Run summary

Run passed.

1 passed.

bugabinga.net / go-vuln

fix(klops): make maintenance checks cwd independent

··

Result output · go-vuln

[luci] cache go-mod: miss
[luci] cache go-build: miss
[luci] step 1/2: GOTOOLCHAIN=local GOMAXPROCS=2 GOFLAGS=-p=2 GOMODCACHE=$PWD/.go-modcache GOCACHE=$PWD/.go-cache scripts/local/go.sh vuln services/luci
go modules: services/luci
go: downloading github.com/bmatcuk/doublestar/v4 v4.9.1
go: downloading github.com/robfig/cron/v3 v3.0.1
go: downloading github.com/sblinch/kdl-go v0.0.0-20260121213736-8b7053306ca6
go: downloading github.com/klauspost/compress v1.18.6
go: downloading golang.org/x/sys v0.48.0
go: downloading golang.org/x/vuln v1.8.0
go: downloading golang.org/x/telemetry v0.0.0-20260908163034-4bcc4b2ee518
go: downloading golang.org/x/mod v0.41.0
go: downloading golang.org/x/tools v0.50.0
go: downloading golang.org/x/sync v0.23.0
=== Symbol Results ===

No vulnerabilities found.

Your code is affected by 0 vulnerabilities.
This scan also found 0 vulnerabilities in packages you import and 1
vulnerability in modules you require, but your code doesn't appear to call these
vulnerabilities.
Use '-show verbose' for more details.
[luci] step 1/2 done in 55s
[luci] step 2/2: GOTOOLCHAIN=local GOMAXPROCS=2 GOFLAGS=-p=2 GOMODCACHE=$PWD/.go-modcache GOCACHE=$PWD/.go-cache scripts/local/go.sh vuln services/toad
go modules: services/toad
go: downloading github.com/godbus/dbus/v5 v5.2.2
No vulnerabilities found.
[luci] step 2/2 done in 5s

Complete raw log

Passed · 1 executions

PASSEDgo-vuln1m

Execution configuration

Imagedocker.io/library/golang:1.26

Matrixnone

Triggerschedule 0 3 * * 1

Commands

GOTOOLCHAIN=local GOMAXPROCS=2 GOFLAGS=-p=2 GOMODCACHE=$PWD/.go-modcache GOCACHE=$PWD/.go-cache scripts/local/go.sh vuln services/luci
GOTOOLCHAIN=local GOMAXPROCS=2 GOFLAGS=-p=2 GOMODCACHE=$PWD/.go-modcache GOCACHE=$PWD/.go-cache scripts/local/go.sh vuln services/toad

Job source · .ci/go.kdl

job "go-vuln" {
image "docker.io/library/golang:1.26"cache "go-mod" {
path ".go-modcache"key {
file "services/luci/go.sum"file "services/toad/go.sum"		}	}cache "go-build" {
path ".go-cache"key {
file "services/luci/go.sum"file "services/toad/go.sum"		}	}run "GOTOOLCHAIN=local GOMAXPROCS=2 GOFLAGS=-p=2 GOMODCACHE=$PWD/.go-modcache GOCACHE=$PWD/.go-cache scripts/local/go.sh vuln services/luci"run "GOTOOLCHAIN=local GOMAXPROCS=2 GOFLAGS=-p=2 GOMODCACHE=$PWD/.go-modcache GOCACHE=$PWD/.go-cache scripts/local/go.sh vuln services/toad"trigger {
schedule "0 3 * * 1"	}}

step timing

Step	Command	Time
1/2	GOTOOLCHAIN=local GOMAXPROCS=2 GOFLAGS=-p=2 GOMODCACHE=$PWD/.go-modcache GOCACHE=$PWD/.go-cache scripts/local/go.sh vuln services/luci	55s
2/2	GOTOOLCHAIN=local GOMAXPROCS=2 GOFLAGS=-p=2 GOMODCACHE=$PWD/.go-modcache GOCACHE=$PWD/.go-cache scripts/local/go.sh vuln services/toad	5s

