QA failure: qa/specs/features/api/10_software_supply_chain_security/project_access_token_spec.rb
## Overview
* Environment: gprd-cny
* Coordinated pipeline: https://ops.gitlab.net/gitlab-org/release/tools/-/pipelines/6432904
* Auto-deploy package: 19.6.202610201907-27a841f4bf2.c80a03c498b
### Pipeline:
* **https://ops.gitlab.net/gitlab-org/quality/canary/-/jobs/28088635**
```
2026-10-20T22:00:37.656537Z 01O
2026-10-20T22:00:37.656540Z 01O 1) Software Supply Chain Security Project access token for a different project cannot be used to create a file via the project API
2026-10-20T22:00:37.656543Z 01O [31mFailure/Error: let!(:project) { create(:project, name: "project-to-test-project-access-token") }[0m
2026-10-20T22:00:37.656546Z 01O [31m[0m
2026-10-20T22:00:37.656549Z 01O [31mQA::Resource::Errors::InternalServerError:[0m
2026-10-20T22:00:37.656552Z 01O [31m Failed to GET https://gitlab.com/api/v4/groups/gitlab-e2e-sandbox-group-7?with_projects=false&private_token=[MASKED] - (500): `{"message":"500 Internal Server Error"}`.[0m
2026-10-20T22:00:37.656554Z 01O [31m Correlation Id: a4db4b63dd511799-ATL[0m
2026-10-20T22:00:37.656557Z 01O [31m Sentry Url: https://new-sentry.gitlab.net/organizations/gitlab/issues/?environment=gprd&project=3&query=correlation_id%3A%22a4db4b63dd511799-ATL%22[0m
2026-10-20T22:00:37.656560Z 01O [31m Kibana - Discover Url: https://log.gprd.gitlab.net/app/discover#/?_a=%28index:%277092c4e2-4eb5-46f2-8305-a7da2edad090%27%2Cquery%3A%28language%3Akuery%2Cquery%3A%27json.correlation_id%20%3A%20%22a4db4b63dd511799-ATL%22%27%29%29&_g=%28time%3A%28from%3A%272026-10-19T22:00:17.500Z%27%2Cto%3A%272026-10-20T22:00:17.500Z%27%29%29[0m
2026-10-20T22:00:37.656563Z 01O [31m Kibana - Dashboard Url: https://log.gprd.gitlab.net/app/dashboards#/view/5e6d3440-7597-11ed-9f43-e3784d7fe3ca?_g=%28time%3A%28from:%272026-10-19T22:00:17.500Z%27%2Cto%3A%272026-10-20T22:00:17.501Z%27%29%29&_a=%28filters%3A%21%28%28query%3A%28match_phrase%3A%28json.correlation_id%3A%27a4db4b63dd511799-ATL%27%29%29%29%29%29[0m
2026-10-20T22:00:37.656569Z 01O [36m# ./qa/resource/api_fabricator.rb:98:in `api_get_from'[0m
2026-10-20T22:00:37.656572Z 01O [36m# ./qa/resource/api_fabricator.rb:76:in `api_get'[0m
2026-10-20T22:00:37.656574Z 01O [36m# ./qa/resource/sandbox.rb:55:in `fabricate_via_api!'[0m
2026-10-20T22:00:37.656577Z 01O [36m# ./qa/resource/base.rb:74:in `block (2 levels) in fabricate_via_api!'[0m
2026-10-20T22:00:37.656580Z 01O [36m# ./qa/resource/base.rb:117:in `log_and_record_fabrication'[0m
2026-10-20T22:00:37.656583Z 01O [36m# ./qa/resource/base.rb:74:in `block in fabricate_via_api!'[0m
2026-10-20T22:00:37.656585Z 01O [36m# ./qa/resource/base.rb:107:in `do_fabricate!'[0m
2026-10-20T22:00:37.656588Z 01O [36m# ./qa/resource/base.rb:73:in `fabricate_via_api!'[0m
