From 3c0a33c1a0c189728ebd7d0673ce70bb35be9744 Mon Sep 17 00:00:00 2001 From: kisfenyo Date: Wed, 28 Oct 2026 13:08:41 +0100 Subject: [PATCH] R-1334 evidence: dry run 2459 log --- .../part1/dry-2459-after-other-runner.log | 271 ++++++++++++++++++ 1 file changed, 271 insertions(+) create mode 100644 documentation/audits/dockerhub-bigsteps-2026-10-28/part1/dry-2459-after-other-runner.log diff --git a/documentation/audits/dockerhub-bigsteps-2026-10-28/part1/dry-2459-after-other-runner.log b/documentation/audits/dockerhub-bigsteps-2026-10-28/part1/dry-2459-after-other-runner.log new file mode 100644 index 00000000..e02628fb --- /dev/null +++ b/documentation/audits/dockerhub-bigsteps-2026-10-28/part1/dry-2459-after-other-runner.log @@ -0,0 +1,271 @@ +2026-10-28T12:00:46.5409701Z felhom-gates-runner(version:v0.6.1) received task 2483 of job watch, be triggered by event: workflow_dispatch +2026-10-28T12:00:46.5422394Z workflow prepared +2026-10-28T12:00:46.5423739Z evaluating expression 'success()' +2026-10-28T12:00:46.5424693Z expression 'success()' evaluated to 'true' +2026-10-28T12:00:46.5431767Z evaluating expression '' +2026-10-28T12:00:46.5432232Z expression '' evaluated to 'true' +2026-10-28T12:00:46.5432477Z ⭐ Run Main Fetch main (latest, for the memory) and the two sibling repos +2026-10-28T12:00:46.5436130Z Wrote command \n\necho "WATCH_STARTED_AT=$(date +%s)" >> "$GITHUB_ENV"\nbase=http://gitea.gitea-system.svc.cluster.local:3000/admin\ngit init -q . && git remote add origin $base/felhom.eu.git\ngit fetch -q --depth 1 origin main && git checkout -q -B main FETCH_HEAD\necho "felhom.eu main at $(git rev-parse --short=12 HEAD)"\nfor r in felhom-controller app-catalog-felhom.eu; do\n git init -q ../$r && git -C ../$r remote add origin $base/$r.git\n git -C ../$r fetch -q --depth 1 origin main && git -C ../$r checkout -q FETCH_HEAD\n echo "$r at $(git -C ../$r rev-parse --short=12 HEAD)"\ndone\n\n\n to 'workflow/0.sh' +2026-10-28T12:00:46.5437293Z ::group::Run echo "WATCH_STARTED_AT=$(date +%s)" >> "$GITHUB_ENV" +2026-10-28T12:00:46.5437525Z echo "WATCH_STARTED_AT=$(date +%s)" >> "$GITHUB_ENV" +2026-10-28T12:00:46.5437687Z base=http://gitea.gitea-system.svc.cluster.local:3000/admin +2026-10-28T12:00:46.5437812Z git init -q . && git remote add origin $base/felhom.eu.git +2026-10-28T12:00:46.5437929Z git fetch -q --depth 1 origin main && git checkout -q -B main FETCH_HEAD +2026-10-28T12:00:46.5438048Z echo "felhom.eu main at $(git rev-parse --short=12 HEAD)" +2026-10-28T12:00:46.5438173Z for r in felhom-controller app-catalog-felhom.eu; do +2026-10-28T12:00:46.5438288Z git init -q ../$r && git -C ../$r remote add origin $base/$r.git +2026-10-28T12:00:46.5438403Z git -C ../$r fetch -q --depth 1 origin main && git -C ../$r checkout -q FETCH_HEAD +2026-10-28T12:00:46.5438538Z echo "$r at $(git -C ../$r rev-parse --short=12 HEAD)" +2026-10-28T12:00:46.5438650Z done +2026-10-28T12:00:46.5438747Z shell: bash --noprofile --norc -e -o pipefail {0} +2026-10-28T12:00:46.5438878Z ::endgroup:: +2026-10-28T12:01:23.5016827Z felhom.eu main at fe677bae9415 +2026-10-28T12:01:25.6366262Z felhom-controller at ed3927f03a52 +2026-10-28T12:01:26.5667050Z app-catalog-felhom.eu at 0829994440ca +2026-10-28T12:01:26.5693927Z ::group::Run set -u +2026-10-28T12:01:26.5694317Z set -u +2026-10-28T12:01:26.5694546Z mkdir -p documentation/security-watch +2026-10-28T12:01:26.5694764Z mode="${MODE:-run}" +2026-10-28T12:01:26.5695012Z [ "${GITHUB_EVENT_NAME:-}" = "schedule" ] && mode=run +2026-10-28T12:01:26.5695227Z echo "mode: $mode" +2026-10-28T12:01:26.5695412Z case "$mode" in +2026-10-28T12:01:26.5695665Z test-mail) python3 scripts/security_watch.py --test-mail; exit $? ;; +2026-10-28T12:01:26.5695895Z dry) extra="--no-mail" ; state=/tmp/state-dry.json +2026-10-28T12:01:26.5696103Z cp documentation/security-watch/state.json "$state" 2>/dev/null || true ;; +2026-10-28T12:01:26.5696329Z seed) extra="--seed" ; state=documentation/security-watch/state.json ;; +2026-10-28T12:01:26.5696598Z run) extra="" ; state=documentation/security-watch/state.json ;; +2026-10-28T12:01:26.5696818Z *) echo "unknown mode $mode"; exit 2 ;; +2026-10-28T12:01:26.5697006Z esac +2026-10-28T12:01:26.5697209Z python3 scripts/security_watch.py --state="$state" --catalog=../app-catalog-felhom.eu \ +2026-10-28T12:01:26.5697447Z --controller=../felhom-controller --json=/tmp/watch-results.json $extra +2026-10-28T12:01:26.5697669Z shell: bash --noprofile --norc -e -o pipefail {0} +2026-10-28T12:01:26.5697920Z env: +2026-10-28T12:01:26.5698109Z RESEND_API_KEY: *** +2026-10-28T12:01:26.5698321Z GH_ADVISORY_TOKEN: *** +2026-10-28T12:01:26.5698526Z MODE: dry +2026-10-28T12:01:26.5698742Z FELHOM_WHEEL_FETCH: 1 +2026-10-28T12:01:26.5698922Z ::endgroup:: +2026-10-28T12:01:26.5739323Z mode: dry +2026-10-28T12:01:26.7660320Z /root/.cache/act/11ac34485efd370e/hostexecutor/scripts/security_watch.py:905: DeprecationWarning: datetime.datetime.utcnow() is deprecated and scheduled for removal in a future version. Use timezone-aware objects to represent datetimes in UTC: datetime.datetime.now(datetime.UTC). +2026-10-28T12:01:26.7661677Z today = datetime.date.fromisoformat(opts["today"]) if "today" in opts else datetime.datetime.utcnow().date() +2026-10-28T12:01:26.8191595Z security watch 2026-10-28: 197 pins (11 box/build, 97 app, 89 DooPlex); GitHub key PRESENT — every repo's advisories tonight +2026-10-28T12:02:04.9781238Z RUNTIME-READ golang:1.27.3-trixie 19 s ok +2026-10-28T12:04:20.3838872Z RUNTIME-READ ghcr.io/immich-app/immich-server:v3.3.5 