Skip to content

zarf/0.67.0-r0: cve remediation #75150

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
octo-sts wants to merge 1 commit into from

zarf/0.67.0-r0: fix GHSA-4qg8-fj49-pxjh

16df979
Select commit
Loading
Failed to load commit list.
Closed

zarf/0.67.0-r0: cve remediation #75150

zarf/0.67.0-r0: fix GHSA-4qg8-fj49-pxjh
16df979
Select commit
Loading
Failed to load commit list.
Chainguard Internal / elastic-build failed Dec 8, 2025 in 2m 31s

Failed to build APKs

Build ID: 7775efab-1ad4-404a-9066-4ed3976731f5
Error: failed to build zarf: building group: pod failed: build failed
did not test because building group: pod failed: build failed

Details

builds

x86_64 Logs

Click to expand 
resubmit/93b6f3f5f398066fdb1ae84811408acfba91854f --repository-append=https://apk.cgr.dev/wolfi-presubmit/93b6f3f5f398066fdb1ae84811408acfba91854f --git-repo-url=https://github.com/wolfi-dev/os]
melange version  with runner qemu building [zarf.yaml] at commit  for arches [amd64]
melange v0.34.3 with runner qemu is building:
populating workspace /tmp/melange-workspace-3655638098 from zarf
image configuration:
  contents:
    build repositories: [https://apk.cgr.dev/chainguard https://apk.cgr.dev/wolfi-presubmit/93b6f3f5f398066fdb1ae84811408acfba91854f]
    runtime repositories: []
    repositories: []
    keyring:      []
    packages:     [bash=5.3-r3 binutils=2.45.1-r2 build-base=1-r9 busybox=1.37.0-r50 c-ares=1.34.5-r3 ca-certificates-bundle=20251003-r0 cyrus-sasl=2.1.28-r45 gcc=15.2.0-r6 gdbm=1.26-r1 git=2.52.0-r0 glibc-dev=2.42-r4 glibc-locale-posix=2.42-r4 glibc=2.42-r4 gmp=6.3.0-r8 go-1.25=1.25.5-r0 gobump=0.9.3-r3 heimdal-libs=7.8.0-r42 icu78-data-full=78.1-r0 isl=0.27-r4 keyutils-libs=1.6.3-r37 krb5-conf=1.0-r7 krb5-libs=1.22.1-r1 ld-linux=2.42-r4 libatomic=15.2.0-r6 libbrotlicommon1=1.2.0-r1 libbrotlidec1=1.2.0-r1 libbrotlienc1=1.2.0-r1 libcom_err=1.47.3-r1 libcrypt1=2.42-r4 libcrypto3=3.6.0-r4 libcurl-openssl4=8.17.0-r0 libexpat1=2.7.3-r0 libgcc=15.2.0-r6 libgomp=15.2.0-r6 libicu78=78.1-r0 libidn2=2.3.8-r3 libldap-2.6=2.6.10-r7 libnghttp2-14=1.68.0-r0 libpcre2-8-0=10.47-r0 libpsl=0.21.5-r6 libquadmath=15.2.0-r6 libssl3=3.6.0-r4 libstdc++-dev=15.2.0-r6 libstdc++=15.2.0-r6 libunistring=1.4.1-r1 libuv=1.51.0-r2 libverto=0.3.2-r6 libxcrypt-dev=4.5.2-r0 libxcrypt=4.5.2-r0 libzstd1=1.5.7-r5 linux-headers=6.18-r0 make=4.4.1-r8 mpc=1.3.1-r7 mpfr=4.2.2-r2 ncurses-terminfo-base=6.5_p20251025-r1 ncurses=6.5_p20251025-r1 nghttp3=1.13.1-r0 nodejs-25=25.2.1-r0 nss-db=2.42-r4 nss-hesiod=2.42-r4 openssf-compiler-options=20250904-r2 pkgconf=2.5.1-r1 posix-cc-wrappers=2-r7 readline=8.3-r1 sqlite-libs=3.51.1-r0 wolfi-baselayout=20230201-r24 zlib=1.3.1-r51]
  accounts:
