ci: add ssh-hardening job running DevSec ssh-baseline #3732
image-pr.yaml
on: pull_request
Matrix: build
Matrix: core-tests
Matrix: standard-tests
Annotations
8 errors and 3 warnings
|
standard-tests (hadron, amd64, generic) encryption-local / encryption-local
Error response from daemon: Get "https://quay.io/v2/": context deadline exceeded
|
|
core-tests (hadron, amd64, generic) ssh-hardening / ssh-hardening
Process completed with exit code 1.
|
|
core-tests (hadron, amd64, generic) bundles / bundles
honour SSH_PORT env for pinning the host port when set (fall back to random allocation otherwise).\r\n- .github/workflows/reusable-qemu-test.yaml: install cinc-auditor and pin SSH_PORT=22222 when inputs.test == ssh-hardening.\r\n- .github/workflows/image-pr.yaml: add ssh-hardening to the core-tests matrix.\r\n\r\n<!-- please add an icon to the title of this PR (see https://github.com/kairos-io/kairos/blob/master/CONTRIBUTING.md#step-5-push-your-feature-branch-to-your-fork), and delete this line and similar ones -->\r\n\r\n**What this PR does / why we need it**:\r\n\r\n**Which issue(s) this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when PR gets merged)*:\r\nFixes #\r\n",
|
|
core-tests (hadron, amd64, generic) bundles / bundles
honour SSH_PORT env for pinning the host port when set (fall back to random allocation otherwise).\r\n- .github/workflows/reusable-qemu-test.yaml: install cinc-auditor and pin SSH_PORT=22222 when inputs.test == ssh-hardening.\r\n- .github/workflows/image-pr.yaml: add ssh-hardening to the core-tests matrix.\r\n\r\n\u003c!-- please add an icon to the title of this PR (see https://github.com/kairos-io/kairos/blob/master/CONTRIBUTING.md#step-5-push-your-feature-branch-to-your-fork), and delete this line and similar ones --\u003e\r\n\r\n**What this PR does / why we need it**:\r\n\r\n**Which issue(s) this PR fixes** *(optional, in `fixes #\u003cissue number\u003e(, fixes #\u003cissue_number\u003e, ...)` format, will close the issue(s) when PR gets merged)*:\r\nFixes #\r\n","changed_files":4,"closed_at":null,"comments":0,"comments_url":"https://api.github.com/repos/kairos-io/kairos/issues/4306/comments","commits":1,"commits_url":"https://api.github.com/repos/kairos-io/kairos/pulls/4306/commits","created_at":"2026-08-12T14:38:20Z","deletions":2,"diff_url":"https://github.com/kairos-io/kairos/pull/4306.diff","draft":true,"head":{"label":"kairos-io:feat/ssh-hardening-ci","ref":"feat/ssh-hardening-ci","repo":{"allow_auto_merge":true,"allow_forking":true,"allow_merge_commit":true,"allow_rebase_merge":true,"allow_squash_merge":true,"allow_update_branch":true,"archive_url":"https://api.github.com/repos/kairos-io/kairos/{archive_format}{/ref}","archived":false,"assignees_url":"https://api.github.com/repos/kairos-io/kairos/assignees{/user}","blobs_url":"https://api.github.com/repos/kairos-io/kairos/git/blobs{/sha}","branches_url":"https://api.github.com/repos/kairos-io/kairos/branches{/branch}","clone_url":"https://github.com/kairos-io/kairos.git","collaborators_url":"https://api.github.com/repos/kairos-io/kairos/collaborators{/collaborator}","comments_url":"https://api.github.com/repos/kairos-io/kairos/comments{/number}","commits_url":"https://api.github.com/repos/kairos-io/kairos/commits{/sha}","compare_url":"https://api.github.com/repos/kairos-io/kairos/compare/{base}...