69 s NOT CHECKED: blob sha256:845df800fea0: HTTP 429 +2026-10-28T12:04:26.7947758Z RUNTIME-READ ghost:6.73.0-alpine 85 s ok +2026-10-28T12:04:29.8329970Z RUNTIME-READ ghcr.io/immich-app/immich-machine-learning:v3.3.5 79 s NOT CHECKED: blob sha256:203d435a3538: HTTP 429 +2026-10-28T12:04:48.2494557Z RUNTIME-READ freikin/dawarich:1.19.0 120 s ok +2026-10-28T12:05:13.1838084Z RUNTIME-READ ghcr.io/home-assistant/home-assistant:2026.10.4 126 s ok +2026-10-28T12:05:16.0600394Z RUNTIME-READ ghcr.io/alexta69/metube:2026.10.27 41 s ok +2026-10-28T12:05:26.7771906Z RUNTIME-READ ghcr.io/karakeep-app/karakeep:0.34.1 131 s ok +2026-10-28T12:05:41.7159205Z RUNTIME-READ ghcr.io/papra-hq/papra:26.7.1-rootless 46 s ok +2026-10-28T12:05:44.7800807Z RUNTIME-READ rommapp/romm:5.4.1 27 s ok +2026-10-28T12:06:14.5281629Z RUNTIME-READ ghcr.io/tandoorrecipes/recipes:2.7.2 47 s ok +2026-10-28T12:06:29.2610581Z RUNTIME-READ ghcr.io/diced/zipline:4.8.2 45 s ok +2026-10-28T12:06:44.6827138Z RUNTIME-READ docker.io/library/nextcloud:34.0.5-apache 48 s ok +2026-10-28T12:07:16.4518103Z RUNTIME-READ python:3.15-bookworm 20 s ok +2026-10-28T12:07:16.5208430Z ADVISORY doop actualbudget/actual-server 26.10.0 CVE-2026-111497 (fixed 24.22.1) +2026-10-28T12:07:16.5209224Z ADVISORY doop advplyr/audiobookshelf 2.37.1 CVE-2026-111497 (fixed 24.22.1) +2026-10-28T12:07:16.5209638Z ADVISORY box cloudflare/cloudflared 2026.10.4 feed:cloudflare-blog:01M5DK5J81T0VC8YTBR2FKD8A3 (fixed read the notice); vulnnotes:cloudflared@2026.10.5:VULN-183456 (fixed 2026.10.5) +2026-10-28T12:07:16.5209829Z ADVISORY doop codewithcj/sparkyfitness_server v1.9.0 CVE-2026-111497 (fixed 24.22.1) +2026-10-28T12:07:16.5209968Z ADVISORY doop crocodilestick/calibre-web-automated dev CVE-2026-111497 (fixed 1.2.1) +2026-10-28T12:07:16.5210104Z ADVISORY doop docker.io/calcom/cal.com v6.2.0 CVE-2026-111497 (fixed 22.23.4, 24.22.1, 26.12.1) +2026-10-28T12:07:16.5210298Z ADVISORY doop flomp/wanderer-db v0.21.0 GHSA-vprp-gr6m-j375 (fixed v0.21.2); GHSA-3xp7-7492-j2q6 (fixed v0.21.2); GHSA-j9m4-8qwf-jvx6 (fixed v0.21.2); GHSA-fprh-3pp9-68m9 (fixed v0.21.2); … 1 more +2026-10-28T12:07:16.5210546Z ADVISORY doop flomp/wanderer-web v0.21.0 GHSA-vprp-gr6m-j375 (fixed v0.21.2); GHSA-3xp7-7492-j2q6 (fixed v0.21.2); GHSA-j9m4-8qwf-jvx6 (fixed v0.21.2); GHSA-fprh-3pp9-68m9 (fixed v0.21.2); … 2 more +2026-10-28T12:07:16.5211078Z ADVISORY doop ghcr.io/gethomepage/homepage v1.13.2 GHSA-669x-4pg4-w24r (fixed 2.2.0); CVE-2026-111497 (fixed 22.23.4) +2026-10-28T12:07:16.5211262Z ADVISORY doop ghcr.io/immich-app/immich-machine-learning v2.7.5 GHSA-q89f-h332-8q2h (fixed v3.2.4); GHSA-h5w4-vjv4-9r5q (fixed a version after 3.1.0 (the notice names none)); GHSA-g4w3-c888-cr93 (fixed v3.2.0); GHSA-72rm-x7xr-v679 (fixed v3.3.0); … 7 more +2026-10-28T12:07:16.5211466Z ADVISORY doop ghcr.io/immich-app/immich-server v2.7.5 GHSA-q89f-h332-8q2h (fixed v3.2.4); GHSA-h5w4-vjv4-9r5q (fixed a version after 3.1.0 (the notice names none)); GHSA-g4w3-c888-cr93 (fixed v3.2.0); GHSA-72rm-x7xr-v679 (fixed v3.3.0); … 8 more +2026-10-28T12:07:16.5211642Z ADVISORY doop ghcr.io/lukegus/termix release-2.9.2 CVE-2026-111497 (fixed 26.12.1) +2026-10-28T12:07:16.5211794Z ADVISORY doop ghcr.io/paperless-ngx/paperless-ngx 3.3.4 CVE-2026-111497 (fixed 1.2.1) +2026-10-28T12:07:16.5211940Z ADVISORY doop gitea/gitea 1.26.2 GHSA-wx44-9m3m-rjqx (fixed 28.2.0); GHSA-4jmf-h2cm-hg7w (fixed 28.2.0); GHSA-8j56-f865-gqq2 (fixed 28.2.0); GHSA-fxq4-gr55-7x5g (fixed 28.2.0); … 127 more +2026-10-28T12:07:16.5212136Z ADVISORY doop grafana/grafana 13.2.4 GHSA-8xmm-x63g-f6xv (fixed no fixed version named yet); GHSA-4724-7jwc-3fpw (fixed the range is unreadable — check by hand); GHSA-2x6g-h2hg-rq84 (fixed the range is unreadable — check by hand); GHSA-8wjh-59cw-9xh4 (fixed no fixed version named yet); … 2 more +2026-10-28T12:07:16.5212375Z ADVISORY box gtstef/filebrowser 1.5.8-stable GHSA-gfgm-886h-6r47 (fixed 2.0.2-stable, 2.1.4-beta); GHSA-wxj5-g3qp-g732 (fixed 2.0.2-stable, 2.1.3-beta); GHSA-3j46-5w28-f8p2 (fixed 2.1.0-stable, 2.1.3-beta); GHSA-4vrc-935w-xxq2 (fixed 2.1.0-stable, 2.1.3-beta); … 31 more +2026-10-28T12:07:16.5212570Z ADVISORY doop louislam/uptime-kuma 2.5.6 GHSA-qjxc-h5jf-c7rj (fixed the range is unreadable — check by hand); release:louislam/uptime-kuma@2.5.8 (fixed 2.5.8); release:louislam/uptime-kuma@2.5.7 (fixed 2.5.7); CVE-2026-111497 (fixed 22.23.4) +2026-10-28T12:07:16.5213092Z ADVISORY doop outlinewiki/outline 1.11.0 GHSA-x4w3-9p9j-cprh (fixed 1.12.0); GHSA-rq53-m97j-f2pg (fixed 1.12.0); GHSA-h6ff-rw9x-5mq2 (fixed 1.12.0); GHSA-rvj7-2gww-6xfq (fixed 1.12.0); … 3 more +2026-10-28T12:07:16.5213432Z ADVISORY doop redis 8.10.2 GHSA-c8h9-259x-jff4 (fixed the range is unreadable — check by hand); GHSA-8ghh-qpmp-7826 (fixed no fixed version named yet); GHSA-93m2-935m-8rj3 (fixed no fixed version named yet); GHSA-m8fj-85cg-7vhp (fixed the range is unreadable — check by hand); … 8 more +2026-10-28T12:07:16.5213650Z ADVISORY doop rommapp/romm 5.4.0 release:rommapp/romm@5.4.1 (fixed 5.4.1); CVE-2026-111497 (fixed 24.22.1) +2026-10-28T12:07:16.5213812Z ADVISORY doop vabene1111/recipes 2.6.15 CVE-2026-111497 (fixed 24.22.1) +2026-10-28T12:07:16.5213944Z ADVISORY app actualbudget/actual-server 26.9.0 CVE-2026-111497 (fixed 24.22.1) +2026-10-28T12:07:16.5214098Z ADVISORY app calcom/cal.com v6.2.0 GHSA-p3f6-52gv-cj7m (fixed the range is unreadable — check by hand); GHSA-cpf2-q635-xrwx (fixed the range is unreadable — check by hand); CVE-2026-111497 (fixed 22.23.4, 24.22.1, 26.12.1) +2026-10-28T12:07:16.5214430Z