Skip to content

ci(deps): bump firestoned/github-actions/docker/setup-docker from 1.3.6 to 1.3.7 #250

ci(deps): bump firestoned/github-actions/docker/setup-docker from 1.3.6 to 1.3.7

ci(deps): bump firestoned/github-actions/docker/setup-docker from 1.3.6 to 1.3.7 #250

Status Failure
Total duration 11m 53s
Artifacts 7

build.yaml

on: pull_request
🔐 Verify Signed Commits
7s
🔐 Verify Signed Commits
⚖️ Verify SPDX License Headers
3s
⚖️ Verify SPDX License Headers
🧾 Validate VEX Statements
9s
🧾 Validate VEX Statements
🔏 Validate Auto-VEX Sign-off
1m 58s
🔏 Validate Auto-VEX Sign-off
🛡️ Security Vulnerability Scan
20s
🛡️ Security Vulnerability Scan
🏗️ IaC Security Scan (Trivy config)
22s
🏗️ IaC Security Scan (Trivy config)
🧪 cargo-deny (License + Advisory + Sources)
22s
🧪 cargo-deny (License + Advisory + Sources)
🏷️ Extract Version Information
5s
🏷️ Extract Version Information
🎨 Check Formatting
14s
🎨 Check Formatting
Matrix: build
📦 Package Deployment Manifests
0s
📦 Package Deployment Manifests
Matrix: ✍️ Sign Binary Artifacts
🔬 Generate SLSA Provenance Subjects
0s
🔬 Generate SLSA Provenance Subjects
Matrix: docker
🏛️ Generate SLSA Provenance  /  detect-env
🏛️ Generate SLSA Provenance / detect-env
Matrix: grype-triage
Matrix: attest
🏛️ Generate SLSA Provenance  /  generator
🏛️ Generate SLSA Provenance / generator
🤖 Auto-VEX (reachability)
0s
🤖 Auto-VEX (reachability)
🤖 Auto-VEX (presence)
0s
🤖 Auto-VEX (presence)
🏛️ Generate SLSA Provenance  /  upload-assets
🏛️ Generate SLSA Provenance / upload-assets
🧾 Assemble OpenVEX
0s
🧾 Assemble OpenVEX
🏛️ Generate SLSA Provenance  /  final
🏛️ Generate SLSA Provenance / final
Matrix: grype
🚀 Upload Release Assets
0s
🚀 Upload Release Assets
Fit to window
Zoom out
Zoom in

Annotations

1 error and 13 warnings
🛡️ Security Vulnerability Scan
Process completed with exit code 1.
🛡️ Security Vulnerability Scan
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
🔏 Validate Auto-VEX Sign-off
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
📎 Clippy
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
🦀 Build - Linux ARM64
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
🦀 Build - Linux x86_64
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
🧪 Test
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
🐳 Build and Push Docker Image - Chainguard
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Variables should be defined before their use: Dockerfile.chainguard#L40
UndefinedVar: Usage of undefined variable '$BASE_IMAGE' More info: https://docs.docker.com/go/dockerfile/rule/undefined-var/
🐳 Build and Push Docker Image - Distroless
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
🔏 Attest Docker Image - Distroless
Please check that the "artifact-metadata:write" permission has been included
🔏 Attest Docker Image - Distroless
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record
🔏 Attest Docker Image - Chainguard
Please check that the "artifact-metadata:write" permission has been included
🔏 Attest Docker Image - Chainguard
Failed to create storage record: Error: Failed to persist storage record: no artifacts found - https://docs.github.com/rest/orgs/artifact-metadata#create-artifact-metadata-storage-record

Artifacts

Produced during runtime
Name Size Digest
5spot-linux-amd64 Expired
13.1 MB
sha256:e8684a3b50907bf3513d4579a370745805f4615607e27c8ddfbc7f4ea55cbed0
5spot-linux-arm64 Expired
12.6 MB
sha256:338a932e6741e79f216179f02f28d012dff46c8689ba219038a1472cbef55fe2
cargo-audit-report
1.04 KB
sha256:6044f44305053b329122da609fbff95598ccdccd7ab68037e1bc390d88cce54b
finos~5-spot~E07VMR.dockerbuild
97.6 KB
sha256:f7dd3067aab6ab23862fb7122c15d7b1ece6ed7b3608e16b71615b8aeccf9d99
finos~5-spot~S3WMAF.dockerbuild
76.9 KB
sha256:8b15b6ff4ab7bac509369d0f168f8abf999e5b0a770a0a2901ee7eb2c2cbce64
grype-pull_request-Chainguard-250
385 Bytes
sha256:049180dd6c2416132da762ac32f431565e880b5399841623cb3a0933651892f2
grype-pull_request-Distroless-250
3.72 KB
sha256:fd289ff781142b4676464c576a4fbd84a334078b8cc3f4b78776a163e9c8a0c0