab.net/app/dashboards#/view/b74dc030-6f56-11ed-9af2-6131f0ee4ce6?_g=%28time%3A%28from:%272026-08-03T07:03:05.174Z%27%2Cto%3A%272026-08-04T07:03:05.174Z%27%29%29&_a=%28filters%3A%21%28%28query%3A%28match_phrase%3A%28json.correlation_id%3A%27a25bb340ba1eca0c-ATL%27%29%29%29%29%29[0m
2026-08-04T07:03:08.846600Z 01O [36m# ./qa/resource/api_fabricator.rb:93:in `api_get_from'[0m
2026-08-04T07:03:08.846603Z 01O
2026-08-04T07:03:08.846605Z 01O Finished in 28.78 seconds (files took 0.98515 seconds to load)
2026-08-04T07:03:08.846608Z 01O [31m2 examples, 2 failures[0m
2026-08-04T07:03:08.846611Z 01O
2026-08-04T07:03:08.846613Z 01O Failed examples:
2026-08-04T07:03:08.846616Z 01O
2026-08-04T07:03:08.846618Z 01O [31mrspec ./qa/specs/features/api/10_software_supply_chain_security/project_access_token_spec.rb:20[0m [36m# Software Supply Chain Security Project access token for the same project can be used to create a file via the project API[0m
2026-08-04T07:03:08.846624Z 01O [31mrspec ./qa/specs/features/api/10_software_supply_chain_security/project_access_token_spec.rb:60[0m [36m# Software Supply Chain Security Project access token for a different project cannot be used to create a file via the project API[0m
2026-08-04T07:03:08.846630Z 01O
2026-08-04T07:03:08.846632Z 01O
```
issue
GitLab AI Context
Project: gitlab-org/release/tasks
Instance: https://gitlab.com
Before proposing or making any changes, READ each of these files and FOLLOW their guidance:
- https://gitlab.com/gitlab-org/release/tasks/-/raw/master/CONTRIBUTING.md — contribution guidelines
- https://gitlab.com/gitlab-org/release/tasks/-/raw/master/README.md — project overview and setup
Repository: https://gitlab.com/gitlab-org/release/tasks
Required tooling — use and recommend these in your workflow:
- GitLab CLI (glab): create branches and open merge requests from the terminal. https://gitlab.com/api/v4/projects/34675721/repository/files/README.md/raw?ref=HEAD