Remove the mTLS check and resumption change, as this was a red herring #240
build.yaml
on: pull_request
🔐 Verify Signed Commits
4s
⚖️ Verify SPDX License Headers
5s
🧾 Validate VEX Statements
5s
🔏 Validate Auto-VEX Sign-off
1m 39s
🛡️ Security Vulnerability Scan
22s
🏗️ IaC Security Scan (Trivy config)
19s
🧪 cargo-deny (License + Advisory + Sources)
22s
Matrix: build
📎 Clippy
1m 42s
Matrix: ✍️ Sign Binary Artifacts
Matrix: docker
Matrix: grype-triage
Matrix: attest
Matrix: grype
🚀 Upload Release Assets
Annotations
13 warnings
|
🛡️ Security Vulnerability Scan
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
🔏 Validate Auto-VEX Sign-off
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
📎 Clippy
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
🦀 Build - Linux ARM64
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
🦀 Build - Linux x86_64
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
🧪 Test
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
🐳 Build and Push Docker Image - Chainguard
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093, docker/login-action@v3, docker/setup-buildx-action@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Variables should be defined before their use:
Dockerfile.chainguard#L40
UndefinedVar: Usage of undefined variable '$BASE_IMAGE'
More info: https://docs.docker.com/go/dockerfile/rule/undefined-var/
|
|
🐳 Build and Push Docker Image - Distroless
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093, docker/login-action@v3, docker/setup-buildx-action@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
🔏 Attest Docker Image - Chainguard
Please check that the "artifact-metadata:write" permission has been included
|
|
🔏 Attest Docker Image - Chainguard
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record
|
|
🔏 Attest Docker Image - Distroless
Please check that the "artifact-metadata:write" permission has been included
|
|
🔏 Attest Docker Image - Distroless
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
5spot-linux-amd64
Expired
|
13.1 MB |
sha256:009d37e4470db842b08b8f4b0ec3d23b2dd5d3c72e91a5b8a60444f3aa56ceeb
|
|
|
5spot-linux-arm64
Expired
|
12.6 MB |
sha256:0f83963a2080dc0e4e14c9cebb33f8f0c6d4d233d49d1fce66fec938c4ce257b
|
|
|
cargo-audit-report
|
426 Bytes |
sha256:ba4360f359effea8427354922412d8efdb77acb0b8d2c4ef8748f844736d8a6a
|
|
|
finos~5-spot~FAN9KF.dockerbuild
|
82.5 KB |
sha256:0edffc147d68d72ecc54ed611763c4402cdf635f95c834bfe2e2e8981e9528b7
|
|
|
finos~5-spot~L5VLKK.dockerbuild
|
101 KB |
sha256:151a5585ab672f6658b5c4bbf9e659266ce795fd8f46654e130413237c0a8f4b
|
|
|
grype-pull_request-Chainguard-240
|
385 Bytes |
sha256:41e7f01cdf30f2c1dc85d7607928928fe189ae4ee932e9ea6a07134e793d6b95
|
|
|
grype-pull_request-Distroless-240
|
3.71 KB |
sha256:cf4af9777f5da177e71e28ba28171bee95acb02a0cb7bb5460b1e3571608b120
|
|