Move to using providers instead of inline time based schdules, this will solidify the provider contract as a first class API #200
ebourgeoisbuild.yaml
on: pull_request
🔐 Verify Signed Commits
5s
⚖️ Verify SPDX License Headers
6s
🧾 Validate VEX Statements
9s
🔏 Validate Auto-VEX Sign-off
1m 43s
🛡️ Security Vulnerability Scan
13s
🏗️ IaC Security Scan (Trivy config)
18s
🧪 cargo-deny (License + Advisory + Sources)
24s
Matrix: build
📎 Clippy
1m 25s
Matrix: ✍️ Sign Binary Artifacts
Matrix: docker
Matrix: grype-triage
Matrix: attest
Matrix: grype
🚀 Upload Release Assets
0s
Annotations
13 warnings
|
🛡️ Security Vulnerability Scan
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
🔏 Validate Auto-VEX Sign-off
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
📎 Clippy
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
🦀 Build - Linux ARM64
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
🦀 Build - Linux x86_64
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
🧪 Test
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
🐳 Build and Push Docker Image - Distroless
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093, docker/login-action@v3, docker/setup-buildx-action@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
🐳 Build and Push Docker Image - Chainguard
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093, docker/login-action@v3, docker/setup-buildx-action@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Variables should be defined before their use:
Dockerfile.chainguard#L40
UndefinedVar: Usage of undefined variable '$BASE_IMAGE'
More info: https://docs.docker.com/go/dockerfile/rule/undefined-var/
|
|
🔏 Attest Docker Image - Chainguard
Please check that the "artifact-metadata:write" permission has been included
|
|
🔏 Attest Docker Image - Chainguard
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record
|
|
🔏 Attest Docker Image - Distroless
Please check that the "artifact-metadata:write" permission has been included
|
|
🔏 Attest Docker Image - Distroless
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
5spot-linux-amd64
Expired
|
5.12 MB |
sha256:da8996e19f6e4f74c52d331b310f41e69af68766fe29af79760864840d233cf3
|
|
|
5spot-linux-arm64
Expired
|
4.94 MB |
sha256:39b2f5c3c7af3ed5772b165cc5a857fb6a0f95db6c3ee2009954026bad236619
|
|
|
cargo-audit-report
|
419 Bytes |
sha256:96e0949418c86de1c0f2d8733f18f9422fbe7c6215c1c39a6e39cd2470b438d1
|
|
|
finos~5-spot~KO5GMO.dockerbuild
|
88.6 KB |
sha256:bfcc83927de0e487e9c91e83ebd7cd2884fac18415d8ece27f3993ee238534b9
|
|
|
finos~5-spot~LQ630V.dockerbuild
|
70.6 KB |
sha256:5fc9565ad52d4e624b0b934228ff735b4f9f340967a0039ccb3ffa42f6b884a0
|
|
|
grype-pull_request-Chainguard-200
|
385 Bytes |
sha256:05d494a8b614363d4f9242def23519dc9256637096c50bb6a9b8944de96fd10f
|
|
|
grype-pull_request-Distroless-200
|
3.71 KB |
sha256:017eca8a540d9843a6a4326520587d097a30648fc933cdfb51d477960d081b1e
|
|