Skip to content

witness/0.10.1-r2: cve remediation #75170

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
octo-sts wants to merge 2 commits into from

Merge branch 'main' into cve-witness-0.10.1-r2-c1efa1a4c43a745cd462d3…

232d20b
Select commit
Loading
Failed to load commit list.
Closed

witness/0.10.1-r2: cve remediation #75170

Merge branch 'main' into cve-witness-0.10.1-r2-c1efa1a4c43a745cd462d3…
232d20b
Select commit
Loading
Failed to load commit list.
Chainguard Internal / elastic-build failed Dec 15, 2025 in 4m 17s

Failed to build APKs

Build ID: b1eadc22-9386-4c49-b163-0b5aaef3729f
Error: failed to build witness: building group: pod failed: build failed
did not test because building group: pod failed: build failed

Details

builds

x86_64 Logs

Click to expand 
ss --arch x86_64 --arch=x86_64 --env-file=build-x86_64.env --namespace=wolfi --pipeline-dir=./pipelines --out-dir=./packages/ --runner=qemu --repository-append=https://apk.cgr.dev/chainguard --repository-append=https://apk.cgr.dev/wolfi-presubmit/fcbb21643917020967c7d27b8024277658e5ed7d --repository-append=https://apk.cgr.dev/wolfi-presubmit/fcbb21643917020967c7d27b8024277658e5ed7d --git-repo-url=https://github.com/wolfi-dev/os]
melange version  with runner qemu building [witness.yaml] at commit  for arches [amd64]
melange v0.36.0 with runner qemu is building:
populating workspace /tmp/melange-workspace-623732343 from witness
image configuration:
  contents:
    build repositories: [https://apk.cgr.dev/chainguard https://apk.cgr.dev/wolfi-presubmit/fcbb21643917020967c7d27b8024277658e5ed7d]
    runtime repositories: []
    repositories: []
    keyring:      []
    packages:     [bash=5.3-r3 binutils=2.45.1-r2 build-base=1-r9 busybox=1.37.0-r50 ca-certificates-bundle=20251003-r0 cyrus-sasl=2.1.28-r45 gcc=15.2.0-r6 gdbm=1.26-r1 git=2.52.0-r0 glibc-dev=2.42-r4 glibc-locale-posix=2.42-r4 glibc=2.42-r4 gmp=6.3.0-r8 go-1.25=1.25.5-r0 gobump=0.9.3-r3 heimdal-libs=7.8.0-r42 isl=0.27-r4 keyutils-libs=1.6.3-r37 krb5-conf=1.0-r7 krb5-libs=1.22.1-r1 ld-linux=2.42-r4 libatomic=15.2.0-r6 libbrotlicommon1=1.2.0-r1 libbrotlidec1=1.2.0-r1 libcom_err=1.47.3-r1 libcrypt1=2.42-r4 libcrypto3=3.6.0-r6 libcurl-openssl4=8.17.0-r0 libexpat1=2.7.3-r0 libgcc=15.2.0-r6 libgomp=15.2.0-r6 libidn2=2.3.8-r3 libldap-2.6=2.6.10-r7 libnghttp2-14=1.68.0-r0 libpcre2-8-0=10.47-r0 libpsl=0.21.5-r6 libquadmath=15.2.0-r6 libssl3=3.6.0-r6 libstdc++-dev=15.2.0-r6 libstdc++=15.2.0-r6 libunistring=1.4.1-r1 libverto=0.3.2-r6 libxcrypt-dev=4.5.2-r0 libxcrypt=4.5.2-r0 libzstd1=1.5.7-r5 linux-headers=6.18.1-r0 make=4.4.1-r8 mpc=1.3.1-r7 mpfr=4.2.2-r2 ncurses-terminfo-base=6.5_p20251025-r1 ncurses=6.5_p20251025-r1 nghttp3=1.13.1-r0 nss-db=2.42-r4 nss-hesiod=2.42-r4 openssf-compiler-options=20250904-r2 pkgconf=2.5.1-r1 posix-cc-wrappers=2-r7 readline=8.3-r1 sqlite-libs=3.51.1-r0 wolfi-baselayout=20230201-r24 zlib=1.3.1-r51]
