Skip to content

zarf/0.67.0-r0: cve remediation#75221

Closed
octo-sts[bot] wants to merge 1 commit into
mainfrom
cve-zarf-0.67.0-r0-2ff7cb511ef4e3f1bcb19e07da229457
Closed

zarf/0.67.0-r0: cve remediation#75221
octo-sts[bot] wants to merge 1 commit into
mainfrom
cve-zarf-0.67.0-r0-2ff7cb511ef4e3f1bcb19e07da229457

zarf/0.67.0-r0: fix GHSA-f83f-xpx7-ffpw

8d54be7
Select commit
Loading
Failed to load commit list.
Chainguard Internal Staging / elastic-build (STAGING) completed Dec 8, 2025 in 3m 54s

Failed to build APKs

Build ID: 48375905-b907-45fe-a40e-102e6d058e23
Error: failed to build zarf: building group: pod failed: build failed
did not test because building group: pod failed: build failed

Details

builds

x86_64 Logs

Click to expand 
l (1.3.1-r0)"
time=2025-12-08T20:28:14.001Z level=INFO msg="installing xtables (1.8.11-r29)"
time=2025-12-08T20:28:14.008Z level=INFO msg="installing libcap (2.77-r0)"
time=2025-12-08T20:28:14.009Z level=INFO msg="installing iproute2 (6.17.0-r2)"
time=2025-12-08T20:28:14.013Z level=INFO msg="installing libstdc++ (15.2.0-r6)"
time=2025-12-08T20:28:14.016Z level=INFO msg="installing inih (62-r1)"
time=2025-12-08T20:28:14.017Z level=INFO msg="installing liburcu (0.15.5-r0)"
time=2025-12-08T20:28:14.018Z level=INFO msg="installing libblkid (2.41.2-r2)"
time=2025-12-08T20:28:14.020Z level=INFO msg="installing libuuid (2.41.2-r2)"
time=2025-12-08T20:28:14.021Z level=INFO msg="installing xfsprogs-core (6.17.0-r2)"
time=2025-12-08T20:28:14.023Z level=INFO msg="installing xfsprogs (6.17.0-r2)"
time=2025-12-08T20:28:14.023Z level=INFO msg="installing libmount (2.41.2-r2)"
time=2025-12-08T20:28:14.025Z level=INFO msg="installing mount (2.41.2-r2)"
time=2025-12-08T20:28:14.026Z level=INFO msg="installing ncurses-terminfo-base (6.5_p20251025-r1)"
time=2025-12-08T20:28:14.035Z level=INFO msg="installing ncurses (6.5_p20251025-r1)"
time=2025-12-08T20:28:14.037Z level=INFO msg="installing setarch (2.41.2-r2)"
time=2025-12-08T20:28:14.038Z level=INFO msg="installing libfdisk (2.41.2-r2)"
time=2025-12-08T20:28:14.040Z level=INFO msg="installing sqlite-libs (3.51.1-r0)"
time=2025-12-08T20:28:14.041Z level=INFO msg="installing util-linux (2.41.2-r2)"
time=2025-12-08T20:28:14.045Z level=INFO msg="installing libsmartcols (2.41.2-r2)"
time=2025-12-08T20:28:14.061Z level=INFO msg="installing util-linux-misc (2.41.2-r2)"
time=2025-12-08T20:28:14.076Z level=INFO msg="installing libxcrypt (4.5.2-r0)"
time=2025-12-08T20:28:14.077Z level=INFO msg="installing libcrypt1 (2.42-r4)"
time=2025-12-08T20:28:14.077Z level=INFO msg="installing linux-pam (1.7.1-r3)"
time=2025-12-08T20:28:14.087Z level=INFO msg="installing openssh-keygen (10.2_p1-r2)"
time=2025-12-08T20:28:14.088Z level=INFO msg="installing openssh-server-config (10.2_p1-r2)"