    runas:  
    users:
      - uid=1000(build) gid=1000
    groups:
      - gid=1000(build) members=[build]
auth configured for: 0x10434c0
installing wolfi-baselayout (20230201-r24)
installing ca-certificates-bundle (20251003-r0)
installing glibc-locale-posix (2.42-r4)
installing libgcc (15.2.0-r6)
installing glibc (2.42-r4)
installing ld-linux (2.42-r4)
installing ncurses-terminfo-base (6.5_p20251025-r1)
installing ncurses (6.5_p20251025-r1)
installing bash (5.3-r3)
installing libstdc++ (15.2.0-r6)
installing libzstd1 (1.5.7-r5)
installing binutils (2.45.1-r2)
installing libxcrypt (4.5.2-r0)
installing libxcrypt-dev (4.5.2-r0)
installing linux-headers (6.18-r0)
installing nss-db (2.42-r4)
installing nss-hesiod (2.42-r4)
installing glibc-dev (2.42-r4)
installing libquadmath (15.2.0-r6)
installing libstdc++-dev (15.2.0-r6)
installing openssf-compiler-options (20250904-r2)
installing posix-cc-wrappers (2-r7)
installing libatomic (15.2.0-r6)
installing gmp (6.3.0-r8)
installing libgomp (15.2.0-r6)
installing isl (0.27-r4)
installing mpfr (4.2.2-r2)
installing mpc (1.3.1-r7)
installing zlib (1.3.1-r51)
installing gcc (15.2.0-r6)
installing make (4.4.1-r8)
installing pkgconf (2.5.1-r1)
installing build-base (1-r9)
installing libcrypt1 (2.42-r4)
installing busybox (1.37.0-r50)
installing c-ares (1.34.5-r3)
installing libcrypto3 (3.6.0-r4)
installing gdbm (1.26-r1)
installing readline (8.3-r1)
installing sqlite-libs (3.51.1-r0)
installing heimdal-libs (7.8.0-r42)
installing cyrus-sasl (2.1.28-r45)
installing libbrotlicommon1 (1.2.0-r1)
installing libbrotlidec1 (1.2.0-r1)
installing krb5-conf (1.0-r7)
installing libcom_err (1.47.3-r1)
installing keyutils-libs (1.6.3-r37)
installing libssl3 (3.6.0-r4)
installing libverto (0.3.2-r6)
installing krb5-libs (1.22.1-r1)
installing libldap-2.6 (2.6.10-r7)
installing libnghttp2-14 (1.68.0-r0)
installing nghttp3 (1.13.1-r0)
installing libunistring (1.4.1-r1)
installing libidn2 (2.3.8-r3)
installing libpsl (0.21.5-r6)
installing libcurl-openssl4 (8.17.0-r0)
installing libexpat1 (2.7.3-r0)
installing libpcre2-8-0 (10.47-r0)
installing git (2.52.0-r0)
installing go-1.25 (1.25.5-r0)
installing gobump (0.9.3-r3)
installing icu78-data-full (78.1-r0)
installing libbrotlienc1 (1.2.0-r1)
installing libicu78 (78.1-r0)
installing libuv (1.51.0-r2)
installing nodejs-25 (25.2.1-r0)
qemu: generating ssh key pairs for ephemeral VM
qemu: generating SSH host key for VM
qemu: generating base initramfs
image configuration:
  contents:
    build repositories: [https://apk.cgr.dev/chainguard]
    runtime repositories: []
    repositories: []
    keyring:      []
    packages:     [microvm-init]
installing wolfi-baselayout (20230201-r24)
