LUCIRUNSDOCSPUBLIC CI
Run summary

Run passed.

1 passed.

bugabinga.net / go-vuln

fix(network): add Valheim ingress and measured tunnel MTU

··
Result output · go-vuln
[luci] cache go-mod: miss
[luci] cache go-build: miss
Trying to pull docker.io/library/golang:1.26...
Getting image source signatures
Copying blob sha256:1f5e177ed30a03fc528255c4ac2625c4e4f8fecdf584f960fc39bc1d0ecf4e96
Copying blob sha256:4846f29007305297af653c57bf9b60ba8f676a38695c68d98460063442581671
Copying blob sha256:4dc3950125ebc9ed195e1101fc6c02e2fce113ba0f53bfb05b2cdf58747df9af
Copying blob sha256:dd1a1f41c277a4a2a4e9b68f696375e30f193cb22d93641d7ff37adee209b8f5
Copying blob sha256:62fe2e747f69f2f414c7e9eb1553155cf0a658398f0462557f458821dce2b29d
Copying blob sha256:8f7a3eec6e089822d07fd6e1e518d72c4348dab2c944e2d31f4a3f3b0e21a1d7
Copying blob sha256:4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1
Copying config sha256:5d8d6618be1c45f3c48f2b6f6e3144147010b2ca7ca106756834987cdac4e0f0
Writing manifest to image destination
[luci] step 1/2: GOTOOLCHAIN=local GOMAXPROCS=2 GOFLAGS=-p=2 GOMODCACHE=$PWD/.go-modcache GOCACHE=$PWD/.go-cache scripts/local/go.sh vuln services/luci
go modules: services/luci
go: downloading github.com/moby/patternmatcher v0.6.1
go: downloading github.com/bmatcuk/doublestar/v4 v4.9.1
go: downloading github.com/robfig/cron/v3 v3.0.1
go: downloading github.com/sblinch/kdl-go v0.0.0-20260121213736-8b7053306ca6
go: downloading github.com/klauspost/compress v1.18.6
go: downloading golang.org/x/sys v0.48.0
go: downloading golang.org/x/vuln v1.8.0
go: downloading golang.org/x/telemetry v0.0.0-20260908163034-4bcc4b2ee518
go: downloading golang.org/x/mod v0.41.0
go: downloading golang.org/x/tools v0.50.0
go: downloading golang.org/x/sync v0.23.0
=== Symbol Results ===

No vulnerabilities found.

Your code is affected by 0 vulnerabilities.
This scan also found 0 vulnerabilities in packages you import and 1
vulnerability in modules you require, but your code doesn't appear to call these
vulnerabilities.
Use '-show verbose' for more details.
[luci] step 1/2 done in 56s
[luci] step 2/2: GOTOOLCHAIN=local GOMAXPROCS=2 GOFLAGS=-p=2 GOMODCACHE=$PWD/.go-modcache GOCACHE=$PWD/.go-cache scripts/local/go.sh vuln services/toad
go modules: services/toad
go: downloading github.com/godbus/dbus/v5 v5.2.2
No vulnerabilities found.
[luci] step 2/2 done in 5s

Complete raw log

Passed · 1 executions
PASSEDgo-vuln1m

Execution configuration

Imagedocker.io/library/golang:1.26

Matrixnone

Triggerschedule 0 3 * * 1

Commands

GOTOOLCHAIN=local GOMAXPROCS=2 GOFLAGS=-p=2 GOMODCACHE=$PWD/.go-modcache GOCACHE=$PWD/.go-cache scripts/local/go.sh vuln services/luci
GOTOOLCHAIN=local GOMAXPROCS=2 GOFLAGS=-p=2 GOMODCACHE=$PWD/.go-modcache GOCACHE=$PWD/.go-cache scripts/local/go.sh vuln services/toad
Job source · .ci/go.kdl
job "go-vuln" {
image "docker.io/library/golang:1.26"cache "go-mod" {
path ".go-modcache"key {
file "services/luci/go.sum"file "services/toad/go.sum"		}	}cache "go-build" {
path ".go-cache"key {
file "services/luci/go.sum"file "services/toad/go.sum"		}	}run "GOTOOLCHAIN=local GOMAXPROCS=2 GOFLAGS=-p=2 GOMODCACHE=$PWD/.go-modcache GOCACHE=$PWD/.go-cache scripts/local/go.sh vuln services/luci"run "GOTOOLCHAIN=local GOMAXPROCS=2 GOFLAGS=-p=2 GOMODCACHE=$PWD/.go-modcache GOCACHE=$PWD/.go-cache scripts/local/go.sh vuln services/toad"trigger {
schedule "0 3 * * 1"	}}
step timing
StepCommandTime
1/2GOTOOLCHAIN=local GOMAXPROCS=2 GOFLAGS=-p=2 GOMODCACHE=$PWD/.go-modcache GOCACHE=$PWD/.go-cache scripts/local/go.sh vuln services/luci56s
2/2GOTOOLCHAIN=local GOMAXPROCS=2 GOFLAGS=-p=2 GOMODCACHE=$PWD/.go-modcache GOCACHE=$PWD/.go-cache scripts/local/go.sh vuln services/toad5s