time=2025-12-08T20:28:14.089Z level=INFO msg="installing openssh-server (10.2_p1-r2)"
time=2025-12-08T20:28:14.091Z level=INFO msg="installing busybox (1.37.0-r50)"
time=2025-12-08T20:28:14.093Z level=INFO msg="installing microvm-init (0.0.1-r14)"
time=2025-12-08T20:28:14.665Z level=INFO msg="qemu: starting VM"
time=2025-12-08T20:28:14.667Z level=INFO msg="qemu: waiting for SSH"
time=2025-12-08T20:28:16.168Z level=INFO msg="conn read: read tcp 127.0.0.1:51546->127.0.0.1:36851: i/o timeout"
time=2025-12-08T20:28:17.471Z level=INFO msg="qemu: meta-data=/dev/vda               isize=512    agcount=8, agsize=1638400 blks"
time=2025-12-08T20:28:17.472Z level=INFO msg="qemu:          =                       sectsz=4096  attr=2, projid32bit=1"
time=2025-12-08T20:28:17.472Z level=INFO msg="qemu:          =                       crc=1        finobt=1, sparse=1, rmapbt=1"
time=2025-12-08T20:28:17.472Z level=INFO msg="qemu:          =                       reflink=1    bigtime=1 inobtcount=1 nrext64=1"
time=2025-12-08T20:28:17.472Z level=INFO msg="qemu:          =                       exchange=0   metadir=0"
time=2025-12-08T20:28:17.472Z level=INFO msg="qemu: data     =                       bsize=4096   blocks=13107200, imaxpct=25"
time=2025-12-08T20:28:17.472Z level=INFO msg="qemu:          =                       sunit=0      swidth=0 blks"
time=2025-12-08T20:28:17.472Z level=INFO msg="qemu: naming   =version 2              bsize=4096   ascii-ci=0, ftype=1, parent=0"
time=2025-12-08T20:28:17.472Z level=INFO msg="qemu: log      =internal log           bsize=4096   blocks=16384, version=2"
time=2025-12-08T20:28:17.472Z level=INFO msg="qemu:          =                       sectsz=4096  sunit=1 blks, lazy-count=1"
time=2025-12-08T20:28:17.472Z level=INFO msg="qemu: realtime =none                   extsz=4096   blocks=0, rtextents=0"
time=2025-12-08T20:28:17.472Z level=INFO msg="qemu:          =                       rgcount=0    rgsize=0 extents"
time=2025-12-08T20:28:17.472Z level=INFO msg="qemu:          =                       zoned=0      start=0 reserved=0"
time=2025-12-08T20:28:17.474Z level=INFO msg="qemu: Discarding blocks...Done."
time=2025-12-08T20:28:17.669Z level=INFO msg="conn read: read tcp 127.0.0.1:53522->127.0.0.1:36851: i/o timeout"
time=2025-12-08T20:28:19.171Z level=INFO msg="conn read: read tcp 127.0.0.1:53524->127.0.0.1:36851: i/o timeout"
time=2025-12-08T20:28:19.338Z level=INFO msg="qemu: ssh-keygen: generating new host keys: RSA ECDSA "
time=2025-12-08T20:28:19.345Z level=INFO msg="qemu: Server listening on 0.0.0.0 port 2223.\r"
time=2025-12-08T20:28:19.345Z level=INFO msg="qemu: Server listening on 0.0.0.0 port 22.\r"
