Skip to content

zot/2.1.13-r0: cve remediation #77697

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
octo-sts wants to merge 1 commit into from

zot/2.1.13-r0: fix GHSA-4qg8-fj49-pxjh

61c5f5c
Select commit
Loading
Failed to load commit list.
Closed

zot/2.1.13-r0: cve remediation #77697

zot/2.1.13-r0: fix GHSA-4qg8-fj49-pxjh
61c5f5c
Select commit
Loading
Failed to load commit list.
Chainguard Internal / elastic-build (eco-2-28) completed Jan 15, 2026 in 4m 31s

Failed to build APKs

Build ID: 798d99c6-ded5-4dde-ae43-da1a9d56d9dc
Error: failed to build zot: building group: pod failed: build failed
did not test because building group: pod failed: build failed

Details

builds

x86_64 Logs

Click to expand 
nced Syft SBOM generation...
melange devel with runner qemu is building:
populating workspace /tmp/melange-workspace-1343855103 from zot
image configuration:
  contents:
    build repositories: [https://apk.cgr.dev/chainguard https://apk.cgr.dev/chainguard-2.28 https://apk.cgr.dev/chainguard-2.28-presubmit/92ec972601b43476c564edb0171d9a181d61bf78 https://apk.cgr.dev/chainguard-private]
    runtime repositories: []
    repositories: []
    keyring:      []
    packages:     [bash=5.3-r3 binutils=2.45.1-r2 build-base=1-r9 busybox=1.37.0-r50 ca-certificates-bundle=20251003-r2 ct-manylinux-2.28-gcc-14=1.28.0-r87 ct-manylinux-2.28=1.28.0-r87 curl=8.18.0-r0 cyrus-sasl=2.1.28-r45 gcc-14-default=14.3.0-r9 gcc-14=14.3.0-r9 gdbm=1.26-r1 gfortran-14=14.3.0-r9 git=2.52.0-r1 glibc-dev=2.42-r5 glibc-locale-posix=2.42-r5 glibc=2.42-r5 gmp=6.3.0-r8 go-1.25=1.25.5-r0 gobump=0.9.3-r3 heimdal-libs=7.8.0-r42 isl=0.27-r4 keyutils-libs=1.6.3-r37 krb5-conf=1.0-r7 krb5-libs=1.22.1-r1 ld-linux=2.42-r5 libbrotlicommon1=1.2.0-r1 libbrotlidec1=1.2.0-r1 libcom_err=1.47.3-r1 libcrypt1=2.42-r5 libcrypto3=3.6.0-r6 libcurl-openssl4=8.18.0-r0 libexpat1=2.7.3-r0 libgcc=15.2.0-r6 libgfortran-14=14.3.0-r9 libgfortran=15.2.0-r6 libidn2=2.3.8-r3 libldap-2.6=2.6.10-r7 libnghttp2-14=1.68.0-r0 libpcre2-8-0=10.47-r0 libpsl=0.21.5-r6 libquadmath=15.2.0-r6 libssl3=3.6.0-r6 libstdc++-14-dev=14.3.0-r9 libstdc++-14=14.3.0-r9 libstdc++=15.2.0-r6 libunistring=1.4.1-r1 libverto=0.3.2-r6 libxcrypt-dev=4.5.2-r0 libxcrypt=4.5.2-r0 libzstd1=1.5.7-r5 linux-headers=6.18.5-r0 make=4.4.1-r8 mpc=1.3.1-r7 mpfr=4.2.2-r2 ncurses-terminfo-base=6.6_p20251230-r0 ncurses=6.6_p20251230-r0 nghttp3=1.14.0-r0 nss-db=2.42-r5 nss-hesiod=2.42-r5 oldlibstdcxx-2.28=8.5.0-r1 openssf-compiler-options=20250904-r2 pkgconf=2.5.1-r1 posix-cc-wrappers=2-r7 readline=8.3-r1 scanelf=1.3.10-r0 sqlite-libs=3.51.1-r0 wolfi-baselayout=20230201-r26 zlib=1.3.1.2-r1]
  accounts:
    runas:  
    users:
      - uid=1000(build) gid=1000
    groups:
      - gid=1000(build) members=[build]
auth configured for: 0x223fa80
installing wolfi-baselayout (20230201-r26)
installing ca-certificates-bundle (20251003-r2)
installing libgcc (15.2.0-r6)
installing glibc-locale-posix (2.42-r5)
installing glibc (2.42-r5)
installing ld-linux (2.42-r5)
installing ncurses-terminfo-base (6.6_p20251230-r0)
installing ncurses (6.6_p20251230-r0)
installing bash (5.3-r3)
installing libstdc++ (15.2.0-r6)
installing libzstd1 (1.5.7-r5)
installing binutils (2.45.1-r2)
installing libquadmath (15.2.0-r6)
installing libstdc++-14 (14.3.0-r9)
installing libstdc++-14-dev (14.3.0-r9)
installing posix-cc-wrappers (2-r7)
installing gmp (6.3.0-r8)
installing isl (0.27-r4)
installing mpfr (4.2.2-r2)
installing mpc (1.3.1-r7)
installing zlib (1.3.1.2-r1)
installing libxcrypt (4.5.2-r0)
installing libxcrypt-dev (4.5.2-r0)
installing linux-headers (6.18.5-r0)
installing nss-db (2.42-r5)
installing nss-hesiod (2.42-r5)
installing glibc-dev (2.42-r5)
installing openssf-compiler-options (20250904-r2)
installing gcc-14 (14.3.0-r9)
installing libgfortran-14 (14.3.0-r9)
installing gfortran-14 (14.3.0-r9)
installing libgfortran (15.2.0-r6)
installing gcc-14-default (14.3.0-r9)
installing make (4.4.1-r8)
installing pkgconf (2.5.1-r1)
installing build-base (1-r9)
installing libcrypt1 (2.42-r5)
installing busybox (1.37.0-r50)
installing ct-manylinux-2.28-gcc-14 (1.28.0-r87)
installing oldlibstdcxx-2.28 (8.5.0-r1)
installing ct-manylinux-2.28 (1.28.0-r87)
installing libbrotlicommon1 (1.2.0-r1)
installing libbrotlidec1 (1.2.0-r1)
installing libcrypto3 (3.6.0-r6)
installing libcom_err (1.47.3-r1)
installing keyutils-libs (1.6.3-r37)
installing libssl3 (3.6.0-r6)
installing libverto (0.3.2-r6)
installing krb5-conf (1.0-r7)
installing krb5-libs (1.22.1-r1)
installing gdbm (1.26-r1)
installing readline (8.3-r1)
installing sqlite-libs (3.51.1-r0)
installing heimdal-libs (7.8.0-r42)
installing cyrus-sasl (2.1.28-r45)
installing libldap-2.6 (2.6.10-r7)
installing libnghttp2-14 (1.68.0-r0)
installing nghttp3 (1.14.0-r0)
installing libunistring (1.4.1-r1)
installing libidn2 (2.3.8-r3)
installing libpsl (0.21.5-r6)
installing libcurl-openssl4 (8.18.0-r0)
installing curl (8.18.0-r0)
installing libexpat1 (2.7.3-r0)
installing libpcre2-8-0 (10.47-r0)
installing git (2.52.0-r1)
installing go-1.25 (1.25.5-r0)
installing gobump (0.9.3-r3)
installing scanelf (1.3.10-r0)
qemu: generating ssh key pairs for ephemeral VM
qemu: generating SSH host key for VM
qemu: generating base initramfs
image configuration:
  contents:
    build repositories: [https://apk.cgr.dev/chainguard]
    runtime repositories: []
    repositories: []
    keyring:      []
    packages:     [microvm-init]
