Skip to content

Merge pull request #10332 from habitat-sh/dependabot/cargo/libsodium-… #1623

Merge pull request #10332 from habitat-sh/dependabot/cargo/libsodium-…

Merge pull request #10332 from habitat-sh/dependabot/cargo/libsodium-… #1623

Triggered via push April 10, 2026 16:04
Status Success
Total duration 1m 39s
Artifacts 5
call-ci-main-pr-check-pipeline  /  Checkout repository
16s
call-ci-main-pr-check-pipeline / Checkout repository
Echo stub version
2s
Echo stub version
call-ci-main-pr-check-pipeline  /  Pre-compilation checks
4s
call-ci-main-pr-check-pipeline / Pre-compilation checks
call-ci-main-pr-check-pipeline  /  Generate a simple slug based on repo and date for use in any output artifacts
2s
call-ci-main-pr-check-pipeline / Generate a simple slug based on repo and date for use in any output artifacts
call-ci-main-pr-check-pipeline  /  Build and compilation
2s
call-ci-main-pr-check-pipeline / Build and compilation
call-ci-main-pr-check-pipeline  /  ...  /  Complexity and SLOC generation
21s
call-ci-main-pr-check-pipeline / Source code complexity checks / Complexity and SLOC generation
call-ci-main-pr-check-pipeline  /  Language-specific pre-compilation steps and linting
0s
call-ci-main-pr-check-pipeline / Language-specific pre-compilation steps and linting
call-ci-main-pr-check-pipeline  /  Language-agnostic pre-compilation steps
call-ci-main-pr-check-pipeline / Language-agnostic pre-compilation steps
call-ci-main-pr-check-pipeline  /  ...  /  Trufflehog
34s
call-ci-main-pr-check-pipeline / Trufflehog scan / Trufflehog
call-ci-main-pr-check-pipeline  /  BlackDuck-Polaris-SAST
0s
call-ci-main-pr-check-pipeline / BlackDuck-Polaris-SAST
call-ci-main-pr-check-pipeline  /  Creating packaged binaries
call-ci-main-pr-check-pipeline / Creating packaged binaries
call-ci-main-pr-check-pipeline  /  ...  /  Export SBOM from GitHub Dependency Graph API
9s
call-ci-main-pr-check-pipeline / Generating SBOM / Export SBOM from GitHub Dependency Graph API
call-ci-main-pr-check-pipeline  /  ...  /  Generate SBOM using Blackduck Tool (BLUE)
1m 6s
call-ci-main-pr-check-pipeline / Generating SBOM / Generate SBOM using Blackduck Tool (BLUE)
call-ci-main-pr-check-pipeline  /  ...  /  Generate MSFT SBOM
0s
call-ci-main-pr-check-pipeline / Generating SBOM / Generate MSFT SBOM
call-ci-main-pr-check-pipeline  /  ...  /  license_scout
0s
call-ci-main-pr-check-pipeline / Generating SBOM / license_scout
call-ci-main-pr-check-pipeline  /  Detect SBOM version for application
call-ci-main-pr-check-pipeline / Detect SBOM version for application
call-ci-main-pr-check-pipeline  /  PRIVATE Sonar scan (inline)
call-ci-main-pr-check-pipeline / PRIVATE Sonar scan (inline)
call-ci-main-pr-check-pipeline  /  ...  /  Checkout code
call-ci-main-pr-check-pipeline / INTERNAL Sonar scan / Checkout code
call-ci-main-pr-check-pipeline  /  ...  /  SonarQube
call-ci-main-pr-check-pipeline / INTERNAL Sonar scan / SonarQube
call-ci-main-pr-check-pipeline  /  ...  /  build
call-ci-main-pr-check-pipeline / INTERNAL Sonar scan / build
call-ci-main-pr-check-pipeline  /  ...  /  unit-tests
call-ci-main-pr-check-pipeline / INTERNAL Sonar scan / unit-tests
call-ci-main-pr-check-pipeline  /  ...  /  SonarQube
call-ci-main-pr-check-pipeline / PUBLIC Sonar SAST scan / SonarQube
Matrix: call-ci-main-pr-check-pipeline / Unit tests
call-ci-main-pr-check-pipeline  /  Creating Habitat packages
0s
call-ci-main-pr-check-pipeline / Creating Habitat packages
call-ci-main-pr-check-pipeline  /  ...  /  irfan
call-ci-main-pr-check-pipeline / Reporting to quality dashboard / irfan
call-ci-main-pr-check-pipeline  /  Publishing packages
0s
call-ci-main-pr-check-pipeline / Publishing packages
Fit to window
Zoom out
Zoom in

Annotations

3 warnings
call-ci-main-pr-check-pipeline / Generating SBOM / Export SBOM from GitHub Dependency Graph API
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/upload-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
call-ci-main-pr-check-pipeline / Source code complexity checks / Complexity and SLOC generation
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/upload-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
call-ci-main-pr-check-pipeline / Generating SBOM / Generate SBOM using Blackduck Tool (BLUE)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: blackduck-inc/black-duck-security-scan@v2.6.0. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
habitat-sh-habitat-20260410160534-GitHub-sbom.json
40.2 KB
sha256:11e2901677b8ba5a8681a8c0d083582bcc766a1e0348f5649c21156fbeaf1397
habitat-sh-habitat-main-2.0.345-20260410160534-GitHub-sbom.csv
13.9 KB
sha256:8abdf20657c032515e388cceaa5aefc4517c2f706b7219d70bf886072e4d9347
habitat-sh-habitat-main-20260410160543-scc-complexity.html
24.7 KB
sha256:1770455f0b2a7bcad910f302747c5b5f5e95c038a058dd9409cb6032b75bb307
habitat-sh-habitat-main-20260410160543-scc-complexity.json
31.7 KB
sha256:9cdee18161715aeb94f9c98c7cd8446890faf97f7b3e5ed0bf07c97cbc69822b
habitat-sh-habitat-main-20260410160543-scc-complexity.txt
1.13 KB
sha256:2bd643cc25376ea54f2e309b5bd0cc0c6db188549ebfb6beeb08c58f52448d02