ADVISORY app codewithcj/sparkyfitness v0.17.3 GHSA-v883-jx9h-qf29 (fixed a version after 1.7.2 (the notice names none)); GHSA-cmmf-53wf-r5gv (fixed a version after 1.6.5 (the notice names none)); GHSA-p8cf-g8rv-gvrq (fixed a version after 1.6.5 (the notice names none)) +2026-10-28T12:07:16.5214601Z ADVISORY app codewithcj/sparkyfitness_server v0.17.3 GHSA-v883-jx9h-qf29 (fixed a version after 1.7.2 (the notice names none)); GHSA-cmmf-53wf-r5gv (fixed a version after 1.6.5 (the notice names none)); GHSA-p8cf-g8rv-gvrq (fixed a version after 1.6.5 (the notice names none)); CVE-2026-111497 (fixed 24.22.1) +2026-10-28T12:07:16.5214787Z ADVISORY app crocodilestick/calibre-web-automated v4.0.8 CVE-2026-111497 (fixed 1.2.1) +2026-10-28T12:07:16.5214920Z ADVISORY app f0rc3/gokapi v1.9.6 GHSA-45vh-rpc8-hxpp (fixed 2.2.4); GHSA-qwc6-vc2v-2ggj (fixed 2.2.4); GHSA-j6jp-78w8-34x6 (fixed 2.2.4); GHSA-m2hx-wjxc-9fp4 (fixed 2.2.3); … 6 more +2026-10-28T12:07:16.5215098Z ADVISORY app fallenbagel/jellyseerr 2.7.3 GHSA-8j73-j6rc-q8xh (fixed 3.5.0); GHSA-xc6j-6p6h-p799 (fixed 3.5.0); GHSA-mc6w-69r3-62h8 (fixed 3.4.0); GHSA-gx3h-3jg5-q65f (fixed 3.1.0); … 3 more +2026-10-28T12:07:16.5215267Z ADVISORY app flomp/wanderer-db v0.20.0 GHSA-vprp-gr6m-j375 (fixed v0.21.2); GHSA-3xp7-7492-j2q6 (fixed v0.21.2); GHSA-j9m4-8qwf-jvx6 (fixed v0.21.2); GHSA-fprh-3pp9-68m9 (fixed v0.21.2); … 7 more +2026-10-28T12:07:16.5215438Z ADVISORY app flomp/wanderer-web v0.20.0 CVE-2026-111497 (fixed 22.23.4) +2026-10-28T12:07:16.5215572Z ADVISORY app ghcr.io/gethomepage/homepage v1.13.2 GHSA-669x-4pg4-w24r (fixed 2.2.0); CVE-2026-111497 (fixed 22.23.4) +2026-10-28T12:07:16.5215706Z ADVISORY app ghcr.io/immich-app/immich-machine-learning v3.3.5 GHSA-8244-8vpr-vp9c (fixed the range is unreadable — check by hand) +2026-10-28T12:07:16.5215859Z ADVISORY app ghcr.io/immich-app/immich-server v3.3.5 GHSA-8244-8vpr-vp9c (fixed the range is unreadable — check by hand) +2026-10-28T12:07:16.5216051Z ADVISORY app ghcr.io/karakeep-app/karakeep 0.34.1 GHSA-pp34-2c9r-mchw (fixed no fixed version named yet) +2026-10-28T12:07:16.5216202Z ADVISORY app ghcr.io/lukegus/termix 2.8.0 GHSA-6gr3-r7jx-wfmh (fixed >= 26.10.0); GHSA-frx8-qqgg-7j7g (fixed >= 26.10.0); GHSA-3q2m-5r5p-w45r (fixed >= 26.10.0); GHSA-rgf3-2q88-q4wp (fixed >= 26.10.0); … 9 more +2026-10-28T12:07:16.5216380Z ADVISORY app ghcr.io/paperless-ngx/paperless-ngx 2.20.15 GHSA-c8f3-pqr2-rr24 (fixed 3.3.2); GHSA-2jhj-xqrq-rmrq (fixed 3.1.2); CVE-2026-111497 (fixed 1.1.1) +2026-10-28T12:07:16.5216533Z ADVISORY app ghcr.io/tandoorrecipes/recipes 2.7.2 GHSA-c7mc-c9jr-38hf (fixed the range is unreadable — check by hand); GHSA-cqj3-64qw-4w52 (fixed the range is unreadable — check by hand) +2026-10-28T12:07:16.5216688Z ADVISORY app