installing ca-certificates-bundle (20251003-r0)
installing libgcc (15.2.0-r6)
installing glibc-locale-posix (2.42-r4)
installing glibc (2.42-r4)
installing ld-linux (2.42-r4)
installing gnutar-rmt (1.35-r6)
installing gnutar (1.35-r6)
installing libattr1 (2.5.2-r54)
installing attr (2.5.2-r54)
installing zlib (1.3.1-r51)
installing libzstd1 (1.5.7-r5)
installing xz (5.8.1-r6)
installing libcrypto3 (3.6.0-r4)
installing kmod (34.2-r42)
installing libmnl (1.0.5-r6)
installing libbz2-1 (1.0.8-r21)
installing libelf (0.194-r0)
installing libbpf (1.6.2-r0)
installing libverto (0.3.2-r6)
installing krb5-conf (1.0-r7)
installing libcom_err (1.47.3-r1)
installing keyutils-libs (1.6.3-r37)
installing libssl3 (3.6.0-r4)
installing krb5-libs (1.22.1-r1)
installing libtirpc (1.3.7-r1)
installing libpcre2-8-0 (10.47-r0)
installing libsepol (3.9-r1)
installing libselinux (3.9-r1)
installing libnftnl (1.3.1-r0)
installing xtables (1.8.11-r29)
installing libcap (2.77-r0)
installing iproute2 (6.17.0-r2)
installing libstdc++ (15.2.0-r6)
installing inih (62-r1)
installing liburcu (0.15.5-r0)
installing libblkid (2.41.2-r2)
installing libuuid (2.41.2-r2)
installing xfsprogs-core (6.17.0-r2)
installing xfsprogs (6.17.0-r2)
installing libmount (2.41.2-r2)
installing mount (2.41.2-r2)
installing ncurses-terminfo-base (6.5_p20251025-r1)
installing ncurses (6.5_p20251025-r1)
installing setarch (2.41.2-r2)
installing libfdisk (2.41.2-r2)
installing sqlite-libs (3.51.1-r0)
installing util-linux (2.41.2-r2)
installing libsmartcols (2.41.2-r2)
installing util-linux-misc (2.41.2-r2)
installing libxcrypt (4.5.2-r0)
installing libcrypt1 (2.42-r4)
installing linux-pam (1.7.1-r3)
installing openssh-keygen (10.2_p1-r2)
installing openssh-server-config (10.2_p1-r2)
installing openssh-server (10.2_p1-r2)
installing busybox (1.37.0-r50)
installing microvm-init (0.0.1-r14)
qemu: starting VM
qemu: waiting for SSH
conn read: read tcp 127.0.0.1:56090->127.0.0.1:42139: i/o timeout
qemu: meta-data=/dev/vda               isize=512    agcount=8, agsize=1638400 blks
qemu:          =                       sectsz=4096  attr=2, projid32bit=1
qemu:          =                       crc=1        finobt=1, sparse=1, rmapbt=1
qemu:          =                       reflink=1    bigtime=1 inobtcount=1 nrext64=1
qemu:          =                       exchange=0   metadir=0
qemu: data     =                       bsize=4096   blocks=13107200, imaxpct=25
qemu:          =                       sunit=0      swidth=0 blks
qemu: naming   =version 2              bsize=4096   ascii-ci=0, ftype=1, parent=0
qemu: log      =internal log           bsize=4096   blocks=16384, version=2
qemu:          =                       sectsz=4096  sunit=1 blks, lazy-count=1