time=2025-12-08T20:28:19.678Z level=INFO msg="qemu: VM started successfully, SSH server is up"
time=2025-12-08T20:28:19.678Z level=INFO msg="qemu: Connection closed by 10.0.2.2 port 53528\r"
time=2025-12-08T20:28:20.015Z level=INFO msg="qemu: verifying VM host key against pre-provisioned key"
time=2025-12-08T20:28:20.041Z level=INFO msg="qemu: Accepted publickey for root from 10.0.2.2 port 53534 ssh2: ECDSA SHA256:SQkzFhXV+lptPLzEWvYGAzMuLkCOGrW/9qAaYVsqbVI\r"
time=2025-12-08T20:28:20.049Z level=INFO msg="qemu: VM host key successfully verified against pre-provisioned key"
time=2025-12-08T20:28:20.051Z level=INFO msg="qemu: Connection closed by 10.0.2.2 port 53534\r"
time=2025-12-08T20:28:20.076Z level=INFO msg="qemu: Accepted publickey for root from 10.0.2.2 port 53548 ssh2: ECDSA SHA256:SQkzFhXV+lptPLzEWvYGAzMuLkCOGrW/9qAaYVsqbVI\r"
time=2025-12-08T20:28:20.111Z level=INFO msg="qemu: Accepted publickey for root from 10.0.2.2 port 37304 ssh2: ECDSA SHA256:SQkzFhXV+lptPLzEWvYGAzMuLkCOGrW/9qAaYVsqbVI\r"
time=2025-12-08T20:28:20.144Z level=INFO msg="qemu: Accepted publickey for root from 10.0.2.2 port 53552 ssh2: ECDSA SHA256:SQkzFhXV+lptPLzEWvYGAzMuLkCOGrW/9qAaYVsqbVI\r"
time=2025-12-08T20:28:20.195Z level=INFO msg="qemu: running kernel version: 6.16.10-r2-qemu-generic #Chainguard SMP PREEMPT_DYNAMIC Fri Oct  3 22:31:32 UTC 2025"
time=2025-12-08T20:28:20.195Z level=INFO msg="qemu: setting up melange cachedir: ./melange-cache/"
time=2025-12-08T20:28:20.209Z level=INFO msg="qemu: setting up local workspace"
time=2025-12-08T20:28:20.238Z level=INFO msg="qemu: unmounting host workspace from guest"
time=2025-12-08T20:28:20.243Z level=INFO msg="running step \"git-checkout\""
time=2025-12-08T20:28:20.256Z level=INFO msg="[git checkout] repo='https://github.com/zarf-dev/zarf' dest='.' depth='unset' branch='' tag='v0.67.0' expcommit='fe2731f24424a80e1c19d6293359eae2242c4c7c' recurse='false' sparse_paths=''"
time=2025-12-08T20:28:20.261Z level=INFO msg="[git checkout] execute: git config --global --add safe.directory /tmp/tmp.7CDvLE"
time=2025-12-08T20:28:20.263Z level=INFO msg="[git checkout] execute: git config --global --add safe.directory /home/build"
time=2025-12-08T20:28:20.265Z level=INFO msg="[git checkout] execute: git clone --quiet --origin=origin --config=user.name=Melange Build --config=user.email=melange-build@cgr.dev --config=advice.detachedHead=false --branch=v0.67.0 --depth=1 https://github.com/zarf-dev/zarf /tmp/tmp.7CDvLE"
time=2025-12-08T20:28:21.107Z level=WARN msg="warning: refs/tags/v0.67.0 0381f99ea36fab31c744ec6780fefe86654971f5 is not a commit!"
time=2025-12-08T20:28:21.242Z level=INFO msg="[git checkout] execute: cd /tmp/tmp.7CDvLE"
time=2025-12-08T20:28:21.242Z level=INFO msg="[git checkout] tar -c . | tar -C \"/home/build\" -x"
