ipn/proxies: careful pinned proxy checks with fallback #1854
go.yml
on: push
🧬 Build
4m 16s
🛡️ OSV scanner
1m 53s
🌈 ORT
3m 41s
🗳️ Security checker
1m 46s
🧭 Lint
54s
🧩 CodeQL & Zizmor
2m 32s
Matrix: 🪪 Artifact attestations / 🔏 Build attestation
Waiting for pending jobs
Matrix: 🪪 Artifact attestations / 📦 SBOM attestation
Waiting for pending jobs
🚚 Publish
/
🔥 Firebase Symbols
Annotations
16 errors, 4 warnings, and 4 notices
|
🧭 Lint
Process completed with exit code 1.
|
|
🧭 Lint:
intra/ipn/proxies.go#L574
this value of notok is never used (SA4006)
|
|
🧭 Lint:
intra/ipn/proxies.go#L565
this value of noh3 is never used (SA4006)
|
|
🧭 Lint:
intra/core/ping.go#L115
do not define dynamic errors, use wrapped static errors instead: "fmt.Errorf(\"icmp: err reply type: '%T' '%v'\", pkt, pkt)" (err113)
|
|
🧭 Lint:
intra/core/ping.go#L105
do not define dynamic errors, use wrapped static errors instead: "fmt.Errorf(\"icmp: insufficient reply data; %d != %d\", len(reply.Data), len(data))" (err113)
|
|
🧭 Lint:
intra/core/ip.go#L104
do not define dynamic errors, use wrapped static errors instead: "fmt.Errorf(\"ip2cidr2: errs: cidr %v / ipp %v / ip %v\", err, err1, err2)" (err113)
|
|
🧭 Lint:
intra/core/ip.go#L82
do not define dynamic errors, use wrapped static errors instead: "fmt.Errorf(\"ip2cidr: errs: cidr %v / ipp %v / ip %v\", err, err1, err2)" (err113)
|
|
🧭 Lint:
intra/core/ip.go#L65
do not define dynamic errors, use wrapped static errors instead: "fmt.Errorf(\"failed to generate random IP from CIDR: %s\", cidr)" (err113)
|
|
🧭 Lint:
intra/core/ip.go#L36
do not define dynamic errors, use wrapped static errors instead: "fmt.Errorf(\"invalid cidr: %s\", cidr)" (err113)
|
|
🧭 Lint:
intra/core/ip.go#L31
do not define dynamic errors, use wrapped static errors instead: "errors.New(\"mapped v4 addresses not supported\")" (err113)
|
|
🧭 Lint:
intra/core/connpool.go#L482
do not define dynamic errors, use wrapped static errors instead: "fmt.Errorf(\"pool: poll: sz: %d (must be 0), errno: %v\",\n\tn, fds[0].Revents)" (err113)
|
|
🧭 Lint:
intra/core/connpool.go#L479
do not define dynamic errors, use wrapped static errors instead: "fmt.Errorf(\"pool: poll: err: %v\", err)" (err113)
|
|
🧭 Lint:
intra/core/connpool.go#L465
do not compare errors directly "err == syscall.EAGAIN", use "errors.Is(err, syscall.EAGAIN)" instead (err113)
|
|
🛡️ OSV scanner:
go.mod#L0
go.mod
+---------------------+------------------------------+------+-----------------+---------------+
| PACKAGE | VULNERABILITY ID | CVSS | CURRENT VERSION | FIXED VERSION |
+---------------------+------------------------------+------+-----------------+---------------+
| golang.org/x/crypto | https://osv.dev/GO-2026-5932 | | 0.52.0 | |
+---------------------+------------------------------+------+-----------------+---------------+
|
|
🧬 Build
Code Scanning could not process the submitted SARIF file:
locationFromSarifResult: expected artifact location
|
|
🧬 Build
Process completed with exit code 1.
|
|
🧭 Lint
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
🧩 CodeQL & Zizmor
User-specified `matrix` input is not an object.
|
|
🌈 ORT
No files were found with the provided path: /home/runner/.ort/ort-results/evaluation-result.json. No artifacts will be uploaded.