{head}","contents_url":"https://api.github.com/repos/kairos-io/kairos/contents/{+path}","contributors_url":"https://api.github.com/repos/kairos-io/kairos/contributors","created_at":"2021-07-30T16:24:54Z","default_branch":"master","delete_branch_on_merge":true,"deployments_url":"https://api.github.com/repos/kairos-io/kairos/deployments","description":"The immutable Linux meta-distribution for edge Kubernetes.","disabled":false,"downloads_url":"https://api.github.com/repos/kairos-io/kairos/downloads","events_url":"https://api.github.com/repos/kairos-io/kairos/events","fork":false,"forks":136,"forks_count":136,"forks_url":"https://api.github.com/repos/kairos-io/kairos/forks","full_name":"kairos-io/kairos","git_commits_url":"https://api.github.com/repos/kairos-io/kairos/git/commits{/sha}","git_refs_url":"https://api.github.com/repos/kairos-io/kairos/git/refs{/sha}","git_tags_url":"https://api.github.com/repos/kairos-io/kairos/git/tags{/sha}","git_url":"git://github.com/kairos-io/kairos.git","has_discussions":true,"has_downloads":false,"has_issues":true,"has_pages":false,"has_projects":true,"has_pull_requests":true,"has_wiki":true,"homepage":"https://kairos.io","hooks_url":"https://api.github.com/repos/kairos-io/kairos/hooks","html_url":"https://github.com/kairos-io/kairos","id":391127422,"is_template":false,"issue_comment_url":"https://api.github.com/repos/kairos-io/kairos/issues/comments{/number}","issue_events_url":"https://api.github.com/repos/kairos-io/kairos/issues/events{/number}","issues_url":"https://api.github.com/repos/kairos-io/kairos/issues{/number}","keys_url":"https://api.github.com/repos/kairos-io/kairos/keys{/key_id}","labels_url":"https://api.github.com/repos/kairos-io/kairos/labels{/name}","language":"Go","languages_url":"https://api.github.com/repos/kairos-io/kairos/languages","license":{"key":"apache-2.0","name":"Apache License 2.0","node_id":"MDc6TGljZW5zZTI=","spdx_id":"Apache-2.0","url":"https://api.github.com/licenses/apache-2.0"},"merge_commit_mes
|
|
core-tests (hadron, amd64, generic) acceptance / acceptance
honour SSH_PORT env for pinning the host port when set (fall back to random allocation otherwise).\r\n- .github/workflows/reusable-qemu-test.yaml: install cinc-auditor and pin SSH_PORT=22222 when inputs.test == ssh-hardening.\r\n- .github/workflows/image-pr.yaml: add ssh-hardening to the core-tests matrix.\r\n\r\n\u003c!-- please add an icon to the title of this PR (see https://github.com/kairos-io/kairos/blob/master/CONTRIBUTING.md#step-5-push-your-feature-branch-to-your-fork), and delete this line and similar ones --\u003e\r\n\r\n**What this PR does / why we need it**:\r\n\r\n**Which issue(s) this PR fixes** *(optional, in `fixes #\u003cissue number\u003e(, fixes #\u003cissue_number\u003e, ...)` format, will close the issue(s) when PR gets merged)*:\r\nFixes #\r\n","changed_files":4,"closed_at":null,"comments":0,"comments_url":"https://api.github.com/repos/kairos-io/kairos/issues/4306/comments","commits":1,"commits_url":"https://api.github.com/repos/kairos-io/kairos/pulls/4306/commits","created_at":"2026-08-12T14:38:20Z","deletions":2,"diff_url":"https://github.com/kairos-io/kairos/pull/4306.diff","draft":true,"head":{"label":"kairos-io:feat/ssh-hardening-ci","ref":"feat/ssh-hardening-ci","repo":{"allow_auto_merge":true,"allow_forking":true,"allow_merge_commit":true,"allow_rebase_merge":true,"allow_squash_merge":true,"allow_update_branch":true,"archive_url":"https://api.github.com/repos/kairos-io/kairos/{archive_format}{/ref}","archived":false,"assignees_url":"https://api.github.com/repos/kairos-io/kairos/assignees{/user}","blobs_url":"https://api.github.com/repos/kairos-io/kairos/git/blobs{/sha}","branches_url":"https://api.github.com/repos/kairos-io/kairos/branches{/branch}","clone_url":"https://github.com/kairos-io/kairos.git","collaborators_url":"https://api.github.com/repos/kairos-io/kairos/collaborators{/collaborator}","comments_url":"https://api.github.com/repos/kairos-io/kairos/comments{/number}","commits_url":"https://api.github.com/repos/kairos-io/kairos/commits{/sha}","compare_url":"https://api.github.com/repos/kairos-io/kairos/compare/{base}...