Skip to content

.github: run cvewatch after build#5729

Merged
rene merged 1 commit intolf-edge:masterfrom
christoph-zededa:run_cvewatch_later
Apr 1, 2026
Merged

.github: run cvewatch after build#5729
rene merged 1 commit intolf-edge:masterfrom
christoph-zededa:run_cvewatch_later

Conversation

@christoph-zededa
Copy link
Copy Markdown
Contributor

@christoph-zededa christoph-zededa commented Apr 1, 2026

Description

This way cvewatch does not have to build all pkgs in parallel to the actual build process and does not
need to download all the sources, too.

Hopefully this helps to fix the http teapot status issues like:

Error: error building "lfedge/eve-cross-compilers:b3d1dc377b3f1161eec194219c34fb1a167d28e9": error building for arch amd64: failed to solve: failed to load cache key: invalid response status 418
2026/03/24 02:17:07 error during command execution: error building "lfedge/eve-cross-compilers:b3d1dc377b3f1161eec194219c34fb1a167d28e9": error building for arch amd64: failed to solve: failed to load cache key: invalid response status 418

How to test and validate this PR

Run the cvewatch github action and check that it uses the docker cache for everything.

Changelog notes

CI improvements

PR Backports

For all current LTS branches, please state explicitly if this PR should be
backported or not. This section is used by our scripts to track the backports,
so, please, do not omit it.

Here is the list of current LTS branches (it should be always up to date):

  • 16.0-stable: no, as there is no cve scan for this version
  • 14.5-stable: no
  • 13.4-stable: no

Checklist

  • I've provided a proper description
  • I've added the proper documentation
  • I've tested my PR on amd64 device
  • I've tested my PR on arm64 device
  • I've written the test verification instructions
  • I've set the proper labels to this PR

And the last but not least:

  • I've checked the boxes above, or I've provided a good reason why I didn't
    check them.

Please, check the boxes above after submitting the PR in interactive mode.

This way cvewatch does not have to build all pkgs in
parallel to the actual build process and does not
need to download all the sources, too.

Hopefully this helps to fix the http teapot status issues like:
```
Error: error building "lfedge/eve-cross-compilers:b3d1dc377b3f1161eec194219c34fb1a167d28e9": error building for arch amd64: failed to solve: failed to load cache key: invalid response status 418
2026/03/24 02:17:07 error during command execution: error building "lfedge/eve-cross-compilers:b3d1dc377b3f1161eec194219c34fb1a167d28e9": error building for arch amd64: failed to solve: failed to load cache key: invalid response status 418
```

Signed-off-by: Christoph Ostarek <christoph@zededa.com>
@christoph-zededa christoph-zededa marked this pull request as ready for review April 1, 2026 13:17
@christoph-zededa christoph-zededa mentioned this pull request Apr 1, 2026
7 tasks
Copy link
Copy Markdown
Member

@shjala shjala left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the PR, let's test it.

LGTM.

@rene rene merged commit 322395d into lf-edge:master Apr 1, 2026
16 of 17 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants