Skip to content

ci: re-enable trivy vulnerability scanning with SHA-pinned action #160

ci: re-enable trivy vulnerability scanning with SHA-pinned action

ci: re-enable trivy vulnerability scanning with SHA-pinned action #160

Triggered via pull request April 27, 2026 03:59
Status Failure
Total duration 3m 47s
Artifacts 5

deploy-stage.yaml

on: pull_request
Matrix: build the CLI binaries
build-and-push-image
29s
build-and-push-image
release to GitHub
0s
release to GitHub
Create CLI Plugin Index PR
0s
Create CLI Plugin Index PR
Create NDC-Hub PR
0s
Create NDC-Hub PR
Fit to window
Zoom out
Zoom in

Annotations

1 error and 6 warnings
build-and-push-image
buildx failed with: ERROR: failed to build: failed to solve: process "/bin/sh -c cargo install cargo-chef" did not complete successfully: exit code: 101
build-and-push-image
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, docker/build-push-action@v5, docker/login-action@v3, docker/metadata-action@v5. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
build the CLI binaries (ubuntu-latest, aarch64-unknown-linux-musl, -C target-feature=+crt-static,...
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/upload-artifact@v4, arduino/setup-protoc@v3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
build the CLI binaries (ubuntu-latest, x86_64-unknown-linux-musl, -C target-feature=+crt-static, ...
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/upload-artifact@v4, arduino/setup-protoc@v3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
build the CLI binaries (macos-latest, x86_64-apple-darwin)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/upload-artifact@v4, arduino/setup-protoc@v3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
build the CLI binaries (macos-latest, aarch64-apple-darwin)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/upload-artifact@v4, arduino/setup-protoc@v3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
build the CLI binaries (windows-latest, x86_64-pc-windows-msvc, -C target-feature=+crt-static, .exe)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/upload-artifact@v4, arduino/setup-protoc@v3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
ndc-clickhouse-cli-aarch64-apple-darwin
2.49 MB
sha256:c74c0b8221cb9e0a4c75dd35be6a1b0616519f457749f77a640e4796bcce86ef
ndc-clickhouse-cli-aarch64-unknown-linux-musl
2.75 MB
sha256:0d1ecc86f58d4da8b5a6e9eae3f81bbc84f6fa57d5b343761e42de56455c167d
ndc-clickhouse-cli-x86_64-apple-darwin
2.58 MB
sha256:620548731c922b8399e30490ac01afa794dda13f8c5a34a1ae8a3b89da07f198
ndc-clickhouse-cli-x86_64-pc-windows-msvc.exe
2.34 MB
sha256:3c8fd7f468f8f86bf2b8ca57b2a2e697cb5e28e94fec2bab14d8eab7b2e8e309
ndc-clickhouse-cli-x86_64-unknown-linux-musl
2.82 MB
sha256:6fcec884275f06922f58eff98b1b30cda380f5f757cf3e0da212a1d750c91064