{head}","contents_url":"https://api.github.com/repos/kairos-io/kairos/contents/{+path}","contributors_url":"https://api.github.com/repos/kairos-io/kairos/contributors","created_at":"2021-07-30T16:24:54Z","default_branch":"master","delete_branch_on_merge":true,"deployments_url":"https://api.github.com/repos/kairos-io/kairos/deployments","description":"The immutable Linux meta-distribution for edge Kubernetes.","disabled":false,"downloads_url":"https://api.github.com/repos/kairos-io/kairos/downloads","events_url":"https://api.github.com/repos/kairos-io/kairos/events","fork":false,"forks":136,"forks_count":136,"forks_url":"https://api.github.com/repos/kairos-io/kairos/forks","full_name":"kairos-io/kairos","git_commits_url":"https://api.github.com/repos/kairos-io/kairos/git/commits{/sha}","git_refs_url":"https://api.github.com/repos/kairos-io/kairos/git/refs{/sha}","git_tags_url":"https://api.github.com/repos/kairos-io/kairos/git/tags{/sha}","git_url":"git://github.com/kairos-io/kairos.git","has_discussions":true,"has_downloads":false,"has_issues":true,"has_pages":false,"has_projects":true,"has_pull_requests":true,"has_wiki":true,"homepage":"https://kairos.io","hooks_url":"https://api.github.com/repos/kairos-io/kairos/hooks","html_url":"https://github.com/kairos-io/kairos","id":391127422,"is_template":false,"issue_comment_url":"https://api.github.com/repos/kairos-io/kairos/issues/comments{/number}","issue_events_url":"https://api.github.com/repos/kairos-io/kairos/issues/events{/number}","issues_url":"https://api.github.com/repos/kairos-io/kairos/issues{/number}","keys_url":"https://api.github.com/repos/kairos-io/kairos/keys{/key_id}","labels_url":"https://api.github.com/repos/kairos-io/kairos/labels{/name}","language":"Go","languages_url":"https://api.github.com/repos/kairos-io/kairos/languages","license":{"key":"apache-2.0","name":"Apache License 2.0","node_id":"MDc6TGljZW5zZTI=","spdx_id":"Apache-2.0","url":"https://api.github.com/licenses/apache-2.0"},"merge_commit_mes
|
|
standard-tests (hadron, amd64, generic) encryption-remote-https-bad-cert / encryption-remote-https-bad-cert
honour SSH_PORT env for pinning the host port when set (fall back to random allocation otherwise).\r\n- .github/workflows/reusable-qemu-test.yaml: install cinc-auditor and pin SSH_PORT=22222 when inputs.test == ssh-hardening.\r\n- .github/workflows/image-pr.yaml: add ssh-hardening to the core-tests matrix.\r\n\r\n\u003c!-- please add an icon to the title of this PR (see https://github.com/kairos-io/kairos/blob/master/CONTRIBUTING.md#step-5-push-your-feature-branch-to-your-fork), and delete this line and similar ones --\u003e\r\n\r\n**What this PR does / why we need it**:\r\n\r\n**Which issue(s) this PR fixes** *(optional, in `fixes #\u003cissue number\u003e(, fixes #\u003cissue_number\u003e, ...)` format, will close the issue(s) when PR gets merged)*:\r\nFixes #\r\n","changed_files":4,"closed_at":null,"comments":0,"comments_url":"https://api.github.com/repos/kairos-io/kairos/issues/4306/comments","commits":1,"commits_url":"https://api.github.com/repos/kairos-io/kairos/pulls/4306/commits","created_at":"2026-08-12T14:38:20Z","deletions":2,"diff_url":"https://github.com/kairos-io/kairos/pull/4306.diff","draft":true,"head":{"label":"kairos-io:feat/ssh-hardening-ci","ref":"feat/ssh-hardening-ci","repo":{"allow_auto_merge":true,"allow_forking":true,"allow_merge_commit":true,"allow_rebase_merge":true,"allow_squash_merge":true,"allow_update_branch":true,"archive_url":"https://api.github.com/repos/kairos-io/kairos/{archive_format}{/ref}","archived":false,"assignees_url":"https://api.github.com/repos/kairos-io/kairos/assignees{/user}","blobs_url":"https://api.github.com/repos/kairos-io/kairos/git/blobs{/sha}","branches_url":"https://api.github.com/repos/kairos-io/kairos/branches{/branch}","clone_url":"https://github.com/kairos-io/kairos.git","collaborators_url":"https://api.github.com/repos/kairos-io/kairos/collaborators{/collaborator}","comments_url":"https://api.github.com/repos/kairos-io/kairos/comments{/number}","commits_url":"https://api.github.com/repos/kairos-io/kairos/commits{/sha}","compare_url":"https://api.github.com/repos/kairos-io/kairos/compare/{base}...