Complete raw log

Log tail

[luci] cache go-mod: miss
[luci] cache go-build: miss
[luci] step 1/2: GOTOOLCHAIN=local GOMAXPROCS=2 GOFLAGS=-p=2 GOMODCACHE=$PWD/.go-modcache GOCACHE=$PWD/.go-cache scripts/local/go.sh vuln services/luci
go modules: services/luci
go: downloading github.com/bmatcuk/doublestar/v4 v4.9.1
go: downloading github.com/robfig/cron/v3 v3.0.1
go: downloading github.com/sblinch/kdl-go v0.0.0-20260121213736-8b7053306ca6
go: downloading github.com/klauspost/compress v1.18.6
go: downloading golang.org/x/sys v0.48.0
go: downloading golang.org/x/vuln v1.8.0
go: downloading golang.org/x/telemetry v0.0.0-20260908163034-4bcc4b2ee518
go: downloading golang.org/x/mod v0.41.0
go: downloading golang.org/x/tools v0.50.0
go: downloading golang.org/x/sync v0.23.0
=== Symbol Results ===

No vulnerabilities found.

Your code is affected by 0 vulnerabilities.
This scan also found 0 vulnerabilities in packages you import and 1
vulnerability in modules you require, but your code doesn't appear to call these
vulnerabilities.
Use '-show verbose' for more details.
[luci] step 1/2 done in 55s
[luci] step 2/2: GOTOOLCHAIN=local GOMAXPROCS=2 GOFLAGS=-p=2 GOMODCACHE=$PWD/.go-modcache GOCACHE=$PWD/.go-cache scripts/local/go.sh vuln services/toad
go modules: services/toad
go: downloading github.com/godbus/dbus/v5 v5.2.2
No vulnerabilities found.
[luci] step 2/2 done in 5s

Continue in CLI

Nushell command · read-only.

luci log dogir-maroj-tajug-hudad 001

Local Luci data access required · no execution.

All configuration at this revision

go.kdl @ 7e50

job "go-test" {
  image "docker.io/library/golang:1.26"
  cache "go-mod" {
    path ".go-modcache"
    key {
      file "services/luci/go.sum"
      file "services/toad/go.sum"
    }
  }
  cache "go-build" {
    path ".go-cache"
    key {
      file "services/luci/go.sum"
      file "services/toad/go.sum"
    }
  }
  run "GOTOOLCHAIN=local GOMAXPROCS=2 GOFLAGS=-p=2 GOMODCACHE=$PWD/.go-modcache GOCACHE=$PWD/.go-cache scripts/local/go.sh check read services/luci"
  run "GOTOOLCHAIN=local GOMAXPROCS=2 GOFLAGS=-p=2 GOMODCACHE=$PWD/.go-modcache GOCACHE=$PWD/.go-cache scripts/local/go.sh check read services/toad"
  trigger {
    push {
      branch "trunk"
      include "services/luci/**"
      include "services/toad/**"
      include "scripts/local/go.sh"
      include "scripts/local/check.sh"
      include "scripts/local/check-staged.sh"
      include "scripts/local/verify.sh"
      include "scripts/local/test-go-tooling.sh"
      include "lefthook.yml"
      include "justfile"
      include ".ci/**"
    }
  }
}

job "go-race" {
  image "docker.io/library/golang:1.26"
  cache "go-mod" {
    path ".go-modcache"
    key {
      file "services/luci/go.sum"
      file "services/toad/go.sum"
    }
  }
  cache "go-build" {
    path ".go-cache"
    key {
      file "services/luci/go.sum"
      file "services/toad/go.sum"
    }
  }
  run "GOTOOLCHAIN=local GOMAXPROCS=2 GOFLAGS=-p=2 GOMODCACHE=$PWD/.go-modcache GOCACHE=$PWD/.go-cache scripts/local/go.sh race services/luci"
  run "GOTOOLCHAIN=local GOMAXPROCS=2 GOFLAGS=-p=2 GOMODCACHE=$PWD/.go-modcache GOCACHE=$PWD/.go-cache scripts/local/go.sh race services/toad"
  trigger {
    push {
      branch "trunk"
      include "services/luci/**"
      include "services/toad/**"
      include "scripts/local/go.sh"
      include "scripts/local/check.sh"
      include "scripts/local/check-staged.sh"
      include "scripts/local/verify.sh"
      include "scripts/local/test-go-tooling.sh"
      include "lefthook.yml"
      include "justfile"
      include ".ci/**"
    }
  }
}