  accounts:
    runas:  
    users:
      - uid=1000(build) gid=1000
    groups:
      - gid=1000(build) members=[build]
auth configured for: 0x1042020
installing wolfi-baselayout (20230201-r24)
installing ca-certificates-bundle (20251003-r0)
installing glibc-locale-posix (2.42-r4)
installing libgcc (15.2.0-r6)
installing glibc (2.42-r4)
installing ld-linux (2.42-r4)
installing ncurses-terminfo-base (6.5_p20251025-r1)
installing ncurses (6.5_p20251025-r1)
installing bash (5.3-r3)
installing libstdc++ (15.2.0-r6)
installing libzstd1 (1.5.7-r5)
installing binutils (2.45.1-r2)
installing libxcrypt (4.5.2-r0)
installing libxcrypt-dev (4.5.2-r0)
installing linux-headers (6.18.1-r0)
installing nss-db (2.42-r4)
installing nss-hesiod (2.42-r4)
installing glibc-dev (2.42-r4)
installing libquadmath (15.2.0-r6)
installing libstdc++-dev (15.2.0-r6)
installing openssf-compiler-options (20250904-r2)
installing posix-cc-wrappers (2-r7)
installing libatomic (15.2.0-r6)
installing gmp (6.3.0-r8)
installing libgomp (15.2.0-r6)
installing isl (0.27-r4)
installing mpfr (4.2.2-r2)
installing mpc (1.3.1-r7)
installing zlib (1.3.1-r51)
installing gcc (15.2.0-r6)
installing make (4.4.1-r8)
installing pkgconf (2.5.1-r1)
installing build-base (1-r9)
installing libcrypt1 (2.42-r4)
installing busybox (1.37.0-r50)
installing libcrypto3 (3.6.0-r6)
installing gdbm (1.26-r1)
installing readline (8.3-r1)
installing sqlite-libs (3.51.1-r0)
installing heimdal-libs (7.8.0-r42)
installing cyrus-sasl (2.1.28-r45)
installing libbrotlicommon1 (1.2.0-r1)
installing libbrotlidec1 (1.2.0-r1)
installing krb5-conf (1.0-r7)
installing libcom_err (1.47.3-r1)
installing keyutils-libs (1.6.3-r37)
installing libssl3 (3.6.0-r6)
installing libverto (0.3.2-r6)
installing krb5-libs (1.22.1-r1)
installing libldap-2.6 (2.6.10-r7)
installing libnghttp2-14 (1.68.0-r0)
installing nghttp3 (1.13.1-r0)
installing libunistring (1.4.1-r1)
installing libidn2 (2.3.8-r3)
installing libpsl (0.21.5-r6)
installing libcurl-openssl4 (8.17.0-r0)
installing libexpat1 (2.7.3-r0)
installing libpcre2-8-0 (10.47-r0)
installing git (2.52.0-r0)
installing go-1.25 (1.25.5-r0)
installing gobump (0.9.3-r3)
qemu: generating ssh key pairs for ephemeral VM
qemu: generating SSH host key for VM
qemu: generating base initramfs
image configuration:
  contents:
    build repositories: [https://apk.cgr.dev/chainguard]
    runtime repositories: []
    repositories: []
    keyring:      []
    packages:     [microvm-init]
installing wolfi-baselayout (20230201-r24)
installing ca-certificates-bundle (20251003-r0)
