From e31a6bca96567c928ff2deecbba88b19cf495c59 Mon Sep 17 00:00:00 2001
From: qwerty287 <80460567+qwerty287@users.noreply.github.com>
Date: Mon, 30 Mar 2026 14:29:37 +0200
Subject: [PATCH] Send 404 if logs are not allowed to access (#6349)

---
 server/api/pipeline.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/server/api/pipeline.go b/server/api/pipeline.go
index 2077b1b88..d36626de0 100644
--- a/server/api/pipeline.go
+++ b/server/api/pipeline.go
@@ -316,7 +316,7 @@ func GetStepLogs(c *gin.Context) {
 
 	if step.PipelineID != pl.ID {
 		// make sure we cannot read arbitrary logs by id
-		_ = c.AbortWithError(http.StatusBadRequest, fmt.Errorf("step with id %d is not part of repo %s", stepID, repo.FullName))
+		c.AbortWithStatus(http.StatusNotFound)
 		return
 	}