Complete raw log

Log tail
[luci] cache go-mod: miss
[luci] cache go-build: miss
Trying to pull docker.io/library/golang:1.26...
Getting image source signatures
Copying blob sha256:1f5e177ed30a03fc528255c4ac2625c4e4f8fecdf584f960fc39bc1d0ecf4e96
Copying blob sha256:4846f29007305297af653c57bf9b60ba8f676a38695c68d98460063442581671
Copying blob sha256:4dc3950125ebc9ed195e1101fc6c02e2fce113ba0f53bfb05b2cdf58747df9af
Copying blob sha256:dd1a1f41c277a4a2a4e9b68f696375e30f193cb22d93641d7ff37adee209b8f5
Copying blob sha256:62fe2e747f69f2f414c7e9eb1553155cf0a658398f0462557f458821dce2b29d
Copying blob sha256:8f7a3eec6e089822d07fd6e1e518d72c4348dab2c944e2d31f4a3f3b0e21a1d7
Copying blob sha256:4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1
Copying config sha256:5d8d6618be1c45f3c48f2b6f6e3144147010b2ca7ca106756834987cdac4e0f0
Writing manifest to image destination
[luci] step 1/2: GOTOOLCHAIN=local GOMAXPROCS=2 GOFLAGS=-p=2 GOMODCACHE=$PWD/.go-modcache GOCACHE=$PWD/.go-cache scripts/local/go.sh vuln services/luci
go modules: services/luci
go: downloading github.com/moby/patternmatcher v0.6.1
go: downloading github.com/bmatcuk/doublestar/v4 v4.9.1
go: downloading github.com/robfig/cron/v3 v3.0.1
go: downloading github.com/sblinch/kdl-go v0.0.0-20260121213736-8b7053306ca6
go: downloading github.com/klauspost/compress v1.18.6
go: downloading golang.org/x/sys v0.48.0
go: downloading golang.org/x/vuln v1.8.0
go: downloading golang.org/x/telemetry v0.0.0-20260908163034-4bcc4b2ee518
go: downloading golang.org/x/mod v0.41.0
go: downloading golang.org/x/tools v0.50.0
go: downloading golang.org/x/sync v0.23.0
=== Symbol Results ===

No vulnerabilities found.

Your code is affected by 0 vulnerabilities.
This scan also found 0 vulnerabilities in packages you import and 1
vulnerability in modules you require, but your code doesn't appear to call these
vulnerabilities.
Use '-show verbose' for more details.
[luci] step 1/2 done in 56s
[luci] step 2/2: GOTOOLCHAIN=local GOMAXPROCS=2 GOFLAGS=-p=2 GOMODCACHE=$PWD/.go-modcache GOCACHE=$PWD/.go-cache scripts/local/go.sh vuln services/toad
go modules: services/toad
go: downloading github.com/godbus/dbus/v5 v5.2.2
No vulnerabilities found.
[luci] step 2/2 done in 5s
Continue in CLI

Nushell command · read-only.

luci log dogiz-susaj-sojif-hukoz 001

Local Luci data access required · no execution.

All configuration at this revision
go.kdl @ ce58
job "go-test" {
  image "docker.io/library/golang:1.26"
  cache "go-mod" {
    path ".go-modcache"
    key {
      file "services/luci/go.sum"
      file "services/toad/go.sum"
    }
  }
  cache "go-build" {
    path ".go-cache"
    key {
      file "services/luci/go.sum"
      file "services/toad/go.sum"
    }
  }
  run "GOTOOLCHAIN=local GOMAXPROCS=2 GOFLAGS=-p=2 GOMODCACHE=$PWD/.go-modcache GOCACHE=$PWD/.go-cache scripts/local/go.sh check read services/luci"
  run "GOTOOLCHAIN=local GOMAXPROCS=2 GOFLAGS=-p=2 GOMODCACHE=$PWD/.go-modcache GOCACHE=$PWD/.go-cache scripts/local/go.sh check read services/toad"
  trigger {
    push {
      branch "trunk"
      include "services/luci/**"
      include "services/toad/**"
      include "scripts/local/go.sh"
      include "scripts/local/check.sh"
      include "scripts/local/check-staged.sh"
      include "scripts/local/verify.sh"
      include "scripts/local/test-go-tooling.sh"
      include "lefthook.yml"
      include "justfile"
      include ".ci/**"
    }
  }
}