installing libgcc (15.2.0-r6)
installing glibc-locale-posix (2.42-r4)
installing glibc (2.42-r4)
installing ld-linux (2.42-r4)
installing gnutar-rmt (1.35-r6)
installing gnutar (1.35-r6)
installing libattr1 (2.5.2-r54)
installing attr (2.5.2-r54)
installing zlib (1.3.1-r51)
installing libzstd1 (1.5.7-r5)
installing xz (5.8.1-r6)
installing libcrypto3 (3.6.0-r6)
installing kmod (34.2-r42)
installing libmnl (1.0.5-r6)
installing libbz2-1 (1.0.8-r21)
installing libelf (0.194-r0)
installing libbpf (1.6.2-r0)
installing libverto (0.3.2-r6)
installing krb5-conf (1.0-r7)
installing libcom_err (1.47.3-r1)
installing keyutils-libs (1.6.3-r37)
installing libssl3 (3.6.0-r6)
installing krb5-libs (1.22.1-r1)
installing libtirpc (1.3.7-r1)
installing libpcre2-8-0 (10.47-r0)
installing libsepol (3.9-r1)
installing libselinux (3.9-r1)
installing libnftnl (1.3.1-r0)
installing xtables (1.8.11-r29)
installing libcap (2.77-r0)
installing iproute2 (6.17.0-r2)
installing libstdc++ (15.2.0-r6)
installing inih (62-r1)
installing liburcu (0.15.5-r0)
installing libblkid (2.41.3-r0)
installing libuuid (2.41.3-r0)
installing xfsprogs-core (6.17.0-r2)
installing xfsprogs (6.17.0-r2)
installing libmount (2.41.3-r0)
installing mount (2.41.3-r0)
installing libxcrypt (4.5.2-r0)
installing libcrypt1 (2.42-r4)
installing linux-pam (1.7.1-r3)
installing openssh-keygen (10.2_p1-r2)
installing openssh-server-config (10.2_p1-r2)
installing openssh-server (10.2_p1-r2)
installing ncurses-terminfo-base (6.5_p20251025-r1)
installing ncurses (6.5_p20251025-r1)
installing setarch (2.41.3-r0)
installing libfdisk (2.41.3-r0)
installing sqlite-libs (3.51.1-r0)
installing util-linux (2.41.3-r0)
installing libsmartcols (2.41.3-r0)
installing util-linux-misc (2.41.3-r0)
installing busybox (1.37.0-r50)
installing microvm-init (0.0.1-r15)
qemu: starting VM
qemu: waiting for SSH
conn read: read tcp 127.0.0.1:40470->127.0.0.1:44515: i/o timeout
qemu: meta-data=/dev/vda               isize=512    agcount=8, agsize=1638400 blks
qemu:          =                       sectsz=4096  attr=2, projid32bit=1
qemu:          =                       crc=1        finobt=1, sparse=1, rmapbt=1
qemu:          =                       reflink=1    bigtime=1 inobtcount=1 nrext64=1
qemu:          =                       exchange=0   metadir=0
qemu: data     =                       bsize=4096   blocks=13107200, imaxpct=25
qemu:          =                       sunit=0      swidth=0 blks
qemu: naming   =version 2              bsize=4096   ascii-ci=0, ftype=1, parent=0
qemu: log      =internal log           bsize=4096   blocks=16384, version=2
qemu:          =                       sectsz=4096  sunit=1 blks, lazy-count=1
