Skip to content

Add support for different versions of CAPI bootstrap and infrastructure specs, passthrough #204

Add support for different versions of CAPI bootstrap and infrastructure specs, passthrough

Add support for different versions of CAPI bootstrap and infrastructure specs, passthrough #204

Triggered via pull request June 22, 2026 10:44
Status Failure
Total duration 10m 46s
Artifacts 7

build.yaml

on: pull_request
🔐 Verify Signed Commits
7s
🔐 Verify Signed Commits
⚖️ Verify SPDX License Headers
4s
⚖️ Verify SPDX License Headers
🧾 Validate VEX Statements
4s
🧾 Validate VEX Statements
🔏 Validate Auto-VEX Sign-off
1m 46s
🔏 Validate Auto-VEX Sign-off
🛡️ Security Vulnerability Scan
22s
🛡️ Security Vulnerability Scan
🏗️ IaC Security Scan (Trivy config)
23s
🏗️ IaC Security Scan (Trivy config)
🧪 cargo-deny (License + Advisory + Sources)
23s
🧪 cargo-deny (License + Advisory + Sources)
🏷️ Extract Version Information
7s
🏷️ Extract Version Information
🎨 Check Formatting
16s
🎨 Check Formatting
Matrix: build
📦 Package Deployment Manifests
📦 Package Deployment Manifests
📎 Clippy
0s
📎 Clippy
Matrix: ✍️ Sign Binary Artifacts
🔬 Generate SLSA Provenance Subjects
0s
🔬 Generate SLSA Provenance Subjects
Matrix: docker
🏛️ Generate SLSA Provenance  /  detect-env
🏛️ Generate SLSA Provenance / detect-env
Matrix: grype-triage
Matrix: attest
🏛️ Generate SLSA Provenance  /  generator
🏛️ Generate SLSA Provenance / generator
🤖 Auto-VEX (reachability)
🤖 Auto-VEX (reachability)
🤖 Auto-VEX (presence)
🤖 Auto-VEX (presence)
🏛️ Generate SLSA Provenance  /  upload-assets
🏛️ Generate SLSA Provenance / upload-assets
🧾 Assemble OpenVEX
🧾 Assemble OpenVEX
🏛️ Generate SLSA Provenance  /  final
🏛️ Generate SLSA Provenance / final
Matrix: grype
🚀 Upload Release Assets
0s
🚀 Upload Release Assets
Fit to window
Zoom out
Zoom in

Annotations

1 error and 12 warnings
🎨 Check Formatting
Process completed with exit code 1.
🛡️ Security Vulnerability Scan
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
🔏 Validate Auto-VEX Sign-off
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
🦀 Build - Linux ARM64
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
🦀 Build - Linux x86_64
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
🧪 Test
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
🐳 Build and Push Docker Image - Chainguard
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093, docker/login-action@v3, docker/setup-buildx-action@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Variables should be defined before their use: Dockerfile.chainguard#L40
UndefinedVar: Usage of undefined variable '$BASE_IMAGE' More info: https://docs.docker.com/go/dockerfile/rule/undefined-var/
🐳 Build and Push Docker Image - Distroless
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093, docker/login-action@v3, docker/setup-buildx-action@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
🔏 Attest Docker Image - Distroless
Please check that the "artifact-metadata:write" permission has been included
🔏 Attest Docker Image - Distroless
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record
🔏 Attest Docker Image - Chainguard
Please check that the "artifact-metadata:write" permission has been included
🔏 Attest Docker Image - Chainguard
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record

Artifacts

Produced during runtime
Name Size Digest
5spot-linux-amd64 Expired
5.16 MB
sha256:46831c053d8a5b604db2f9deee33bd801cb97e00387bc06df94fe3cf1e9bef7b
5spot-linux-arm64 Expired
4.97 MB
sha256:16d67d8946173010f4c03def1a228ccfd3364d9443107e8ede8711b1c148793f
cargo-audit-report
419 Bytes
sha256:5c6e8c394b70bb1266594f80385aa3a954b161bf2f4c83b9653899ba8a488dd7
finos~5-spot~KJFYJM.dockerbuild
95.2 KB
sha256:0cf25fec83b7bb7695df0719526b98fc287d75b6978cab8e606414940c535218
finos~5-spot~YOD9FP.dockerbuild
74.2 KB
sha256:9a23a53534e78832dacc09ce4a1f050cfa781ac86c2449944a1c1186a2d22787
grype-pull_request-Chainguard-204
385 Bytes
sha256:eb12ebf9c29c5a936c60d8eb2b891efee1be13a0ffcef8755e9e872a060ed79d
grype-pull_request-Distroless-204
3.71 KB
sha256:2d8200f3c6f8e5553caf4315236701834c790c1369861af8b9eff7f02aac1eb7