job "go-staticcheck" {
  image "docker.io/library/golang:1.26"
  cache "go-mod" {
    path ".go-modcache"
    key {
      file "services/luci/go.sum"
      file "services/toad/go.sum"
    }
  }
  cache "go-build" {
    path ".go-cache"
    key {
      file "services/luci/go.sum"
      file "services/toad/go.sum"
    }
  }
  run "GOTOOLCHAIN=local GOMAXPROCS=2 GOFLAGS=-p=2 GOMODCACHE=$PWD/.go-modcache GOCACHE=$PWD/.go-cache scripts/local/go.sh staticcheck services/luci"
  run "GOTOOLCHAIN=local GOMAXPROCS=2 GOFLAGS=-p=2 GOMODCACHE=$PWD/.go-modcache GOCACHE=$PWD/.go-cache scripts/local/go.sh staticcheck services/toad"
  trigger {
    push {
      branch "trunk"
      include "services/luci/**"
      include "services/toad/**"
      include "scripts/local/go.sh"
      include "scripts/local/check.sh"
      include "scripts/local/check-staged.sh"
      include "scripts/local/verify.sh"
      include "scripts/local/test-go-tooling.sh"
      include "lefthook.yml"
      include "justfile"
      include ".ci/**"
    }
  }
}

job "go-vuln" {
  image "docker.io/library/golang:1.26"
  cache "go-mod" {
    path ".go-modcache"
    key {
      file "services/luci/go.sum"
      file "services/toad/go.sum"
    }
  }
  cache "go-build" {
    path ".go-cache"
    key {
      file "services/luci/go.sum"
      file "services/toad/go.sum"
    }
  }
  run "GOTOOLCHAIN=local GOMAXPROCS=2 GOFLAGS=-p=2 GOMODCACHE=$PWD/.go-modcache GOCACHE=$PWD/.go-cache scripts/local/go.sh vuln services/luci"
  run "GOTOOLCHAIN=local GOMAXPROCS=2 GOFLAGS=-p=2 GOMODCACHE=$PWD/.go-modcache GOCACHE=$PWD/.go-cache scripts/local/go.sh vuln services/toad"
  trigger {
    schedule "0 3 * * 1"
  }
}

job "rust-fmt" {
  image "docker.io/library/rust:1.98.0-bookworm"
  run "rustup component add rustfmt && scripts/local/rust.sh fmt"
  trigger {
    push {
      branch "trunk"
      include "services/luigit/**"
      include "scripts/local/rust.sh"
      include "justfile"
      include ".ci/**"
    }
  }
}

job "rust-clippy" {
  image "docker.io/library/rust:1.98.0-bookworm"
  cache "cargo-luigit" {
    path ".cargo-home"
    key {
      file "services/luigit/Cargo.lock"
    }
  }
  run "rustup component add clippy && CARGO_HOME=$PWD/.cargo-home CARGO_BUILD_JOBS=2 scripts/local/rust.sh clippy"
  trigger {
    push {
      branch "trunk"
      include "services/luigit/**"
      include "scripts/local/rust.sh"
      include "justfile"
      include ".ci/**"
    }
  }
}

job "rust-test" {
  image "docker.io/library/rust:1.98.0-bookworm"
  cache "cargo-luigit" {
    path ".cargo-home"
    key {
      file "services/luigit/Cargo.lock"
    }
  }
  run "CARGO_HOME=$PWD/.cargo-home CARGO_BUILD_JOBS=2 scripts/local/rust.sh test"
  trigger {
    push {
      branch "trunk"
      include "services/luigit/**"
      include "scripts/local/rust.sh"
      include "justfile"
      include ".ci/**"
    }
  }
}