qemu: realtime =none                   extsz=4096   blocks=0, rtextents=0
qemu:          =                       rgcount=0    rgsize=0 extents
qemu:          =                       zoned=0      start=0 reserved=0
qemu: Discarding blocks...Done.
qemu: [INIT] Checking for init.d scripts...
qemu: [INIT] No /opt/melange/init.d directory (optional, skipping)
qemu: ssh-keygen: generating new host keys: RSA ECDSA 
qemu: Server listening on 0.0.0.0 port 2223.
qemu: Server listening on 0.0.0.0 port 22.
conn read: read tcp 127.0.0.1:40480->127.0.0.1:44515: i/o timeout
qemu: VM started successfully, SSH server is up
qemu: Connection closed by 10.0.2.2 port 40486
qemu: verifying VM host key against pre-provisioned key
qemu: Accepted publickey for root from 10.0.2.2 port 40494 ssh2: ECDSA SHA256:hnvdTW5SBBWYP40g8w42VKJJ8K81W10eCn/r/yN0luc
qemu: VM host key successfully verified against pre-provisioned key
qemu: Connection closed by 10.0.2.2 port 40494
qemu: Accepted publickey for root from 10.0.2.2 port 40496 ssh2: ECDSA SHA256:hnvdTW5SBBWYP40g8w42VKJJ8K81W10eCn/r/yN0luc
qemu: Accepted publickey for root from 10.0.2.2 port 50184 ssh2: ECDSA SHA256:hnvdTW5SBBWYP40g8w42VKJJ8K81W10eCn/r/yN0luc
qemu: Accepted publickey for root from 10.0.2.2 port 40506 ssh2: ECDSA SHA256:hnvdTW5SBBWYP40g8w42VKJJ8K81W10eCn/r/yN0luc
qemu: running kernel version: 6.16.10-r2-qemu-generic #Chainguard SMP PREEMPT_DYNAMIC Fri Oct  3 22:31:32 UTC 2025
qemu: setting up melange cachedir: ./melange-cache/
qemu: setting up local workspace
qemu: unmounting host workspace from guest
running step "git-checkout"
[git checkout] repo='https://github.com/in-toto/witness' dest='.' depth='unset' branch='' tag='v0.10.1' expcommit='ba902d85b5766f12d7bb794aa2a131ef1e4bf3b9' recurse='false' sparse_paths=''
[git checkout] execute: git config --global --add safe.directory /tmp/tmp.VW6UX2
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git clone --quiet --origin=origin --config=user.name=Melange Build [email protected] --config=advice.detachedHead=false --branch=v0.10.1 --depth=1 https://github.com/in-toto/witness /tmp/tmp.VW6UX2
warning: refs/tags/v0.10.1 db4bb1683917ad48539417e5b4300fef1afc751e is not a commit!
[git checkout] execute: cd /tmp/tmp.VW6UX2
[git checkout] tar -c . | tar -C "/home/build" -x
[git checkout] execute: cd /home/build
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git fetch --quiet origin --depth=1 --no-tags +refs/tags/v0.10.1:refs/origin/tags/v0.10.1
[git checkout] execute: git checkout --quiet origin/tags/v0.10.1
[git checkout] tag v0.10.1 is ba902d85b5766f12d7bb794aa2a131ef1e4bf3b9
running step "go/bump"
2025/12/15 19:20:49 Local Go version: 1.25.5
2025/12/15 19:20:49 Running go mod tidy with go version '1.25.5' ...