2026-10-20T22:00:37.656591Z 01O [36m# ./qa/resource/group.rb:18:in `block in <class:Group>'[0m
2026-10-20T22:00:37.656594Z 01O [36m# ./qa/resource/base.rb:314:in `instance_exec'[0m
2026-10-20T22:00:37.656597Z 01O [36m# ./qa/resource/base.rb:314:in `attribute_value'[0m
2026-10-20T22:00:37.656599Z 01O [36m# ./qa/resource/base.rb:173:in `block in attribute'[0m
2026-10-20T22:00:37.656602Z 01O [36m# ./qa/resource/group.rb:155:in `determine_full_path'[0m
2026-10-20T22:00:37.656605Z 01O [36m# ./qa/resource/group.rb:91:in `api_get_path'[0m
2026-10-20T22:00:37.656608Z 01O [36m# ./qa/resource/api_fabricator.rb:76:in `api_get'[0m
2026-10-20T22:00:37.656611Z 01O [36m# ./qa/resource/group.rb:85:in `fabricate_via_api!'[0m
2026-10-20T22:00:38.019808Z 01E /builds/gitlab-org/quality/canary/.gems/bin/gitlab-qa: Command `docker run -t --rm --net=bridge --env QA_CAN_TEST_GIT_PROTOCOL_V2="$QA_CAN_TEST_GIT_PROTOCOL_V2" ...` failed! [31m✘[0m (Gitlab::QA::Support::ShellCommand::StatusError)
2026-10-20T22:00:38.019841Z 01E /builds/gitlab-org/quality/canary/.gems/bin/gitlab-qa: Command `docker run -t --rm --net=bridge --env QA_CAN_TEST_GIT_PROTOCOL_V2="$QA_CAN_TEST_GIT_PROTOCOL_V2" ...` failed! [31m✘[0m (Gitlab::QA::Support::ShellCommand::StatusError)
2026-10-20T22:00:38.021542Z 01O [36m# ./qa/resource/base.rb:74:in `block (2 levels) in fabricate_via_api!'[0m
2026-10-20T22:00:38.021568Z 01O [36m# ./qa/resource/base.rb:117:in `log_and_record_fabrication'[0m
2026-10-20T22:00:38.021570Z 01O [36m# ./qa/resource/base.rb:74:in `block in fabricate_via_api!'[0m
2026-10-20T22:00:38.021573Z 01O [36m# ./qa/resource/base.rb:107:in `do_fabricate!'[0m
2026-10-20T22:00:38.021575Z 01O [36m# ./qa/resource/base.rb:73:in `fabricate_via_api!'[0m
2026-10-20T22:00:38.021578Z 01O [36m# ./qa/resource/base.rb:48:in `fabricate!'[0m
2026-10-20T22:00:38.021580Z 01O [36m# ./qa/resource/project.rb:37:in `block in <class:Project>'[0m
2026-10-20T22:00:38.021583Z 01O [36m# ./qa/resource/base.rb:314:in `instance_exec'[0m
2026-10-20T22:00:38.021585Z 01O [36m# ./qa/resource/base.rb:314:in `attribute_value'[0m
2026-10-20T22:00:38.021588Z 01O [36m# ./qa/resource/base.rb:173:in `block in attribute'[0m
2026-10-20T22:00:38.021590Z 01O [36m# ./qa/resource/project.rb:43:in `block in <class:Project>'[0m
2026-10-20T22:00:38.021593Z 01O [36m# ./qa/resource/base.rb:314:in `instance_exec'[0m
2026-10-20T22:00:38.021595Z 01O [36m# ./qa/resource/base.rb:314:in `attribute_value'[0m
2026-10-20T22:00:38.021597Z 01O [36m# ./qa/resource/base.rb:173:in `block in attribute'[0m
2026-10-20T22:00:38.021599Z 01O [36m# ./qa/resource/project.rb:145:in `api_get_path'[0m
2026-10-20T22:00:38.021602Z 01O [36m# ./qa/resource/api_fabricator.rb:76:in `api_get'[0m
2026-10-20T22:00:38.021604Z 01O [36m# ./qa/resource/project.rb:124:in `fabricate_via_api!'[0m