time=2025-12-08T20:28:21.347Z level=INFO msg="[git checkout] execute: cd /home/build"
time=2025-12-08T20:28:21.347Z level=INFO msg="[git checkout] execute: git config --global --add safe.directory /home/build"
time=2025-12-08T20:28:21.348Z level=INFO msg="[git checkout] execute: git fetch --quiet origin --depth=1 --no-tags +refs/tags/v0.67.0:refs/origin/tags/v0.67.0"
time=2025-12-08T20:28:21.558Z level=INFO msg="[git checkout] execute: git checkout --quiet origin/tags/v0.67.0"
time=2025-12-08T20:28:21.649Z level=INFO msg="[git checkout] tag v0.67.0 is fe2731f24424a80e1c19d6293359eae2242c4c7c"
time=2025-12-08T20:28:21.651Z level=INFO msg="running step \"go/bump\""
time=2025-12-08T20:28:21.663Z level=WARN msg="2025/12/08 20:28:20 Local Go version: 1.25.5"
time=2025-12-08T20:28:21.663Z level=WARN msg="2025/12/08 20:28:20 Running go mod tidy with go version '1.25.5' ..."
time=2025-12-08T20:28:30.989Z level=WARN msg="2025/12/08 20:28:30 Update package: github.com/sigstore/fulcio"
time=2025-12-08T20:28:30.989Z level=WARN msg="2025/12/08 20:28:30 Running go mod edit -droprequire ..."
time=2025-12-08T20:28:30.997Z level=WARN msg="2025/12/08 20:28:30 Running go get ..."
time=2025-12-08T20:28:32.345Z level=WARN msg="2025/12/08 20:28:31 Running go mod tidy with go version '1.25.5' ..."
time=2025-12-08T20:28:34.349Z level=WARN msg="go: warning: github.com/klauspost/compress@v1.18.1: retracted by module author: https://github.com/klauspost/compress/issues/1114"
time=2025-12-08T20:28:34.349Z level=WARN msg="go: to switch to the latest unretracted version, run:"
time=2025-12-08T20:28:34.349Z level=WARN msg="\tgo get github.com/klauspost/compress@latest"
time=2025-12-08T20:28:34.365Z level=INFO msg="running step \"go/build\""
time=2025-12-08T20:28:57.791Z level=WARN msg="# github.com/sigstore/cosign/v3/pkg/cosign"
time=2025-12-08T20:28:57.791Z level=WARN msg="/var/cache/melange/gomodcache/github.com/sigstore/cosign/v3@v3.0.2/pkg/cosign/keys.go:143:24: undefined: cryptoutils.ValidatePubKey"
time=2025-12-08T20:28:57.791Z level=WARN msg="/var/cache/melange/gomodcache/github.com/sigstore/cosign/v3@v3.0.2/pkg/cosign/keys.go:152:24: undefined: cryptoutils.ValidatePubKey"
time=2025-12-08T20:28:57.791Z level=WARN msg="/var/cache/melange/gomodcache/github.com/sigstore/cosign/v3@v3.0.2/pkg/cosign/keys.go:163:25: undefined: cryptoutils.ValidatePubKey"
time=2025-12-08T20:28:57.791Z level=WARN msg="/var/cache/melange/gomodcache/github.com/sigstore/cosign/v3@v3.0.2/pkg/cosign/keys.go:168:25: undefined: cryptoutils.ValidatePubKey"
time=2025-12-08T20:28:57.791Z level=WARN msg="/var/cache/melange/gomodcache/github.com/sigstore/cosign/v3@v3.0.2/pkg/cosign/keys.go:173:25: undefined: cryptoutils.ValidatePubKey"