aarch64 Logs

Click to expand 
ibfdisk (2.41.3-r0)
installing sqlite-libs (3.51.1-r0)
installing util-linux (2.41.3-r0)
installing libsmartcols (2.41.3-r0)
installing util-linux-misc (2.41.3-r0)
installing busybox (1.37.0-r50)
installing microvm-init (0.0.1-r15)
qemu: starting VM
qemu: waiting for SSH
conn read: read tcp 127.0.0.1:40470->127.0.0.1:44515: i/o timeout
qemu: meta-data=/dev/vda               isize=512    agcount=8, agsize=1638400 blks
qemu:          =                       sectsz=4096  attr=2, projid32bit=1
qemu:          =                       crc=1        finobt=1, sparse=1, rmapbt=1
qemu:          =                       reflink=1    bigtime=1 inobtcount=1 nrext64=1
qemu:          =                       exchange=0   metadir=0
qemu: data     =                       bsize=4096   blocks=13107200, imaxpct=25
qemu:          =                       sunit=0      swidth=0 blks
qemu: naming   =version 2              bsize=4096   ascii-ci=0, ftype=1, parent=0
qemu: log      =internal log           bsize=4096   blocks=16384, version=2
qemu:          =                       sectsz=4096  sunit=1 blks, lazy-count=1
qemu: realtime =none                   extsz=4096   blocks=0, rtextents=0
qemu:          =                       rgcount=0    rgsize=0 extents
qemu:          =                       zoned=0      start=0 reserved=0
qemu: Discarding blocks...Done.
qemu: [INIT] Checking for init.d scripts...
qemu: [INIT] No /opt/melange/init.d directory (optional, skipping)
qemu: ssh-keygen: generating new host keys: RSA ECDSA 
qemu: Server listening on 0.0.0.0 port 2223.
qemu: Server listening on 0.0.0.0 port 22.
conn read: read tcp 127.0.0.1:40480->127.0.0.1:44515: i/o timeout
qemu: VM started successfully, SSH server is up
qemu: Connection closed by 10.0.2.2 port 40486
qemu: verifying VM host key against pre-provisioned key
qemu: Accepted publickey for root from 10.0.2.2 port 40494 ssh2: ECDSA SHA256:hnvdTW5SBBWYP40g8w42VKJJ8K81W10eCn/r/yN0luc
qemu: VM host key successfully verified against pre-provisioned key
qemu: Connection closed by 10.0.2.2 port 40494
qemu: Accepted publickey for root from 10.0.2.2 port 40496 ssh2: ECDSA SHA256:hnvdTW5SBBWYP40g8w42VKJJ8K81W10eCn/r/yN0luc
qemu: Accepted publickey for root from 10.0.2.2 port 50184 ssh2: ECDSA SHA256:hnvdTW5SBBWYP40g8w42VKJJ8K81W10eCn/r/yN0luc
qemu: Accepted publickey for root from 10.0.2.2 port 40506 ssh2: ECDSA SHA256:hnvdTW5SBBWYP40g8w42VKJJ8K81W10eCn/r/yN0luc
qemu: running kernel version: 6.16.10-r2-qemu-generic #Chainguard SMP PREEMPT_DYNAMIC Fri Oct  3 22:31:32 UTC 2025
qemu: setting up melange cachedir: ./melange-cache/
qemu: setting up local workspace
qemu: unmounting host workspace from guest
running step "git-checkout"
[git checkout] repo='https://github.com/in-toto/witness' dest='.' depth='unset' branch='' tag='v0.10.1' expcommit='ba902d85b5766f12d7bb794aa2a131ef1e4bf3b9' recurse='false' sparse_paths=''
[git checkout] execute: git config --global --add safe.directory /tmp/tmp.VW6UX2
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git clone --quiet --origin=origin --config=user.name=Melange Build [email protected] --config=advice.detachedHead=false --branch=v0.10.1 --depth=1 https://github.com/in-toto/witness /tmp/tmp.VW6UX2
warning: refs/tags/v0.10.1 db4bb1683917ad48539417e5b4300fef1afc751e is not a commit!
[git checkout] execute: cd /tmp/tmp.VW6UX2
[git checkout] tar -c . | tar -C "/home/build" -x
[git checkout] execute: cd /home/build