|
|
🧬 Build
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: advanced-security/spdx-dependency-submission-action@v0.2.0. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
🧬 Build
Snapshot successfully created at 2026-07-18T01:23:41.143Z
|
|
🧬 Build
{
"manifests": {
"celzero/firestack 1.0.0": {
"resolved": {
"pkg:golang/github.com/txthinking/runnergroup@v0.0.0-20210608031112-152c7c4432bf": {
"package_url": "pkg:golang/github.com/txthinking/runnergroup@v0.0.0-20210608031112-152c7c4432bf",
"relationship": "direct",
"dependencies": []
},
"pkg:golang/github.com/showwin/speedtest-go@v1.7.10": {
"package_url": "pkg:golang/github.com/showwin/speedtest-go@v1.7.10",
"relationship": "direct",
"dependencies": []
},
"pkg:golang/github.com/google/btree@v1.1.2": {
"package_url": "pkg:golang/github.com/google/btree@v1.1.2",
"relationship": "direct",
"dependencies": []
},
"pkg:golang/github.com/jedisct1/xsecretbox@v0.0.0-20190909160646-b731c21297f9": {
"package_url": "pkg:golang/github.com/jedisct1/xsecretbox@v0.0.0-20190909160646-b731c21297f9",
"relationship": "direct",
"dependencies": []
},
"pkg:golang/golang.org/x/text@v0.37.0": {
"package_url": "pkg:golang/golang.org/x/text@v0.37.0",
"relationship": "direct",
"dependencies": []
},
"pkg:golang/golang.org/x/time@v0.12.0": {
"package_url": "pkg:golang/golang.org/x/time@v0.12.0",
"relationship": "direct",
"dependencies": []
},
"pkg:golang/github.com/coder/websocket@v1.8.14": {
"package_url": "pkg:golang/github.com/coder/websocket@v1.8.14",
"relationship": "direct",
"dependencies": []
},
"pkg:golang/github.com/crazy-max/xgo@v0.31.0": {
"package_url": "pkg:golang/github.com/crazy-max/xgo@v0.31.0",
"relationship": "direct",
"dependencies": []
},
"pkg:golang/github.com/jedisct1/go-dnsstamps@v0.0.0-20200621175006-302248eecc94": {
"package_url": "pkg:golang/github.com/jedisct1/go-dnsstamps@v0.0.0-20200621175006-302248eecc94",
"relationship": "direct",
"dependencies": []
},
"pkg:golang/golang.zx2c4.com/wireguard@v0.0.0-20250521234502-f333402bd9cb": {
"package_url": "pkg:golang/golang.zx2c4.com/wireguard@v0.0.0-20250521234502-f333402bd9cb",
"relationship": "direct",
"dependencies": []
},
"pkg:golang/github.com/cisco/go-tls-syntax@v0.0.0-20200617162716-46b0cfb76b9b": {
"package_url": "pkg:golang/github.com/cisco/go-tls-syntax@v0.0.0-20200617162716-46b0cfb76b9b",
"relationship": "direct",
"dependencies": []
},
"pkg:golang/github.com/cloudflare/circl@v1.6.3": {
"package_url": "pkg:golang/github.com/cloudflare/circl@v1.6.3",
"relationship": "direct",
"dependencies": []
},
"pkg:golang/github.com/miekg/dns@v1.1.72": {
"package_url": "pkg:golang/github.com/miekg/dns@v1.1.72",
"relationship": "direct",
"dependencies": []
},
"pkg:golang/github.com/cloudflare/odoh-go@v1.0.0": {
"package_url": "pkg:golang/github.com/cloudflare/odoh-go@v1.0.0",
"relationship": "direct",
"dependencies": []
},
"pkg:golang/golang.org/x/sync@v0.20.0": {
"package_url": "pkg:golang/golang.org/x/sync@v0.20.0",
"relationship": "direct
|
|
🧬 Build
Submitting snapshot...
|
|
🧬 Build
success
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
debug-artifacts
|
7.23 MB |
sha256:f6e88eb344307a0d9d930c1949d8efedc5eaaa9cb42805d9f6e6c259a9d4eaaf
|
|
|
firestack-aar-9ca5add596909fdc95473d8628078101402f174f
|
50.9 MB |
sha256:8600e53882d908ae298f60c3bafa5979b6b8b1ef542107cd2bb2db9971914ecc
|
|
|
firestack-sbom-9ca5add596909fdc95473d8628078101402f174f
Expired
|
41.3 KB |
sha256:0918c2688ad86c8a1b1a10d454aad63d43552532ee2f714b4952eca35072b58f
|
|
|
ort-results-firestack-9ca5add
|
569 KB |
sha256:ab54ee36601867d0d39de98633497c1fdf3d1a0d7923b80a8dce2e02badf3b03
|
|
|
osv-scanner-results-9ca5add596909fdc95473d8628078101402f174f
|
1.62 KB |
sha256:50d2cc38ee491cd852be94a131a79e51541bd1f26eb8f5c9306afece0de1cd45
|
|