installing wolfi-baselayout (20230201-r26)
installing ca-certificates-bundle (20251003-r2)
installing libgcc (15.2.0-r6)
installing glibc-locale-posix (2.42-r5)
installing glibc (2.42-r5)
installing ld-linux (2.42-r5)
installing gnutar-rmt (1.35-r7)
installing gnutar (1.35-r7)
installing libattr1 (2.5.2-r54)
installing attr (2.5.2-r54)
installing zlib (1.3.1.2-r1)
installing libzstd1 (1.5.7-r5)
installing xz (5.8.2-r0)
installing libcrypto3 (3.6.0-r6)
installing kmod (34.2-r43)
installing libmnl (1.0.5-r6)
installing libbz2-1 (1.0.8-r21)
installing libelf (0.194-r0)
installing libbpf (1.6.2-r0)
installing libverto (0.3.2-r6)
installing krb5-conf (1.0-r7)
installing libcom_err (1.47.3-r1)
installing keyutils-libs (1.6.3-r37)
installing libssl3 (3.6.0-r6)
installing krb5-libs (1.22.1-r1)
installing libtirpc (1.3.7-r1)
installing libpcre2-8-0 (10.47-r0)
installing libsepol (3.9-r1)
installing libselinux (3.9-r1)
installing libnftnl (1.3.1-r0)
installing xtables (1.8.11-r32)
installing libcap (2.77-r1)
installing iproute2 (6.18.0-r0)
installing libstdc++ (15.2.0-r6)
installing inih (62-r1)
installing liburcu (0.15.5-r0)
installing libblkid (2.41.3-r0)
installing libuuid (2.41.3-r0)
installing xfsprogs-core (6.18.0-r0)
installing xfsprogs (6.18.0-r0)
installing libmount (2.41.3-r0)
installing mount (2.41.3-r0)
installing ncurses-terminfo-base (6.6_p20251230-r0)
installing ncurses (6.6_p20251230-r0)
installing setarch (2.41.3-r0)
installing libfdisk (2.41.3-r0)
installing sqlite-libs (3.51.1-r0)
installing util-linux (2.41.3-r0)
installing libsmartcols (2.41.3-r0)
installing util-linux-misc (2.41.3-r0)
installing libxcrypt (4.5.2-r0)
installing libcrypt1 (2.42-r5)
installing linux-pam (1.7.1-r4)
installing openssh-keygen (10.2_p1-r3)
installing openssh-server-config (10.2_p1-r3)
installing openssh-server (10.2_p1-r3)
installing busybox (1.37.0-r50)
installing microvm-init (0.0.1-r15)
qemu: starting VM
qemu: waiting for SSH
conn read: read tcp 127.0.0.1:60478->127.0.0.1:43899: i/o timeout
qemu: meta-data=/dev/vda               isize=512    agcount=8, agsize=1638400 blks
qemu:          =                       sectsz=4096  attr=2, projid32bit=1
qemu:          =                       crc=1        finobt=1, sparse=1, rmapbt=1
qemu:          =                       reflink=1    bigtime=1 inobtcount=1 nrext64=1
qemu:          =                       exchange=1   metadir=0
qemu: data     =                       bsize=4096   blocks=13107200, imaxpct=25
qemu:          =                       sunit=0      swidth=0 blks
qemu: naming   =version 2              bsize=4096   ascii-ci=0, ftype=1, parent=1
qemu: log      =internal log           bsize=4096   blocks=16384, version=2