{head}","contents_url":"https://api.github.com/repos/kairos-io/kairos/contents/{+path}","contributors_url":"https://api.github.com/repos/kairos-io/kairos/contributors","created_at":"2021-07-30T16:24:54Z","default_branch":"master","delete_branch_on_merge":true,"deployments_url":"https://api.github.com/repos/kairos-io/kairos/deployments","description":"The immutable Linux meta-distribution for edge Kubernetes.","disabled":false,"downloads_url":"https://api.github.com/repos/kairos-io/kairos/downloads","events_url":"https://api.github.com/repos/kairos-io/kairos/events","fork":false,"forks":136,"forks_count":136,"forks_url":"https://api.github.com/repos/kairos-io/kairos/forks","full_name":"kairos-io/kairos","git_commits_url":"https://api.github.com/repos/kairos-io/kairos/git/commits{/sha}","git_refs_url":"https://api.github.com/repos/kairos-io/kairos/git/refs{/sha}","git_tags_url":"https://api.github.com/repos/kairos-io/kairos/git/tags{/sha}","git_url":"git://github.com/kairos-io/kairos.git","has_discussions":true,"has_downloads":false,"has_issues":true,"has_pages":false,"has_projects":true,"has_pull_requests":true,"has_wiki":true,"homepage":"https://kairos.io","hooks_url":"https://api.github.com/repos/kairos-io/kairos/hooks","html_url":"https://github.com/kairos-io/kairos","id":391127422,"is_template":false,"issue_comment_url":"https://api.github.com/repos/kairos-io/kairos/issues/comments{/number}","issue_events_url":"https://api.github.com/repos/kairos-io/kairos/issues/events{/number}","issues_url":"https://api.github.com/repos/kairos-io/kairos/issues{/number}","keys_url":"https://api.github.com/repos/kairos-io/kairos/keys{/key_id}","labels_url":"https://api.github.com/repos/kairos-io/kairos/labels{/name}","language":"Go","languages_url":"https://api.github.com/repos/kairos-io/kairos/languages","license":{"key":"apache-2.0","name":"Apache License 2.0","node_id":"MDc6TGljZW5zZTI=","spdx_id":"Apache-2.0","url":"https://api.github.com/licenses/apache-2.0"},"merge_commit_mes
|
|
core-tests (hadron, amd64, generic) install / install
honour SSH_PORT env for pinning the host port when set (fall back to random allocation otherwise).\r\n- .github/workflows/reusable-qemu-test.yaml: install cinc-auditor and pin SSH_PORT=22222 when inputs.test == ssh-hardening.\r\n- .github/workflows/image-pr.yaml: add ssh-hardening to the core-tests matrix.\r\n\r\n\u003c!-- please add an icon to the title of this PR (see https://github.com/kairos-io/kairos/blob/master/CONTRIBUTING.md#step-5-push-your-feature-branch-to-your-fork), and delete this line and similar ones --\u003e\r\n\r\n**What this PR does / why we need it**:\r\n\r\n**Which issue(s) this PR fixes** *(optional, in `fixes #\u003cissue number\u003e(, fixes #\u003cissue_number\u003e, ...)` format, will close the issue(s) when PR gets merged)*:\r\nFixes #\r\n","changed_files":4,"closed_at":null,"comments":0,"comments_url":"https://api.github.com/repos/kairos-io/kairos/issues/4306/comments","commits":1,"commits_url":"https://api.github.com/repos/kairos-io/kairos/pulls/4306/commits","created_at":"2026-08-12T14:38:20Z","deletions":2,"diff_url":"https://github.com/kairos-io/kairos/pull/4306.diff","draft":true,"head":{"label":"kairos-io:feat/ssh-hardening-ci","ref":"feat/ssh-hardening-ci","repo":{"allow_auto_merge":true,"allow_forking":true,"allow_merge_commit":true,"allow_rebase_merge":true,"allow_squash_merge":true,"allow_update_branch":true,"archive_url":"https://api.github.com/repos/kairos-io/kairos/{archive_format}{/ref}","archived":false,"assignees_url":"https://api.github.com/repos/kairos-io/kairos/assignees{/user}","blobs_url":"https://api.github.com/repos/kairos-io/kairos/git/blobs{/sha}","branches_url":"https://api.github.com/repos/kairos-io/kairos/branches{/branch}","clone_url":"https://github.com/kairos-io/kairos.git","collaborators_url":"https://api.github.com/repos/kairos-io/kairos/collaborators{/collaborator}","comments_url":"https://api.github.com/repos/kairos-io/kairos/comments{/number}","commits_url":"https://api.github.com/repos/kairos-io/kairos/commits{/sha}","compare_url":"https://api.github.com/repos/kairos-io/kairos/compare/{base}...