qemu: realtime =none                   extsz=4096   blocks=0, rtextents=0
qemu:          =                       rgcount=0    rgsize=0 extents
qemu:          =                       zoned=0      start=0 reserved=0
qemu: Discarding blocks...Done.
conn read: read tcp 127.0.0.1:56102->127.0.0.1:42139: i/o timeout
conn read: read tcp 127.0.0.1:56108->127.0.0.1:42139: i/o timeout
qemu: ssh-keygen: generating new host keys: RSA ECDSA 
qemu: Server listening on 0.0.0.0 port 2223.
qemu: Server listening on 0.0.0.0 port 22.
qemu: VM started successfully, SSH server is up
qemu: Connection closed by 10.0.2.2 port 37462
qemu: verifying VM host key against pre-provisioned key
qemu: Accepted publickey for root from 10.0.2.2 port 37474 ssh2: ECDSA SHA256:b67ZI9y0SgCy3i3qnQQUhj/9SWuqklebkNOn0mnhn34
qemu: VM host key successfully verified against pre-provisioned key
qemu: Connection closed by 10.0.2.2 port 37474
qemu: Accepted publickey for root from 10.0.2.2 port 37478 ssh2: ECDSA SHA256:b67ZI9y0SgCy3i3qnQQUhj/9SWuqklebkNOn0mnhn34
qemu: Accepted publickey for root from 10.0.2.2 port 51516 ssh2: ECDSA SHA256:b67ZI9y0SgCy3i3qnQQUhj/9SWuqklebkNOn0mnhn34
qemu: Accepted publickey for root from 10.0.2.2 port 37490 ssh2: ECDSA SHA256:b67ZI9y0SgCy3i3qnQQUhj/9SWuqklebkNOn0mnhn34
qemu: running kernel version: 6.16.10-r2-qemu-generic #Chainguard SMP PREEMPT_DYNAMIC Fri Oct  3 22:31:32 UTC 2025
qemu: setting up melange cachedir: ./melange-cache/
qemu: setting up local workspace
qemu: unmounting host workspace from guest
running step "git-checkout"
[git checkout] repo='https://github.com/zarf-dev/zarf' dest='.' depth='unset' branch='' tag='v0.67.0' expcommit='fe2731f24424a80e1c19d6293359eae2242c4c7c' recurse='false'
[git checkout] execute: git config --global --add safe.directory /tmp/tmp.rNPqqn
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git clone --quiet --origin=origin --config=user.name=Melange Build [email protected] --config=advice.detachedHead=false --branch=v0.67.0 --depth=1 https://github.com/zarf-dev/zarf /tmp/tmp.rNPqqn
warning: refs/tags/v0.67.0 0381f99ea36fab31c744ec6780fefe86654971f5 is not a commit!
[git checkout] execute: cd /tmp/tmp.rNPqqn
[git checkout] tar -c . | tar -C "/home/build" -x
[git checkout] execute: cd /home/build
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git fetch --quiet origin --depth=1 --no-tags +refs/tags/v0.67.0:refs/origin/tags/v0.67.0
[git checkout] execute: git checkout --quiet origin/tags/v0.67.0
[git checkout] tag v0.67.0 is fe2731f24424a80e1c19d6293359eae2242c4c7c
running step "go/bump"
2025/12/08 14:07:37 Local Go version: 1.25.5
2025/12/08 14:07:37 Running go mod tidy with go version '1.25.5' ...