qemu:          =                       sectsz=4096  sunit=1 blks, lazy-count=1
qemu: realtime =none                   extsz=4096   blocks=0, rtextents=0
qemu:          =                       rgcount=0    rgsize=0 extents
qemu:          =                       zoned=0      start=0 reserved=0
qemu: Discarding blocks...Done.
conn read: read tcp 127.0.0.1:60490->127.0.0.1:43899: i/o timeout
qemu: [INIT] Checking for init.d scripts...
qemu: [INIT] No /opt/melange/init.d directory (optional, skipping)
conn read: EOF
qemu: ssh-keygen: generating new host keys: RSA ECDSA 
qemu: Server listening on 0.0.0.0 port 2223.
qemu: Server listening on 0.0.0.0 port 22.
qemu: VM started successfully, SSH server is up
qemu: Connection closed by 10.0.2.2 port 39738
qemu: verifying VM host key against pre-provisioned key
qemu: Accepted publickey for root from 10.0.2.2 port 39742 ssh2: ECDSA SHA256:Wn3Ca8zW5/UH0MfZ8JNffx0AbJOGPG7cZFeAQZekgcM
qemu: VM host key successfully verified against pre-provisioned key
qemu: Connection closed by 10.0.2.2 port 39742
qemu: Accepted publickey for root from 10.0.2.2 port 39752 ssh2: ECDSA SHA256:Wn3Ca8zW5/UH0MfZ8JNffx0AbJOGPG7cZFeAQZekgcM
qemu: Accepted publickey for root from 10.0.2.2 port 58582 ssh2: ECDSA SHA256:Wn3Ca8zW5/UH0MfZ8JNffx0AbJOGPG7cZFeAQZekgcM
qemu: Accepted publickey for root from 10.0.2.2 port 39766 ssh2: ECDSA SHA256:Wn3Ca8zW5/UH0MfZ8JNffx0AbJOGPG7cZFeAQZekgcM
qemu: running kernel version: 6.16.10-r2-qemu-generic #Chainguard SMP PREEMPT_DYNAMIC Fri Oct  3 22:31:32 UTC 2025
qemu: setting up melange cachedir: ./melange-cache/
qemu: setting up local workspace
qemu: unmounting host workspace from guest
running step "git-checkout"
[git checkout] repo='https://github.com/project-zot/zot' dest='.' depth='unset' branch='' tag='v2.1.13' expcommit='4ad3fad3bceb70c8ebd1669b0962c177353339b2' recurse='false' sparse_paths=''
[git checkout] execute: git config --global --add safe.directory /tmp/tmp.SgubUA
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git clone --quiet --origin=origin --config=user.name=Melange Build [email protected] --config=advice.detachedHead=false --branch=v2.1.13 --depth=1 https://github.com/project-zot/zot /tmp/tmp.SgubUA
[git checkout] execute: cd /tmp/tmp.SgubUA
[git checkout] tar -c . | tar -C "/home/build" -x
[git checkout] execute: cd /home/build
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git fetch --quiet origin --depth=1 --no-tags +refs/tags/v2.1.13:refs/origin/tags/v2.1.13
[git checkout] execute: git checkout --quiet origin/tags/v2.1.13
[git checkout] tag v2.1.13 is 4ad3fad3bceb70c8ebd1669b0962c177353339b2
running step "go/bump"
2026/01/15 16:03:10 Running go mod tidy with go version '1.25.5' ...