aarch64 Logs

Click to expand 
=1.13.1-r0 nodejs-25=25.2.1-r0 nss-db=2.42-r4 nss-hesiod=2.42-r4 openssf-compiler-options=20250904-r2 pkgconf=2.5.1-r1 posix-cc-wrappers=2-r7 readline=8.3-r1 sqlite-libs=3.51.1-r0 wolfi-baselayout=20230201-r24 zlib=1.3.1-r51]"
time=2025-12-08T20:28:05.650Z level=INFO msg="  accounts:"
time=2025-12-08T20:28:05.650Z level=INFO msg="    runas:  "
time=2025-12-08T20:28:05.650Z level=INFO msg="    users:"
time=2025-12-08T20:28:05.650Z level=INFO msg="      - uid=1000(build) gid=1000"
time=2025-12-08T20:28:05.650Z level=INFO msg="    groups:"
time=2025-12-08T20:28:05.650Z level=INFO msg="      - gid=1000(build) members=[build]"
time=2025-12-08T20:28:05.650Z level=INFO msg="auth configured for: 0x19990f0"
time=2025-12-08T20:28:05.996Z level=INFO msg="installing wolfi-baselayout (20230201-r24)"
time=2025-12-08T20:28:06.019Z level=INFO msg="installing ca-certificates-bundle (20251003-r0)"
time=2025-12-08T20:28:06.019Z level=INFO msg="installing glibc-locale-posix (2.42-r4)"
time=2025-12-08T20:28:06.019Z level=INFO msg="installing libgcc (15.2.0-r6)"
time=2025-12-08T20:28:06.051Z level=INFO msg="installing glibc (2.42-r4)"
time=2025-12-08T20:28:06.051Z level=INFO msg="installing ld-linux (2.42-r4)"
time=2025-12-08T20:28:06.052Z level=INFO msg="installing ncurses-terminfo-base (6.5_p20251025-r1)"
time=2025-12-08T20:28:06.052Z level=INFO msg="installing ncurses (6.5_p20251025-r1)"
time=2025-12-08T20:28:06.062Z level=INFO msg="installing bash (5.3-r3)"
time=2025-12-08T20:28:06.062Z level=INFO msg="installing libstdc++ (15.2.0-r6)"
time=2025-12-08T20:28:06.063Z level=INFO msg="installing libzstd1 (1.5.7-r5)"
time=2025-12-08T20:28:07.040Z level=INFO msg="installing binutils (2.45.1-r2)"
time=2025-12-08T20:28:07.041Z level=INFO msg="installing libxcrypt (4.5.2-r0)"
time=2025-12-08T20:28:07.041Z level=INFO msg="installing libxcrypt-dev (4.5.2-r0)"
time=2025-12-08T20:28:07.042Z level=INFO msg="installing linux-headers (6.18-r0)"
time=2025-12-08T20:28:07.043Z level=INFO msg="installing nss-db (2.42-r4)"
time=2025-12-08T20:28:07.043Z level=INFO msg="installing nss-hesiod (2.42-r4)"
time=2025-12-08T20:28:07.044Z level=INFO msg="installing glibc-dev (2.42-r4)"
time=2025-12-08T20:28:07.044Z level=INFO msg="installing libquadmath (15.2.0-r6)"
time=2025-12-08T20:28:07.045Z level=INFO msg="installing libstdc++-dev (15.2.0-r6)"
time=2025-12-08T20:28:07.046Z level=INFO msg="installing openssf-compiler-options (20250904-r2)"
time=2025-12-08T20:28:07.046Z level=INFO msg="installing posix-cc-wrappers (2-r7)"
time=2025-12-08T20:28:07.046Z level=INFO msg="installing libatomic (15.2.0-r6)"
time=2025-12-08T20:28:07.047Z level=INFO msg="installing gmp (6.3.0-r8)"
time=2025-12-08T20:28:07.047Z level=INFO msg="installing libgomp (15.2.0-r6)"
time=2025-12-08T20:28:07.047Z level=INFO msg="installing isl (0.27-r4)"
time=2025-12-08T20:28:07.047Z level=INFO msg="installing mpfr (4.2.2-r2)"
time=2025-12-08T20:28:07.048Z level=INFO msg="installing mpc (1.3.1-r7)"
time=2025-12-08T20:28:07.048Z level=INFO msg="installing zlib (1.3.1-r51)"
time=2025-12-08T20:28:08.579Z level=INFO msg="installing gcc (15.2.0-r6)"
time=2025-12-08T20:28:08.581Z level=INFO msg="installing make (4.4.1-r8)"
time=2025-12-08T20:28:08.581Z level=INFO msg="installing pkgconf (2.5.1-r1)"
time=2025-12-08T20:28:08.582Z level=INFO msg="installing build-base (1-r9)"
time=2025-12-08T20:28:08.582Z level=INFO msg="installing libcrypt1 (2.42-r4)"
time=2025-12-08T20:28:08.582Z level=INFO msg="installing busybox (1.37.0-r50)"