aarch64 Logs

Click to expand 
e=1 inobtcount=1 nrext64=1
qemu:          =                       exchange=0   metadir=0
qemu: data     =                       bsize=4096   blocks=13107200, imaxpct=25
qemu:          =                       sunit=0      swidth=0 blks
qemu: naming   =version 2              bsize=4096   ascii-ci=0, ftype=1, parent=0
qemu: log      =internal log           bsize=4096   blocks=16384, version=2
qemu:          =                       sectsz=4096  sunit=1 blks, lazy-count=1
qemu: realtime =none                   extsz=4096   blocks=0, rtextents=0
qemu:          =                       rgcount=0    rgsize=0 extents
qemu:          =                       zoned=0      start=0 reserved=0
qemu: Discarding blocks...Done.
conn read: read tcp 127.0.0.1:56102->127.0.0.1:42139: i/o timeout
conn read: read tcp 127.0.0.1:56108->127.0.0.1:42139: i/o timeout
qemu: ssh-keygen: generating new host keys: RSA ECDSA 
qemu: Server listening on 0.0.0.0 port 2223.
qemu: Server listening on 0.0.0.0 port 22.
qemu: VM started successfully, SSH server is up
qemu: Connection closed by 10.0.2.2 port 37462
qemu: verifying VM host key against pre-provisioned key
qemu: Accepted publickey for root from 10.0.2.2 port 37474 ssh2: ECDSA SHA256:b67ZI9y0SgCy3i3qnQQUhj/9SWuqklebkNOn0mnhn34
qemu: VM host key successfully verified against pre-provisioned key
qemu: Connection closed by 10.0.2.2 port 37474
qemu: Accepted publickey for root from 10.0.2.2 port 37478 ssh2: ECDSA SHA256:b67ZI9y0SgCy3i3qnQQUhj/9SWuqklebkNOn0mnhn34
qemu: Accepted publickey for root from 10.0.2.2 port 51516 ssh2: ECDSA SHA256:b67ZI9y0SgCy3i3qnQQUhj/9SWuqklebkNOn0mnhn34
qemu: Accepted publickey for root from 10.0.2.2 port 37490 ssh2: ECDSA SHA256:b67ZI9y0SgCy3i3qnQQUhj/9SWuqklebkNOn0mnhn34
qemu: running kernel version: 6.16.10-r2-qemu-generic #Chainguard SMP PREEMPT_DYNAMIC Fri Oct  3 22:31:32 UTC 2025
qemu: setting up melange cachedir: ./melange-cache/
qemu: setting up local workspace
qemu: unmounting host workspace from guest
running step "git-checkout"
[git checkout] repo='https://github.com/zarf-dev/zarf' dest='.' depth='unset' branch='' tag='v0.67.0' expcommit='fe2731f24424a80e1c19d6293359eae2242c4c7c' recurse='false'
[git checkout] execute: git config --global --add safe.directory /tmp/tmp.rNPqqn
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git clone --quiet --origin=origin --config=user.name=Melange Build [email protected] --config=advice.detachedHead=false --branch=v0.67.0 --depth=1 https://github.com/zarf-dev/zarf /tmp/tmp.rNPqqn
warning: refs/tags/v0.67.0 0381f99ea36fab31c744ec6780fefe86654971f5 is not a commit!
[git checkout] execute: cd /tmp/tmp.rNPqqn
[git checkout] tar -c . | tar -C "/home/build" -x
[git checkout] execute: cd /home/build
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git fetch --quiet origin --depth=1 --no-tags +refs/tags/v0.67.0:refs/origin/tags/v0.67.0
[git checkout] execute: git checkout --quiet origin/tags/v0.67.0
[git checkout] tag v0.67.0 is fe2731f24424a80e1c19d6293359eae2242c4c7c
running step "go/bump"
2025/12/08 14:07:37 Local Go version: 1.25.5
2025/12/08 14:07:37 Running go mod tidy with go version '1.25.5' ...
parsed env
configuring puller identity "720909c9f5279097d847ad02a2f24ba8f59de36a/a49c7fedc33adf69"...
running command chainctl [auth login --audience apk.cgr.dev --identity 720909c9f5279097d847ad02a2f24ba8f59de36a/a49c7fedc33adf69]
Successfully exchanged token.
Valid! Id: 720909c9f5279097d847ad02a2f24ba8f59de36a/a49c7fedc33adf69