aarch64 Logs

Click to expand 
qemu:          =                       sunit=0      swidth=0 blks
qemu: naming   =version 2              bsize=4096   ascii-ci=0, ftype=1, parent=1
qemu: log      =internal log           bsize=4096   blocks=16384, version=2
qemu:          =                       sectsz=4096  sunit=1 blks, lazy-count=1
qemu: realtime =none                   extsz=4096   blocks=0, rtextents=0
qemu:          =                       rgcount=0    rgsize=0 extents
qemu:          =                       zoned=0      start=0 reserved=0
qemu: Discarding blocks...Done.
conn read: read tcp 127.0.0.1:60490->127.0.0.1:43899: i/o timeout
qemu: [INIT] Checking for init.d scripts...
qemu: [INIT] No /opt/melange/init.d directory (optional, skipping)
conn read: EOF
qemu: ssh-keygen: generating new host keys: RSA ECDSA 
qemu: Server listening on 0.0.0.0 port 2223.
qemu: Server listening on 0.0.0.0 port 22.
qemu: VM started successfully, SSH server is up
qemu: Connection closed by 10.0.2.2 port 39738
qemu: verifying VM host key against pre-provisioned key
qemu: Accepted publickey for root from 10.0.2.2 port 39742 ssh2: ECDSA SHA256:Wn3Ca8zW5/UH0MfZ8JNffx0AbJOGPG7cZFeAQZekgcM
qemu: VM host key successfully verified against pre-provisioned key
qemu: Connection closed by 10.0.2.2 port 39742
qemu: Accepted publickey for root from 10.0.2.2 port 39752 ssh2: ECDSA SHA256:Wn3Ca8zW5/UH0MfZ8JNffx0AbJOGPG7cZFeAQZekgcM
qemu: Accepted publickey for root from 10.0.2.2 port 58582 ssh2: ECDSA SHA256:Wn3Ca8zW5/UH0MfZ8JNffx0AbJOGPG7cZFeAQZekgcM
qemu: Accepted publickey for root from 10.0.2.2 port 39766 ssh2: ECDSA SHA256:Wn3Ca8zW5/UH0MfZ8JNffx0AbJOGPG7cZFeAQZekgcM
qemu: running kernel version: 6.16.10-r2-qemu-generic #Chainguard SMP PREEMPT_DYNAMIC Fri Oct  3 22:31:32 UTC 2025
qemu: setting up melange cachedir: ./melange-cache/
qemu: setting up local workspace
qemu: unmounting host workspace from guest
running step "git-checkout"
[git checkout] repo='https://github.com/project-zot/zot' dest='.' depth='unset' branch='' tag='v2.1.13' expcommit='4ad3fad3bceb70c8ebd1669b0962c177353339b2' recurse='false' sparse_paths=''
[git checkout] execute: git config --global --add safe.directory /tmp/tmp.SgubUA
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git clone --quiet --origin=origin --config=user.name=Melange Build [email protected] --config=advice.detachedHead=false --branch=v2.1.13 --depth=1 https://github.com/project-zot/zot /tmp/tmp.SgubUA
[git checkout] execute: cd /tmp/tmp.SgubUA
[git checkout] tar -c . | tar -C "/home/build" -x
[git checkout] execute: cd /home/build
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git fetch --quiet origin --depth=1 --no-tags +refs/tags/v2.1.13:refs/origin/tags/v2.1.13
[git checkout] execute: git checkout --quiet origin/tags/v2.1.13
[git checkout] tag v2.1.13 is 4ad3fad3bceb70c8ebd1669b0962c177353339b2
running step "go/bump"
2026/01/15 16:03:10 Running go mod tidy with go version '1.25.5' ...
parsed env
using enhanced syft sbom melange runner
configuring puller identity "e2fa069c57acc83f3f2748a8bed50e44dff064dc/dcb8fb2f15475910"...
running command chainctl [auth login --audience apk.cgr.dev --identity e2fa069c57acc83f3f2748a8bed50e44dff064dc/dcb8fb2f15475910]
Successfully exchanged token.
Valid! Id: e2fa069c57acc83f3f2748a8bed50e44dff064dc/dcb8fb2f15475910
Updates are available for chainctl (current version: 0.2.192; latest: 0.2.193). To install, please run:
    $ chainctl update
command "chainctl" completed successfully