2026-10-20T22:00:38.021616Z 01O [36m# ./qa/resource/base.rb:74:in `block (2 levels) in fabricate_via_api!'[0m
2026-10-20T22:00:38.021618Z 01O [36m# ./qa/resource/base.rb:117:in `log_and_record_fabrication'[0m
2026-10-20T22:00:38.021621Z 01O [36m# ./qa/resource/base.rb:74:in `block in fabricate_via_api!'[0m
2026-10-20T22:00:38.021623Z 01O [36m# ./qa/resource/base.rb:107:in `do_fabricate!'[0m
2026-10-20T22:00:38.021625Z 01O [36m# ./qa/resource/base.rb:73:in `fabricate_via_api!'[0m
2026-10-20T22:00:38.021627Z 01O [36m# ./qa/factories/_shared.rb:6:in `block (2 levels) in <module:QA>'[0m
2026-10-20T22:00:38.021630Z 01O [36m# ./qa/specs/features/api/10_software_supply_chain_security/project_access_token_spec.rb:8:in `block (3 levels) in <module:QA>'[0m
2026-10-20T22:00:38.021632Z 01O [36m# /home/gitlab/spec/support/fast_quarantine.rb:22:in `block (2 levels) in <top (required)>'[0m
2026-10-20T22:00:38.021634Z 01O [36m# ./qa/specs/runner.rb:125:in `run_rspec'[0m
2026-10-20T22:00:38.021636Z 01O [36m# ./qa/specs/runner.rb:32:in `perform'[0m
2026-10-20T22:00:38.021638Z 01O [36m# ./qa/scenario/template.rb:10:in `block in perform'[0m
2026-10-20T22:00:38.021641Z 01O [36m# ./qa/scenario/template.rb:8:in `perform'[0m
2026-10-20T22:00:38.021643Z 01O [36m# ./qa/scenario/template.rb:63:in `perform'[0m
2026-10-20T22:00:38.021645Z 01O [36m# ./qa/scenario/template.rb:10:in `block in perform'[0m
2026-10-20T22:00:38.021648Z 01O [36m# ./qa/scenario/template.rb:8:in `perform'[0m
2026-10-20T22:00:38.021650Z 01O [36m# ./qa/scenario/bootable.rb:52:in `launch!'[0m
2026-10-20T22:00:38.021652Z 01O
2026-10-20T22:00:38.021654Z 01O Finished in 1 minute 3.73 seconds (files took 0.98103 seconds to load)
2026-10-20T22:00:38.021657Z 01O [31m3 examples, 1 failure[0m
2026-10-20T22:00:38.021659Z 01O
2026-10-20T22:00:38.021661Z 01O Failed examples:
2026-10-20T22:00:38.021663Z 01O
2026-10-20T22:00:38.021666Z 01O [31mrspec ./qa/specs/features/api/10_software_supply_chain_security/project_access_token_spec.rb:58[0m [36m# Software Supply Chain Security Project access token for a different project cannot be used to create a file via the project API[0m
2026-10-20T22:00:38.021668Z 01O
2026-10-20T22:00:38.021670Z 01O
```
issue
GitLab AI Context
Project: gitlab-org/release/tasks
Instance: https://gitlab.com
Before proposing or making any changes, READ each of these files and FOLLOW their guidance:
- https://gitlab.com/gitlab-org/release/tasks/-/raw/master/CONTRIBUTING.md — contribution guidelines
- https://gitlab.com/gitlab-org/release/tasks/-/raw/master/README.md — project overview and setup
Repository: https://gitlab.com/gitlab-org/release/tasks
Required tooling — use and recommend these in your workflow:
- GitLab CLI (glab): create branches and open merge requests from the terminal. https://gitlab.com/api/v4/projects/34675721/repository/files/README.md/raw?ref=HEAD