Updates are available for chainctl (current version: 0.2.181; latest: 0.2.183). To install, please run:
    $ chainctl update
command "chainctl" completed successfully
puller identity configured successfully
puller identity configured successfully
running build...
running command melange [build zarf.yaml --gcplog --source-dir zarf --arch aarch64 --arch=aarch64 --env-file=build-aarch64.env --namespace=wolfi --pipeline-dir=./pipelines --out-dir=./packages/ --runner=bubblewrap --repository-append=https://apk.cgr.dev/chainguard --repository-append=https://apk.cgr.dev/wolfi-presubmit/93b6f3f5f398066fdb1ae84811408acfba91854f --repository-append=https://apk.cgr.dev/wolfi-presubmit/93b6f3f5f398066fdb1ae84811408acfba91854f --git-repo-url=https://github.com/wolfi-dev/os]
melange version  with runner bubblewrap building [zarf.yaml] at commit  for arches [arm64]
melange v0.34.3 with runner bubblewrap is building:
populating workspace /tmp/melange-workspace-2478462092 from zarf
image configuration:
  contents:
    build repositories: [https://apk.cgr.dev/chainguard https://apk.cgr.dev/wolfi-presubmit/93b6f3f5f398066fdb1ae84811408acfba91854f]
    runtime repositories: []
    repositories: []
    keyring:      []
    packages:     [bash=5.3-r3 binutils=2.45.1-r2 build-base=1-r9 busybox=1.37.0-r50 c-ares=1.34.5-r3 ca-certificates-bundle=20251003-r0 cyrus-sasl=2.1.28-r45 gcc=15.2.0-r6 gdbm=1.26-r1 git=2.52.0-r0 glibc-dev=2.42-r4 glibc-locale-posix=2.42-r4 glibc=2.42-r4 gmp=6.3.0-r8 go-1.25=1.25.5-r0 gobump=0.9.3-r3 heimdal-libs=7.8.0-r42 icu78-data-full=78.1-r0 isl=0.27-r4 keyutils-libs=1.6.3-r37 krb5-conf=1.0-r7 krb5-libs=1.22.1-r1 ld-linux=2.42-r4 libatomic=15.2.0-r6 libbrotlicommon1=1.2.0-r1 libbrotlidec1=1.2.0-r1 libbrotlienc1=1.2.0-r1 libcom_err=1.47.3-r1 libcrypt1=2.42-r4 libcrypto3=3.6.0-r4 libcurl-openssl4=8.17.0-r0 libexpat1=2.7.3-r0 libgcc=15.2.0-r6 libgomp=15.2.0-r6 libicu78=78.1-r0 libidn2=2.3.8-r3 libldap-2.6=2.6.10-r7 libnghttp2-14=1.68.0-r0 libpcre2-8-0=10.47-r0 libpsl=0.21.5-r6 libquadmath=15.2.0-r6 libssl3=3.6.0-r4 libstdc++-dev=15.2.0-r6 libstdc++=15.2.0-r6 libunistring=1.4.1-r1 libuv=1.51.0-r2 libverto=0.3.2-r6 libxcrypt-dev=4.5.2-r0 libxcrypt=4.5.2-r0 libzstd1=1.5.7-r5 linux-headers=6.18-r0 make=4.4.1-r8 mpc=1.3.1-r7 mpfr=4.2.2-r2 ncurses-terminfo-base=6.5_p20251025-r1 ncurses=6.5_p20251025-r1 nghttp3=1.13.1-r0 nodejs-25=25.2.1-r0 nss-db=2.42-r4 nss-hesiod=2.42-r4 openssf-compiler-options=20250904-r2 pkgconf=2.5.1-r1 posix-cc-wrappers=2-r7 readline=8.3-r1 sqlite-libs=3.51.1-r0 wolfi-baselayout=20230201-r24 zlib=1.3.1-r51]
  accounts:
    runas:  
    users:
      - uid=1000(build) gid=1000
    groups:
      - gid=1000(build) members=[build]
auth configured for: 0xabedb0
installing wolfi-baselayout (20230201-r24)
installing ca-certificates-bundle (20251003-r0)
installing glibc-locale-posix (2.42-r4)
installing libgcc (15.2.0-r6)
installing glibc (2.42-r4)
installing ld-linux (2.42-r4)
installing ncurses-terminfo-base (6.5_p20251025-r1)
installing ncurses (6.5_p20251025-r1)
installing bash (5.3-r3)
installing libstdc++ (15.2.0-r6)
installing libzstd1 (1.5.7-r5)
installing binutils (2.45.1-r2)
installing libxcrypt (4.5.2-r0)
installing libxcrypt-dev (4.5.2-r0)
installing linux-headers (6.18-r0)
installing nss-db (2.42-r4)
installing nss-hesiod (2.42-r4)
installing glibc-dev (2.42-r4)
installing libquadmath (15.2.0-r6)
installing libstdc++-dev (15.2.0-r6)
installing openssf-compiler-options (20250904-r2)