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git fetch --quiet origin --depth=1 --no-tags +refs/tags/v0.10.1:refs/origin/tags/v0.10.1
[git checkout] execute: git checkout --quiet origin/tags/v0.10.1
[git checkout] tag v0.10.1 is ba902d85b5766f12d7bb794aa2a131ef1e4bf3b9
running step "go/bump"
2025/12/15 19:20:49 Local Go version: 1.25.5
2025/12/15 19:20:49 Running go mod tidy with go version '1.25.5' ...
parsed env
configuring puller identity "720909c9f5279097d847ad02a2f24ba8f59de36a/a49c7fedc33adf69"...
running command chainctl [auth login --audience apk.cgr.dev --identity 720909c9f5279097d847ad02a2f24ba8f59de36a/a49c7fedc33adf69]
Successfully exchanged token.
Valid! Id: 720909c9f5279097d847ad02a2f24ba8f59de36a/a49c7fedc33adf69
Updates are available for chainctl (current version: 0.2.183; latest: 0.2.184). To install, please run:
    $ chainctl update
command "chainctl" completed successfully
puller identity configured successfully
puller identity configured successfully
running build...
running command melange [build witness.yaml --gcplog --source-dir witness --arch aarch64 --arch=aarch64 --env-file=build-aarch64.env --namespace=wolfi --pipeline-dir=./pipelines --out-dir=./packages/ --runner=bubblewrap --repository-append=https://apk.cgr.dev/chainguard --repository-append=https://apk.cgr.dev/wolfi-presubmit/fcbb21643917020967c7d27b8024277658e5ed7d --repository-append=https://apk.cgr.dev/wolfi-presubmit/fcbb21643917020967c7d27b8024277658e5ed7d --git-repo-url=https://github.com/wolfi-dev/os]
melange version  with runner bubblewrap building [witness.yaml] at commit  for arches [arm64]
melange v0.36.0 with runner bubblewrap is building:
populating workspace /tmp/melange-workspace-2748042783 from witness
image configuration:
  contents:
    build repositories: [https://apk.cgr.dev/chainguard https://apk.cgr.dev/wolfi-presubmit/fcbb21643917020967c7d27b8024277658e5ed7d]
    runtime repositories: []
    repositories: []
    keyring:      []
    packages:     [bash=5.3-r3 binutils=2.45.1-r2 build-base=1-r9 busybox=1.37.0-r50 ca-certificates-bundle=20251003-r0 cyrus-sasl=2.1.28-r45 gcc=15.2.0-r6 gdbm=1.26-r1 git=2.52.0-r0 glibc-dev=2.42-r4 glibc-locale-posix=2.42-r4 glibc=2.42-r4 gmp=6.3.0-r8 go-1.25=1.25.5-r0 gobump=0.9.3-r3 heimdal-libs=7.8.0-r42 isl=0.27-r4 keyutils-libs=1.6.3-r37 krb5-conf=1.0-r7 krb5-libs=1.22.1-r1 ld-linux=2.42-r4 libatomic=15.2.0-r6 libbrotlicommon1=1.2.0-r1 libbrotlidec1=1.2.0-r1 libcom_err=1.47.3-r1 libcrypt1=2.42-r4 libcrypto3=3.6.0-r6 libcurl-openssl4=8.17.0-r0 libexpat1=2.7.3-r0 libgcc=15.2.0-r6 libgomp=15.2.0-r6 libidn2=2.3.8-r3 libldap-2.6=2.6.10-r7 libnghttp2-14=1.68.0-r0 libpcre2-8-0=10.47-r0 libpsl=0.21.5-r6 libquadmath=15.2.0-r6 libssl3=3.6.0-r6 libstdc++-dev=15.2.0-r6 libstdc++=15.2.0-r6 libunistring=1.4.1-r1 libverto=0.3.2-r6 libxcrypt-dev=4.5.2-r0 libxcrypt=4.5.2-r0 libzstd1=1.5.7-r5 linux-headers=6.18.1-r0 make=4.4.1-r8 mpc=1.3.1-r7 mpfr=4.2.2-r2 ncurses-terminfo-base=6.5_p20251025-r1 ncurses=6.5_p20251025-r1 nghttp3=1.13.1-r0 nss-db=2.42-r4 nss-hesiod=2.42-r4 openssf-compiler-options=20250904-r2 pkgconf=2.5.1-r1 posix-cc-wrappers=2-r7 readline=8.3-r1 sqlite-libs=3.51.1-r0 wolfi-baselayout=20230201-r24 zlib=1.3.1-r51]
  accounts:
    runas:  
    users:
      - uid=1000(build) gid=1000
    groups:
      - gid=1000(build) members=[build]
auth configured for: 0xabd940
installing wolfi-baselayout (20230201-r24)
installing ca-certificates-bundle (20251003-r0)
installing glibc-locale-posix (2.42-r4)