job "go-race" {
  image "docker.io/library/golang:1.26"
  cache "go-mod" {
    path ".go-modcache"
    key {
      file "services/luci/go.sum"
      file "services/toad/go.sum"
    }
  }
  cache "go-build" {
    path ".go-cache"
    key {
      file "services/luci/go.sum"
      file "services/toad/go.sum"
    }
  }
  run "GOTOOLCHAIN=local GOMAXPROCS=2 GOFLAGS=-p=2 GOMODCACHE=$PWD/.go-modcache GOCACHE=$PWD/.go-cache scripts/local/go.sh race services/luci"
  run "GOTOOLCHAIN=local GOMAXPROCS=2 GOFLAGS=-p=2 GOMODCACHE=$PWD/.go-modcache GOCACHE=$PWD/.go-cache scripts/local/go.sh race services/toad"
  trigger {
    push {
      branch "trunk"
      include "services/luci/**"
      include "services/toad/**"
      include "scripts/local/go.sh"
      include "scripts/local/check.sh"
      include "scripts/local/check-staged.sh"
      include "scripts/local/verify.sh"
      include "scripts/local/test-go-tooling.sh"
      include "lefthook.yml"
      include "justfile"
      include ".ci/**"
    }
  }
}

job "go-staticcheck" {
  image "docker.io/library/golang:1.26"
  cache "go-mod" {
    path ".go-modcache"
    key {
      file "services/luci/go.sum"
      file "services/toad/go.sum"
    }
  }
  cache "go-build" {
    path ".go-cache"
    key {
      file "services/luci/go.sum"
      file "services/toad/go.sum"
    }
  }
  run "GOTOOLCHAIN=local GOMAXPROCS=2 GOFLAGS=-p=2 GOMODCACHE=$PWD/.go-modcache GOCACHE=$PWD/.go-cache scripts/local/go.sh staticcheck services/luci"
  run "GOTOOLCHAIN=local GOMAXPROCS=2 GOFLAGS=-p=2 GOMODCACHE=$PWD/.go-modcache GOCACHE=$PWD/.go-cache scripts/local/go.sh staticcheck services/toad"
  trigger {
    push {
      branch "trunk"
      include "services/luci/**"
      include "services/toad/**"
      include "scripts/local/go.sh"
      include "scripts/local/check.sh"
      include "scripts/local/check-staged.sh"
      include "scripts/local/verify.sh"
      include "scripts/local/test-go-tooling.sh"
      include "lefthook.yml"
      include "justfile"
      include ".ci/**"
    }
  }
}

job "go-vuln" {
  image "docker.io/library/golang:1.26"
  cache "go-mod" {
    path ".go-modcache"
    key {
      file "services/luci/go.sum"
      file "services/toad/go.sum"
    }
  }
  cache "go-build" {
    path ".go-cache"
    key {
      file "services/luci/go.sum"
      file "services/toad/go.sum"
    }
  }
  run "GOTOOLCHAIN=local GOMAXPROCS=2 GOFLAGS=-p=2 GOMODCACHE=$PWD/.go-modcache GOCACHE=$PWD/.go-cache scripts/local/go.sh vuln services/luci"
  run "GOTOOLCHAIN=local GOMAXPROCS=2 GOFLAGS=-p=2 GOMODCACHE=$PWD/.go-modcache GOCACHE=$PWD/.go-cache scripts/local/go.sh vuln services/toad"
  trigger {
    schedule "0 3 * * 1"
  }
}

job "rust-fmt" {
  image "docker.io/library/rust:1.98.0-bookworm"
  run "rustup component add rustfmt && scripts/local/rust.sh fmt"
  trigger {
    push {
      branch "trunk"
      include "services/luigit/**"
      include "scripts/local/rust.sh"
      include "justfile"
      include ".ci/**"
    }
  }
}

job "rust-clippy" {
  image "docker.io/library/rust:1.98.0-bookworm"
  cache "cargo-luigit" {
    path ".cargo-home"
    key {
      file "services/luigit/Cargo.lock"
    }
  }
  run "rustup component add clippy && CARGO_HOME=$PWD/.cargo-home CARGO_BUILD_JOBS=2 scripts/local/rust.sh clippy"
  trigger {
    push {
      branch "trunk"
      include "services/luigit/**"
      include "scripts/local/rust.sh"
      include "justfile"
      include ".ci/**"
    }
  }
}

