Move to using providers instead of inline time based schdules, this will solidify the provider contract as a first class API #198
ebourgeoisbuild.yaml
on: pull_request
🔐 Verify Signed Commits
5s
⚖️ Verify SPDX License Headers
3s
🧾 Validate VEX Statements
10s
🔏 Validate Auto-VEX Sign-off
1m 58s
🛡️ Security Vulnerability Scan
15s
🏗️ IaC Security Scan (Trivy config)
23s
🧪 cargo-deny (License + Advisory + Sources)
21s
Matrix: build
📎 Clippy
1m 24s
Matrix: ✍️ Sign Binary Artifacts
Matrix: docker
Matrix: grype-triage
Matrix: attest
Matrix: grype
🚀 Upload Release Assets
0s
Annotations
13 warnings
|
🛡️ Security Vulnerability Scan
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
📎 Clippy
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
🔏 Validate Auto-VEX Sign-off
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
🦀 Build - Linux ARM64
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
🦀 Build - Linux x86_64
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
🧪 Test
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
🐳 Build and Push Docker Image - Chainguard
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093, docker/login-action@v3, docker/setup-buildx-action@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Variables should be defined before their use:
Dockerfile.chainguard#L40
UndefinedVar: Usage of undefined variable '$BASE_IMAGE'
More info: https://docs.docker.com/go/dockerfile/rule/undefined-var/
|
|
🐳 Build and Push Docker Image - Distroless
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093, docker/login-action@v3, docker/setup-buildx-action@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
🔏 Attest Docker Image - Chainguard
Please check that the "artifact-metadata:write" permission has been included
|
|
🔏 Attest Docker Image - Chainguard
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record
|
|
🔏 Attest Docker Image - Distroless
Please check that the "artifact-metadata:write" permission has been included
|
|
🔏 Attest Docker Image - Distroless
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
5spot-linux-amd64
Expired
|
5.12 MB |
sha256:4f049fe5fb4f698525816cfc00fffa9d1746f1e5e94fa125f60e239a4f5a2e71
|
|
|
5spot-linux-arm64
Expired
|
4.94 MB |
sha256:29d55b9d5d2393526aacdd4fc7cb6a6caa06dd2295361863987224f2d576fc01
|
|
|
cargo-audit-report
|
419 Bytes |
sha256:44bd02365b368b3419cb0dcae12963fde933657a5ab40b7f36afe686f83c1c5c
|
|
|
finos~5-spot~07AY5L.dockerbuild
|
96.4 KB |
sha256:c85965d0188d2266d3c7e3bfb658683a75b7384bc93830cce5fad1a35ae850d6
|
|
|
finos~5-spot~806A6R.dockerbuild
|
74.2 KB |
sha256:cd4e2a46ffd1425397fa3b6c410dcd5bec53cdf831e9bb0d18c7670c256026c0
|
|
|
grype-pull_request-Chainguard-198
|
385 Bytes |
sha256:c7efdcab291a5af0bf894c3b11216e1f340c01c8a87ab0ebda3cd2b2b3ee2ce0
|
|
|
grype-pull_request-Distroless-198
|
3.71 KB |
sha256:42becd8c3a0b9640465200159f40c54aad5427d93ef85bc34bfd2e501a979ef3
|
|