infra.kdl @ 7e50

job "infra-tofu-route" {
  image "docker.io/library/alpine:3.22.0"
  run "apk --root $PWD/.apk --initdb --keys-dir /etc/apk/keys --repositories-file /etc/apk/repositories --no-scripts --no-chown add --no-cache bash caddy git jq just opentofu"
  run "export PATH=$PWD/.apk/bin:$PWD/.apk/sbin:$PWD/.apk/usr/bin:$PWD/.apk/usr/sbin:$PATH LD_LIBRARY_PATH=$PWD/.apk/lib:$PWD/.apk/usr/lib; command -v tofu just caddy jq git && just --version && caddy version && jq --version && scripts/local/test-verify-infra.sh && just verify infra tofu-route"
  trigger {
    push {
      branch "trunk"
      include "*.tf"
      include "**/*.tf"
      include "*.tf.json"
      include "**/*.tf.json"
      include ".terraform.lock.hcl"
      include "modules/klops/**"
      include "services/toad/**"
      include "services/luigit/**"
      include "sites/index/**"
      include "sites/personal/**"
      include "sites/genie/**"
      include "sites/pkg/**"
      include "scripts/local/klops.sh"
      include "scripts/local/deploy-toad.sh"
      include "scripts/local/build-remote-image.sh"
      include "scripts/remote/**"
      include "assets/bugabinga.min.svg"
      include "assets/nugu.css"
      include "assets/jellyfin-branding.xml"
      include "assets/registry/index-BAkATJzA.css"
      include "assets/dawarich/application-b5a7662b4bd877f1de1fe5769d2b98adfa15a8095b784d392ae1154df6f3b865.js"
      include "scripts/local/verify-infra.sh"
      include "scripts/local/verify.sh"
      include "scripts/local/test-verify-infra.sh"
      include "justfile"
      include ".ci/infra.kdl"
    }
  }
}

job "infra-quadlets" {
  image "quay.io/podman/stable:v5.6.2"
  run "scripts/local/install-just.sh $PWD/.just"
  run "PATH=$PWD/.just:$PATH; command -v git just && test -x /usr/lib/systemd/system-generators/podman-system-generator && /usr/lib/systemd/system-generators/podman-system-generator --version && just --version && scripts/local/test-verify-infra.sh && just verify infra quadlets"
  trigger {
    push {
      branch "trunk"
      include "modules/klops/quadlets/**"
      include "modules/klops/ci-quadlets/**"
      include "modules/klops/templates/ddns.container.tftpl"
      include "modules/klops/templates/luci.container.tftpl"
      include "modules/klops/templates/soft-serve.container.tftpl"
      include "services/toad/deploy/*.container"
      include "services/toad/deploy/*.network"
      include "scripts/local/verify-infra.sh"
      include "scripts/local/install-just.sh"
      include "scripts/local/verify.sh"
      include "scripts/local/test-verify-infra.sh"
      include "justfile"
      include ".ci/infra.kdl"
    }
  }
}

shell.kdl @ 7e50

job "shell" {
  image "docker.io/library/alpine:3.22.0"
  run "apk --root $PWD/.apk --initdb --keys-dir /etc/apk/keys --repositories-file /etc/apk/repositories --no-scripts --no-chown add --no-cache bash git shfmt shellcheck"
  run "export PATH=$PWD/.apk/bin:$PWD/.apk/usr/bin:$PATH LD_LIBRARY_PATH=$PWD/.apk/lib:$PWD/.apk/usr/lib; bash --version && git --version && shfmt --version && shellcheck --version"
  run "PATH=$PWD/.apk/bin:$PWD/.apk/usr/bin:$PATH LD_LIBRARY_PATH=$PWD/.apk/lib:$PWD/.apk/usr/lib scripts/local/test-garbage-collection.sh && scripts/local/shell-check.sh read"
  trigger {
    push {
      branch "trunk"
      include "**/*.sh"
      include "*.sh"
      include "scripts/local/shell-check.sh"
      include ".ci/shell.kdl"
    }
  }
}