job "rust-test" {
  image "docker.io/library/rust:1.98.0-bookworm"
  cache "cargo-luigit" {
    path ".cargo-home"
    key {
      file "services/luigit/Cargo.lock"
    }
  }
  run "CARGO_HOME=$PWD/.cargo-home CARGO_BUILD_JOBS=2 scripts/local/rust.sh test"
  trigger {
    push {
      branch "trunk"
      include "services/luigit/**"
      include "scripts/local/rust.sh"
      include "justfile"
      include ".ci/**"
    }
  }
}
infra.kdl @ ce58
job "infra-tofu-route" {
  image "docker.io/library/alpine:3.22.0"
  run "apk --root $PWD/.apk --initdb --keys-dir /etc/apk/keys --repositories-file /etc/apk/repositories --no-scripts --no-chown add --no-cache bash caddy git jq just opentofu"
  run "export PATH=$PWD/.apk/bin:$PWD/.apk/sbin:$PWD/.apk/usr/bin:$PWD/.apk/usr/sbin:$PATH LD_LIBRARY_PATH=$PWD/.apk/lib:$PWD/.apk/usr/lib; command -v tofu just caddy jq git && just --version && caddy version && jq --version && scripts/local/test-verify-infra.sh && just verify infra tofu-route"
  trigger {
    push {
      branch "trunk"
      include "*.tf"
      include "**/*.tf"
      include "*.tf.json"
      include "**/*.tf.json"
      include ".terraform.lock.hcl"
      include "modules/klops/**"
      include "services/toad/**"
      include "services/luigit/**"
      include "sites/index/**"
      include "sites/personal/**"
      include "sites/genie/**"
      include "sites/pkg/**"
      include "scripts/local/klops.sh"
      include "scripts/local/deploy-toad.sh"
      include "scripts/local/build-remote-image.sh"
      include "scripts/remote/**"
      include "assets/bugabinga.min.svg"
      include "assets/nugu.css"
      include "assets/jellyfin-branding.xml"
      include "assets/registry/index-BAkATJzA.css"
      include "assets/dawarich/application-b5a7662b4bd877f1de1fe5769d2b98adfa15a8095b784d392ae1154df6f3b865.js"
      include "scripts/local/verify-infra.sh"
      include "scripts/local/verify.sh"
      include "scripts/local/test-verify-infra.sh"
      include "justfile"
      include ".ci/infra.kdl"
    }
  }
}

job "infra-quadlets" {
  image "quay.io/podman/stable:v5.6.2"
  run "scripts/local/install-just.sh $PWD/.just"
  run "PATH=$PWD/.just:$PATH; command -v git just && test -x /usr/lib/systemd/system-generators/podman-system-generator && /usr/lib/systemd/system-generators/podman-system-generator --version && just --version && scripts/local/test-verify-infra.sh && just verify infra quadlets"
  trigger {
    push {
      branch "trunk"
      include "modules/klops/quadlets/**"
      include "modules/klops/ci-quadlets/**"
      include "modules/klops/templates/ddns.container.tftpl"
      include "modules/klops/templates/luci.container.tftpl"
      include "modules/klops/templates/soft-serve.container.tftpl"
      include "services/toad/deploy/*.container"
      include "services/toad/deploy/*.network"
      include "scripts/local/verify-infra.sh"
      include "scripts/local/install-just.sh"
      include "scripts/local/verify.sh"
      include "scripts/local/test-verify-infra.sh"
      include "justfile"
      include ".ci/infra.kdl"
    }
  }
}
shell.kdl @ ce58
job "shell" {
  image "docker.io/library/alpine:3.22.0"
  run "apk --root $PWD/.apk --initdb --keys-dir /etc/apk/keys --repositories-file /etc/apk/repositories --no-scripts --no-chown add --no-cache bash git shfmt shellcheck"
  run "export PATH=$PWD/.apk/bin:$PWD/.apk/usr/bin:$PATH LD_LIBRARY_PATH=$PWD/.apk/lib:$PWD/.apk/usr/lib; bash --version && git --version && shfmt --version && shellcheck --version"
  run "PATH=$PWD/.apk/bin:$PWD/.apk/usr/bin:$PATH LD_LIBRARY_PATH=$PWD/.apk/lib:$PWD/.apk/usr/lib scripts/local/test-garbage-collection.sh && scripts/local/shell-check.sh read"
  trigger {
    push {
      branch "trunk"
      include "**/*.sh"
      include "*.sh"
      include "scripts/local/shell-check.sh"
      include ".ci/shell.kdl"
    }
  }
}