puller identity configured successfully
puller identity configured successfully
running build...
configuring enhanced Syft SBOM generation...
melange devel with runner bubblewrap is building:
populating workspace /tmp/melange-workspace-3527108583 from zot
image configuration:
  contents:
    build repositories: [https://apk.cgr.dev/chainguard https://apk.cgr.dev/chainguard-2.28 https://apk.cgr.dev/chainguard-2.28-presubmit/92ec972601b43476c564edb0171d9a181d61bf78 https://apk.cgr.dev/chainguard-private]
    runtime repositories: []
    repositories: []
    keyring:      []
    packages:     [bash=5.3-r3 binutils=2.45.1-r2 build-base=1-r9 busybox=1.37.0-r50 ca-certificates-bundle=20251003-r2 ct-manylinux-2.28-gcc-14=1.28.0-r87 ct-manylinux-2.28=1.28.0-r87 curl=8.18.0-r0 cyrus-sasl=2.1.28-r45 gcc-14-default=14.3.0-r9 gcc-14=14.3.0-r9 gdbm=1.26-r1 gfortran-14=14.3.0-r9 git=2.52.0-r1 glibc-dev=2.42-r5 glibc-locale-posix=2.42-r5 glibc=2.42-r5 gmp=6.3.0-r8 go-1.25=1.25.5-r0 gobump=0.9.3-r3 heimdal-libs=7.8.0-r42 isl=0.27-r4 keyutils-libs=1.6.3-r37 krb5-conf=1.0-r7 krb5-libs=1.22.1-r1 ld-linux=2.42-r5 libbrotlicommon1=1.2.0-r1 libbrotlidec1=1.2.0-r1 libcom_err=1.47.3-r1 libcrypt1=2.42-r5 libcrypto3=3.6.0-r6 libcurl-openssl4=8.18.0-r0 libexpat1=2.7.3-r0 libgcc=15.2.0-r6 libgfortran-14=14.3.0-r9 libgfortran=15.2.0-r6 libidn2=2.3.8-r3 libldap-2.6=2.6.10-r7 libnghttp2-14=1.68.0-r0 libpcre2-8-0=10.47-r0 libpsl=0.21.5-r6 libquadmath=15.2.0-r6 libssl3=3.6.0-r6 libstdc++-14-dev=14.3.0-r9 libstdc++-14=14.3.0-r9 libstdc++=15.2.0-r6 libunistring=1.4.1-r1 libverto=0.3.2-r6 libxcrypt-dev=4.5.2-r0 libxcrypt=4.5.2-r0 libzstd1=1.5.7-r5 linux-headers=6.18.5-r0 make=4.4.1-r8 mpc=1.3.1-r7 mpfr=4.2.2-r2 ncurses-terminfo-base=6.6_p20251230-r0 ncurses=6.6_p20251230-r0 nghttp3=1.14.0-r0 nss-db=2.42-r5 nss-hesiod=2.42-r5 oldlibstdcxx-2.28=8.5.0-r1 openssf-compiler-options=20250904-r2 pkgconf=2.5.1-r1 posix-cc-wrappers=2-r7 readline=8.3-r1 scanelf=1.3.10-r0 sqlite-libs=3.51.1-r0 wolfi-baselayout=20230201-r26 zlib=1.3.1.2-r1]
  accounts:
    runas:  
    users:
      - uid=1000(build) gid=1000
    groups:
      - gid=1000(build) members=[build]
auth configured for: 0x19e7090
installing wolfi-baselayout (20230201-r26)
installing ca-certificates-bundle (20251003-r2)
installing libgcc (15.2.0-r6)
installing glibc-locale-posix (2.42-r5)
installing glibc (2.42-r5)
installing ld-linux (2.42-r5)
installing ncurses-terminfo-base (6.6_p20251230-r0)
installing ncurses (6.6_p20251230-r0)
installing bash (5.3-r3)
installing libstdc++ (15.2.0-r6)
installing libzstd1 (1.5.7-r5)
installing binutils (2.45.1-r2)
installing libquadmath (15.2.0-r6)
installing libstdc++-14 (14.3.0-r9)
installing libstdc++-14-dev (14.3.0-r9)
installing posix-cc-wrappers (2-r7)
installing gmp (6.3.0-r8)
installing isl (0.27-r4)
installing mpfr (4.2.2-r2)
installing mpc (1.3.1-r7)
installing zlib (1.3.1.2-r1)
installing libxcrypt (4.5.2-r0)
installing libxcrypt-dev (4.5.2-r0)
installing linux-headers (6.18.5-r0)
installing nss-db (2.42-r5)
installing nss-hesiod (2.42-r5)
installing glibc-dev (2.42-r5)
installing openssf-compiler-options (20250904-r2)
installing gcc-14 (14.3.0-r9)
installing libgfortran-14 (14.3.0-r9)
installing gfortran-14 (14.3.0-r9)
installing libgfortran (15.2.0-r6)
installing gcc-14-default (14.3.0-r9)
installing make (4.4.1-r8)
installing pkgconf (2.5.1-r1)
installing build-base (1-r9)
installing libcrypt1 (2.42-r5)
installing busybox (1.37.0-r50)
installing ct-manylinux-2.28-gcc-14 (1.28.0-r87)