installing posix-cc-wrappers (2-r7)
installing libatomic (15.2.0-r6)
installing gmp (6.3.0-r8)
installing libgomp (15.2.0-r6)
installing isl (0.27-r4)
installing mpfr (4.2.2-r2)
installing mpc (1.3.1-r7)
installing zlib (1.3.1-r51)
installing gcc (15.2.0-r6)
installing make (4.4.1-r8)
installing pkgconf (2.5.1-r1)
installing build-base (1-r9)
installing libcrypt1 (2.42-r4)
installing busybox (1.37.0-r50)
installing c-ares (1.34.5-r3)
installing libcrypto3 (3.6.0-r4)
installing gdbm (1.26-r1)
installing readline (8.3-r1)
installing sqlite-libs (3.51.1-r0)
installing heimdal-libs (7.8.0-r42)
installing cyrus-sasl (2.1.28-r45)
installing libbrotlicommon1 (1.2.0-r1)
installing libbrotlidec1 (1.2.0-r1)
installing krb5-conf (1.0-r7)
installing libcom_err (1.47.3-r1)
installing keyutils-libs (1.6.3-r37)
installing libssl3 (3.6.0-r4)
installing libverto (0.3.2-r6)
installing krb5-libs (1.22.1-r1)
installing libldap-2.6 (2.6.10-r7)
installing libnghttp2-14 (1.68.0-r0)
installing nghttp3 (1.13.1-r0)
installing libunistring (1.4.1-r1)
installing libidn2 (2.3.8-r3)
installing libpsl (0.21.5-r6)
installing libcurl-openssl4 (8.17.0-r0)
installing libexpat1 (2.7.3-r0)
installing libpcre2-8-0 (10.47-r0)
installing git (2.52.0-r0)
installing go-1.25 (1.25.5-r0)
installing gobump (0.9.3-r3)
installing icu78-data-full (78.1-r0)
installing libbrotlienc1 (1.2.0-r1)
installing libicu78 (78.1-r0)
installing libuv (1.51.0-r2)
installing nodejs-25 (25.2.1-r0)
running step "git-checkout"
[git checkout] repo='https://github.com/zarf-dev/zarf' dest='.' depth='unset' branch='' tag='v0.67.0' expcommit='fe2731f24424a80e1c19d6293359eae2242c4c7c' recurse='false'
[git checkout] execute: git config --global --add safe.directory /tmp/tmp.i8b7iQ
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git clone --quiet --origin=origin --config=user.name=Melange Build [email protected] --config=advice.detachedHead=false --branch=v0.67.0 --depth=1 https://github.com/zarf-dev/zarf /tmp/tmp.i8b7iQ
warning: refs/tags/v0.67.0 0381f99ea36fab31c744ec6780fefe86654971f5 is not a commit!
[git checkout] execute: cd /tmp/tmp.i8b7iQ
[git checkout] tar -c . | tar -C "/home/build" -x
[git checkout] execute: cd /home/build
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git fetch --quiet origin --depth=1 --no-tags +refs/tags/v0.67.0:refs/origin/tags/v0.67.0
[git checkout] execute: git checkout --quiet origin/tags/v0.67.0
[git checkout] tag v0.67.0 is fe2731f24424a80e1c19d6293359eae2242c4c7c
running step "go/bump"
2025/12/08 14:07:29 Local Go version: 1.25.5
2025/12/08 14:07:29 Running go mod tidy with go version '1.25.5' ...
2025/12/08 14:07:39 Update package: github.com/sigstore/timestamp-authority
2025/12/08 14:07:39 Running go mod edit -droprequire ...
2025/12/08 14:07:39 Running go get ...
Error: failed to run update. Error: failed to run 'go get': exit status 1 with output: go: github.com/sigstore/[email protected]: invalid version: go.mod has post-v2 module path "github.com/sigstore/timestamp-authority/v2" at revision v2.0.3

Indexes

https://apk.cgr.dev/wolfi-presubmit/93b6f3f5f398066fdb1ae84811408acfba91854f

❌ Failed Packages

  • ❌ zarf (error | 31s)

Packages

More Observability

Command

cg build log \
  --build-id 7775efab-1ad4-404a-9066-4ed3976731f5 \
  --project prod-wolfi-os \
  --cluster elastic-pre-a \
  --namespace pre-wolfi \
  --start 2025-12-08T14:05:17Z \
  --end 2025-12-08T14:17:49Z
View more details on Chainguard Internal