installing libgcc (15.2.0-r6)
installing glibc (2.42-r4)
installing ld-linux (2.42-r4)
installing ncurses-terminfo-base (6.5_p20251025-r1)
installing ncurses (6.5_p20251025-r1)
installing bash (5.3-r3)
installing libstdc++ (15.2.0-r6)
installing libzstd1 (1.5.7-r5)
installing binutils (2.45.1-r2)
installing libxcrypt (4.5.2-r0)
installing libxcrypt-dev (4.5.2-r0)
installing linux-headers (6.18.1-r0)
installing nss-db (2.42-r4)
installing nss-hesiod (2.42-r4)
installing glibc-dev (2.42-r4)
installing libquadmath (15.2.0-r6)
installing libstdc++-dev (15.2.0-r6)
installing openssf-compiler-options (20250904-r2)
installing posix-cc-wrappers (2-r7)
installing libatomic (15.2.0-r6)
installing gmp (6.3.0-r8)
installing libgomp (15.2.0-r6)
installing isl (0.27-r4)
installing mpfr (4.2.2-r2)
installing mpc (1.3.1-r7)
installing zlib (1.3.1-r51)
installing gcc (15.2.0-r6)
installing make (4.4.1-r8)
installing pkgconf (2.5.1-r1)
installing build-base (1-r9)
installing libcrypt1 (2.42-r4)
installing busybox (1.37.0-r50)
installing libcrypto3 (3.6.0-r6)
installing gdbm (1.26-r1)
installing readline (8.3-r1)
installing sqlite-libs (3.51.1-r0)
installing heimdal-libs (7.8.0-r42)
installing cyrus-sasl (2.1.28-r45)
installing libbrotlicommon1 (1.2.0-r1)
installing libbrotlidec1 (1.2.0-r1)
installing krb5-conf (1.0-r7)
installing libcom_err (1.47.3-r1)
installing keyutils-libs (1.6.3-r37)
installing libssl3 (3.6.0-r6)
installing libverto (0.3.2-r6)
installing krb5-libs (1.22.1-r1)
installing libldap-2.6 (2.6.10-r7)
installing libnghttp2-14 (1.68.0-r0)
installing nghttp3 (1.13.1-r0)
installing libunistring (1.4.1-r1)
installing libidn2 (2.3.8-r3)
installing libpsl (0.21.5-r6)
installing libcurl-openssl4 (8.17.0-r0)
installing libexpat1 (2.7.3-r0)
installing libpcre2-8-0 (10.47-r0)
installing git (2.52.0-r0)
installing go-1.25 (1.25.5-r0)
installing gobump (0.9.3-r3)
running step "git-checkout"
[git checkout] repo='https://github.com/in-toto/witness' dest='.' depth='unset' branch='' tag='v0.10.1' expcommit='ba902d85b5766f12d7bb794aa2a131ef1e4bf3b9' recurse='false' sparse_paths=''
[git checkout] execute: git config --global --add safe.directory /tmp/tmp.mN1LA1
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git clone --quiet --origin=origin --config=user.name=Melange Build [email protected] --config=advice.detachedHead=false --branch=v0.10.1 --depth=1 https://github.com/in-toto/witness /tmp/tmp.mN1LA1
warning: refs/tags/v0.10.1 db4bb1683917ad48539417e5b4300fef1afc751e is not a commit!
[git checkout] execute: cd /tmp/tmp.mN1LA1
[git checkout] tar -c . | tar -C "/home/build" -x
[git checkout] execute: cd /home/build
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git fetch --quiet origin --depth=1 --no-tags +refs/tags/v0.10.1:refs/origin/tags/v0.10.1
[git checkout] execute: git checkout --quiet origin/tags/v0.10.1
[git checkout] tag v0.10.1 is ba902d85b5766f12d7bb794aa2a131ef1e4bf3b9
running step "go/bump"
2025/12/15 19:20:46 Local Go version: 1.25.5
2025/12/15 19:20:46 Running go mod tidy with go version '1.25.5' ...

Indexes

https://apk.cgr.dev/wolfi-presubmit/fcbb21643917020967c7d27b8024277658e5ed7d

❌ Failed Packages

  • ❌ witness (error | 27s)

Packages

More Observability

Command

cg build log \
  --build-id b1eadc22-9386-4c49-b163-0b5aaef3729f \
  --project prod-wolfi-os \
  --cluster elastic-pre-a \
  --namespace pre-wolfi \
  --start 2025-12-15T19:16:43Z \
  --end 2025-12-15T19:31:01Z
View more details on Chainguard Internal