installing oldlibstdcxx-2.28 (8.5.0-r1)
installing ct-manylinux-2.28 (1.28.0-r87)
installing libbrotlicommon1 (1.2.0-r1)
installing libbrotlidec1 (1.2.0-r1)
installing libcrypto3 (3.6.0-r6)
installing libcom_err (1.47.3-r1)
installing keyutils-libs (1.6.3-r37)
installing libssl3 (3.6.0-r6)
installing libverto (0.3.2-r6)
installing krb5-conf (1.0-r7)
installing krb5-libs (1.22.1-r1)
installing gdbm (1.26-r1)
installing readline (8.3-r1)
installing sqlite-libs (3.51.1-r0)
installing heimdal-libs (7.8.0-r42)
installing cyrus-sasl (2.1.28-r45)
installing libldap-2.6 (2.6.10-r7)
installing libnghttp2-14 (1.68.0-r0)
installing nghttp3 (1.14.0-r0)
installing libunistring (1.4.1-r1)
installing libidn2 (2.3.8-r3)
installing libpsl (0.21.5-r6)
installing libcurl-openssl4 (8.18.0-r0)
installing curl (8.18.0-r0)
installing libexpat1 (2.7.3-r0)
installing libpcre2-8-0 (10.47-r0)
installing git (2.52.0-r1)
installing go-1.25 (1.25.5-r0)
installing gobump (0.9.3-r3)
installing scanelf (1.3.10-r0)
running step "git-checkout"
[git checkout] repo='https://github.com/project-zot/zot' dest='.' depth='unset' branch='' tag='v2.1.13' expcommit='4ad3fad3bceb70c8ebd1669b0962c177353339b2' recurse='false' sparse_paths=''
[git checkout] execute: git config --global --add safe.directory /tmp/tmp.EQAH6s
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git clone --quiet --origin=origin --config=user.name=Melange Build [email protected] --config=advice.detachedHead=false --branch=v2.1.13 --depth=1 https://github.com/project-zot/zot /tmp/tmp.EQAH6s
[git checkout] execute: cd /tmp/tmp.EQAH6s
[git checkout] tar -c . | tar -C "/home/build" -x
[git checkout] execute: cd /home/build
[git checkout] execute: git config --global --add safe.directory /home/build
[git checkout] execute: git fetch --quiet origin --depth=1 --no-tags +refs/tags/v2.1.13:refs/origin/tags/v2.1.13
[git checkout] execute: git checkout --quiet origin/tags/v2.1.13
[git checkout] tag v2.1.13 is 4ad3fad3bceb70c8ebd1669b0962c177353339b2
running step "go/bump"
2026/01/15 16:03:05 Running go mod tidy with go version '1.25.5' ...
2026/01/15 16:03:13 Update package: github.com/sigstore/timestamp-authority
2026/01/15 16:03:13 Running go mod edit -droprequire ...
2026/01/15 16:03:13 Running go get ...
Error: failed to run update. Error: failed to run 'go get': exit status 1 with output: go: github.com/sigstore/[email protected]: invalid version: go.mod has post-v2 module path "github.com/sigstore/timestamp-authority/v2" at revision v2.0.3
2026/01/15 16:03:14 failed to run update. Error: failed to run 'go get': exit status 1 with output: go: github.com/sigstore/[email protected]: invalid version: go.mod has post-v2 module path "github.com/sigstore/timestamp-authority/v2" at revision v2.0.3
failed to build: failed to build package: unable to run package zot pipeline: unable to run pipeline: unable to run pipeline: exit status 1
build failed: failed to build package: unable to run package zot pipeline: unable to run pipeline: unable to run pipeline: exit status 1

Indexes

https://apk.cgr.dev/chainguard-2.28-presubmit/92ec972601b43476c564edb0171d9a181d61bf78

❌ Failed Packages

  • ❌ zot (error | 29s)

Packages

More Observability

Command

cg build log \
  --build-id 798d99c6-ded5-4dde-ae43-da1a9d56d9dc \
  --project prod-eco-8de7 \
  --cluster elastic-pre \
  --namespace pre-eco-2-28 \
  --start 2026-01-15T15:58:53Z \
  --end 2026-01-15T16:13:24Z
View more details on Chainguard Internal