time=2025-12-08T20:28:08.582Z level=INFO msg="installing c-ares (1.34.6-r0)"
time=2025-12-08T20:28:08.583Z level=INFO msg="installing libcrypto3 (3.6.0-r5)"
time=2025-12-08T20:28:08.583Z level=INFO msg="installing gdbm (1.26-r1)"
time=2025-12-08T20:28:08.583Z level=INFO msg="installing readline (8.3-r1)"
time=2025-12-08T20:28:08.583Z level=INFO msg="installing sqlite-libs (3.51.1-r0)"
time=2025-12-08T20:28:08.584Z level=INFO msg="installing heimdal-libs (7.8.0-r42)"
time=2025-12-08T20:28:08.584Z level=INFO msg="installing cyrus-sasl (2.1.28-r45)"
time=2025-12-08T20:28:08.584Z level=INFO msg="installing libbrotlicommon1 (1.2.0-r1)"
time=2025-12-08T20:28:08.584Z level=INFO msg="installing libbrotlidec1 (1.2.0-r1)"
time=2025-12-08T20:28:08.585Z level=INFO msg="installing krb5-conf (1.0-r7)"
time=2025-12-08T20:28:08.585Z level=INFO msg="installing libcom_err (1.47.3-r1)"
time=2025-12-08T20:28:08.585Z level=INFO msg="installing keyutils-libs (1.6.3-r37)"
time=2025-12-08T20:28:08.585Z level=INFO msg="installing libssl3 (3.6.0-r5)"
time=2025-12-08T20:28:08.586Z level=INFO msg="installing libverto (0.3.2-r6)"
time=2025-12-08T20:28:08.586Z level=INFO msg="installing krb5-libs (1.22.1-r1)"
time=2025-12-08T20:28:08.586Z level=INFO msg="installing libldap-2.6 (2.6.10-r7)"
time=2025-12-08T20:28:08.587Z level=INFO msg="installing libnghttp2-14 (1.68.0-r0)"
time=2025-12-08T20:28:08.587Z level=INFO msg="installing nghttp3 (1.13.1-r0)"
time=2025-12-08T20:28:08.587Z level=INFO msg="installing libunistring (1.4.1-r1)"
time=2025-12-08T20:28:08.587Z level=INFO msg="installing libidn2 (2.3.8-r3)"
time=2025-12-08T20:28:08.587Z level=INFO msg="installing libpsl (0.21.5-r6)"
time=2025-12-08T20:28:08.588Z level=INFO msg="installing libcurl-openssl4 (8.17.0-r0)"
time=2025-12-08T20:28:08.588Z level=INFO msg="installing libexpat1 (2.7.3-r0)"
time=2025-12-08T20:28:08.588Z level=INFO msg="installing libpcre2-8-0 (10.47-r0)"
time=2025-12-08T20:28:08.588Z level=INFO msg="installing git (2.52.0-r0)"
time=2025-12-08T20:28:08.589Z level=INFO msg="installing go-1.25 (1.25.5-r0)"
time=2025-12-08T20:28:08.598Z level=INFO msg="installing gobump (0.9.3-r3)"
time=2025-12-08T20:28:08.598Z level=INFO msg="installing icu78-data-full (78.1-r0)"
time=2025-12-08T20:28:08.598Z level=INFO msg="installing libbrotlienc1 (1.2.0-r1)"
time=2025-12-08T20:28:08.598Z level=INFO msg="installing libicu78 (78.1-r0)"
time=2025-12-08T20:28:08.599Z level=INFO msg="installing libuv (1.51.0-r2)"
time=2025-12-08T20:28:08.599Z level=INFO msg="installing nodejs-25 (25.2.1-r0)"
time=2025-12-08T20:28:10.276Z level=INFO msg="running step \"git-checkout\""
time=2025-12-08T20:28:10.283Z level=INFO msg="[git checkout] repo='https://github.com/zarf-dev/zarf' dest='.' depth='unset' branch='' tag='v0.67.0' expcommit='fe2731f24424a80e1c19d6293359eae2242c4c7c' recurse='false' sparse_paths=''"
time=2025-12-08T20:28:10.286Z level=INFO msg="[git checkout] execute: git config --global --add safe.directory /tmp/tmp.otfENO"
time=2025-12-08T20:28:10.287Z level=INFO msg="[git checkout] execute: git config --global --add safe.directory /home/build"
time=2025-12-08T20:28:10.288Z level=INFO msg="[git checkout] execute: git clone --quiet --origin=origin --config=user.name=Melange Build --config=user.email=melange-build@cgr.dev --config=advice.detachedHead=false --branch=v0.67.0 --depth=1 https://github.com/zarf-dev/zarf /tmp/tmp.otfENO"
time=2025-12-08T20:28:11.234Z level=WARN msg="warning: refs/tags/v0.67.0 0381f99ea36fab31c744ec6780fefe86654971f5 is not a commit!"
time=2025-12-08T20:28:11.324Z level=INFO msg="[git checkout] execute: cd /tmp/tmp.otfENO"