{head}","contents_url":"https://api.github.com/repos/kairos-io/kairos/contents/{+path}","contributors_url":"https://api.github.com/repos/kairos-io/kairos/contributors","created_at":"2021-07-30T16:24:54Z","default_branch":"master","delete_branch_on_merge":true,"deployments_url":"https://api.github.com/repos/kairos-io/kairos/deployments","description":"The immutable Linux meta-distribution for edge Kubernetes.","disabled":false,"downloads_url":"https://api.github.com/repos/kairos-io/kairos/downloads","events_url":"https://api.github.com/repos/kairos-io/kairos/events","fork":false,"forks":136,"forks_count":136,"forks_url":"https://api.github.com/repos/kairos-io/kairos/forks","full_name":"kairos-io/kairos","git_commits_url":"https://api.github.com/repos/kairos-io/kairos/git/commits{/sha}","git_refs_url":"https://api.github.com/repos/kairos-io/kairos/git/refs{/sha}","git_tags_url":"https://api.github.com/repos/kairos-io/kairos/git/tags{/sha}","git_url":"git://github.com/kairos-io/kairos.git","has_discussions":true,"has_downloads":false,"has_issues":true,"has_pages":false,"has_projects":true,"has_pull_requests":true,"has_wiki":true,"homepage":"https://kairos.io","hooks_url":"https://api.github.com/repos/kairos-io/kairos/hooks","html_url":"https://github.com/kairos-io/kairos","id":391127422,"is_template":false,"issue_comment_url":"https://api.github.com/repos/kairos-io/kairos/issues/comments{/number}","issue_events_url":"https://api.github.com/repos/kairos-io/kairos/issues/events{/number}","issues_url":"https://api.github.com/repos/kairos-io/kairos/issues{/number}","keys_url":"https://api.github.com/repos/kairos-io/kairos/keys{/key_id}","labels_url":"https://api.github.com/repos/kairos-io/kairos/labels{/name}","language":"Go","languages_url":"https://api.github.com/repos/kairos-io/kairos/languages","license":{"key":"apache-2.0","name":"Apache License 2.0","node_id":"MDc6TGljZW5zZTI=","spdx_id":"Apache-2.0","url":"https://api.github.com/licenses/apache-2.0"},"merge_commit_mes
|
|
core-tests (hadron, amd64, generic) reset / reset
Process completed with exit code 1.
|
|
hadron / core-amd64-generic
Failed minimum severity level. Found vulnerabilities with level 'critical' or higher
|
|
hadron / standard-amd64-generic-k3s
Failed minimum severity level. Found vulnerabilities with level 'critical' or higher
|
|
standard-tests (hadron, amd64, generic) encryption-local / encryption-local
No files were found with the provided path: tests/**/logs/*. No artifacts will be uploaded.
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
hadron-v0.5.1-core-reset.logs.zip
|
234 KB |
sha256:67abc02d6b15230974b77e5891d21f040bfce404097d1e32573c5c2a09f1150f
|
|
|
hadron-v0.5.1-core-ssh-hardening.logs.zip
|
27.6 KB |
sha256:54a41239db4847ff530499285e2f386543213d2e3a742a83ad720b0c5378fce5
|
|
|
kairos-hadron-v0.5.1-core-amd64-generic.iso.zip
|
292 MB |
sha256:26643ba0535b7cc821bd58b87ba85126a6405c3094b4c573a5bbb8ce5705c1b5
|
|
|
kairos-hadron-v0.5.1-standard-amd64-generic.iso.zip
|
388 MB |
sha256:681a726190fb6aa216b9e805d57e4369b923a7f7e4e010235aaf697dfd88cdea
|
|
|
kairos-io~kairos~1VVYW9.dockerbuild
|
42.1 KB |
sha256:5c265d346bca88ca4dd7d5d5158e2dd58090a3b75b433f0b8ced2bef93be7928
|
|
|
kairos-io~kairos~IN2MQB.dockerbuild
|
34.6 KB |
sha256:4bd4fd7610a311c35f0bd1a7d0b85ec2d2f73403866b173be39895ed135aa1e2
|
|
|
kairos-io~kairos~JVQTCN.dockerbuild
|
47.7 KB |
sha256:e69817b2af63cfc70f6a3d0cbc64af5ea818340bf0ff778a8fa3234aa4a3fd6c
|
|
|
kairos-io~kairos~VCVV6R.dockerbuild
|
33.7 KB |
sha256:dad23ec8165893d6d96a9d86d947447964a209f6e48585c62349269b131c780b
|
|
|
kairos-io~kairos~W36PIR.dockerbuild
|
46.4 KB |
sha256:8e60f6124fc5d00e56c0c025f12cc4449a53bbd2e079a56122cc1dd3f0d5a6a3
|
|