time=2025-12-08T20:28:11.324Z level=INFO msg="[git checkout] tar -c . | tar -C \"/home/build\" -x"
time=2025-12-08T20:28:11.396Z level=INFO msg="[git checkout] execute: cd /home/build"
time=2025-12-08T20:28:11.396Z level=INFO msg="[git checkout] execute: git config --global --add safe.directory /home/build"
time=2025-12-08T20:28:11.397Z level=INFO msg="[git checkout] execute: git fetch --quiet origin --depth=1 --no-tags +refs/tags/v0.67.0:refs/origin/tags/v0.67.0"
time=2025-12-08T20:28:11.611Z level=INFO msg="[git checkout] execute: git checkout --quiet origin/tags/v0.67.0"
time=2025-12-08T20:28:11.712Z level=INFO msg="[git checkout] tag v0.67.0 is fe2731f24424a80e1c19d6293359eae2242c4c7c"
time=2025-12-08T20:28:11.713Z level=INFO msg="running step \"go/bump\""
time=2025-12-08T20:28:11.721Z level=WARN msg="2025/12/08 20:28:11 Local Go version: 1.25.5"
time=2025-12-08T20:28:11.721Z level=WARN msg="2025/12/08 20:28:11 Running go mod tidy with go version '1.25.5' ..."
time=2025-12-08T20:28:23.134Z level=WARN msg="2025/12/08 20:28:23 Update package: github.com/sigstore/fulcio"
time=2025-12-08T20:28:23.134Z level=WARN msg="2025/12/08 20:28:23 Running go mod edit -droprequire ..."
time=2025-12-08T20:28:23.138Z level=WARN msg="2025/12/08 20:28:23 Running go get ..."
time=2025-12-08T20:28:24.321Z level=WARN msg="2025/12/08 20:28:24 Running go mod tidy with go version '1.25.5' ..."
time=2025-12-08T20:28:26.087Z level=WARN msg="go: warning: github.com/klauspost/compress@v1.18.1: retracted by module author: https://github.com/klauspost/compress/issues/1114"
time=2025-12-08T20:28:26.087Z level=WARN msg="go: to switch to the latest unretracted version, run:"
time=2025-12-08T20:28:26.087Z level=WARN msg="\tgo get github.com/klauspost/compress@latest"
time=2025-12-08T20:28:26.105Z level=INFO msg="running step \"go/build\""
time=2025-12-08T20:28:39.265Z level=WARN msg="# github.com/sigstore/cosign/v3/pkg/cosign"
time=2025-12-08T20:28:39.265Z level=WARN msg="/var/cache/melange/gomodcache/github.com/sigstore/cosign/v3@v3.0.2/pkg/cosign/keys.go:143:24: undefined: cryptoutils.ValidatePubKey"
time=2025-12-08T20:28:39.265Z level=WARN msg="/var/cache/melange/gomodcache/github.com/sigstore/cosign/v3@v3.0.2/pkg/cosign/keys.go:152:24: undefined: cryptoutils.ValidatePubKey"
time=2025-12-08T20:28:39.265Z level=WARN msg="/var/cache/melange/gomodcache/github.com/sigstore/cosign/v3@v3.0.2/pkg/cosign/keys.go:163:25: undefined: cryptoutils.ValidatePubKey"
time=2025-12-08T20:28:39.265Z level=WARN msg="/var/cache/melange/gomodcache/github.com/sigstore/cosign/v3@v3.0.2/pkg/cosign/keys.go:168:25: undefined: cryptoutils.ValidatePubKey"
time=2025-12-08T20:28:39.265Z level=WARN msg="/var/cache/melange/gomodcache/github.com/sigstore/cosign/v3@v3.0.2/pkg/cosign/keys.go:173:25: undefined: cryptoutils.ValidatePubKey"
failed to build: failed to build package: unable to run package zarf pipeline: unable to run pipeline: unable to run pipeline: exit status 1
build failed: failed to build package: unable to run package zarf pipeline: unable to run pipeline: unable to run pipeline: exit status 1

Indexes

https://apk.chainreg.biz/wolfi-presubmit/900c99cf7bb141c2de5bef8d1fdfe40a731c4212

❌ Failed Packages

  • ❌ zarf (error | 1m41s)

Packages

More Observability

Command

cg build log \
  --build-id 48375905-b907-45fe-a40e-102e6d058e23 \
  --project staging-images-183e \
  --cluster elastic-pre-a \
  --namespace pre-wolfi \
  --start 2025-12-08T20:25:49Z \
  --end 2025-12-08T20:39:44Z
View more details on Chainguard Internal Staging