gitea/gitea 1.27.3 GHSA-wx44-9m3m-rjqx (fixed 28.2.0); GHSA-4jmf-h2cm-hg7w (fixed 28.2.0); GHSA-8j56-f865-gqq2 (fixed 28.2.0); GHSA-fxq4-gr55-7x5g (fixed 28.2.0); … 37 more +2026-10-28T12:07:16.5216836Z ADVISORY app glanceapp/glance v0.8.5 GHSA-r225-jhr6-68cc (fixed >= 0.8.7) +2026-10-28T12:07:16.5216970Z ADVISORY app grafana/grafana 13.2.4 GHSA-8xmm-x63g-f6xv (fixed no fixed version named yet); GHSA-4724-7jwc-3fpw (fixed the range is unreadable — check by hand); GHSA-2x6g-h2hg-rq84 (fixed the range is unreadable — check by hand); GHSA-8wjh-59cw-9xh4 (fixed no fixed version named yet); … 2 more +2026-10-28T12:07:16.5217162Z ADVISORY app louislam/uptime-kuma 2.5.7 GHSA-qjxc-h5jf-c7rj (fixed the range is unreadable — check by hand); release:louislam/uptime-kuma@2.5.8 (fixed 2.5.8) +2026-10-28T12:07:16.5217302Z ADVISORY app n8nio/n8n 2.44.7 GHSA-2x68-96jw-5r6c (fixed >= 3.0.1); GHSA-9p7v-45m2-wxgj (fixed >= 3.0.1); GHSA-mx4r-96jx-v278 (fixed >= 3.0.1); GHSA-4v22-g448-h4rg (fixed >= 2.45.5, >= 2.46.1, >= 3.0.1); … 9 more +2026-10-28T12:07:16.5217523Z ADVISORY app rommapp/romm 5.4.1 CVE-2026-111497 (fixed 24.22.1) +2026-10-28T12:07:16.5217655Z NOT CHECKED doop gitea.dooplex.hu/admin/felhom-act-runner 0.1.0 registry gitea.dooplex.hu: no anonymous token route +2026-10-28T12:07:16.5217798Z NOT CHECKED doop gitea.dooplex.hu/admin/jarr latest registry gitea.dooplex.hu: no anonymous token route +2026-10-28T12:07:16.5217926Z NOT CHECKED doop gitea.dooplex.hu/admin/recipe-importer latest registry gitea.dooplex.hu: no anonymous token route +2026-10-28T12:07:16.5218066Z NOT CHECKED doop gitea.dooplex.hu/admin/revfulop-calendar 1.6.2 registry gitea.dooplex.hu: no anonymous token route +2026-10-28T12:07:16.5218191Z NOT CHECKED doop gitea.dooplex.hu/admin/sparkyfitness-export 0.3.0 registry gitea.dooplex.hu: no anonymous token route +2026-10-28T12:07:16.5218325Z NOT CHECKED doop gitea.dooplex.hu/admin/wan-probe 0.1.0 registry gitea.dooplex.hu: no anonymous token route +2026-10-28T12:07:16.5218447Z NOT CHECKED doop griefed/serverpackcreator 8.1.2 https://hub.docker.com/v2/repositories/griefed/serverpackcreator/tags: The read operation timed out +2026-10-28T12:07:16.5218610Z NOT CHECKED doop minio/minio latest Docker registry tags of minio/minio: HTTP 401; manifest minio/minio:latest: HTTP 401 +2026-10-28T12:07:16.5218755Z BEHIND doop getmeili/meilisearch v1.11.3 newest v1.56.0 +2026-10-28T12:07:16.5218874Z BEHIND doop ghcr.io/diced/zipline 4.8.1 newest 4.8.2 +2026-10-28T12:07:16.5218989Z BEHIND app getmeili/meilisearch v1.41.0 newest v1.56.0 +2026-10-28T12:07:16.5219138Z BEHIND app getmeili/meilisearch v1.36.0 newest v1.56.0 +2026-10-28T12:07:16.5219257Z BEHIND app ghcr.io/hargata/lubelogger v1.7.3 newest v1.7.4 +2026-10-28T12:07:16.5219403Z BEHIND app ghcr.io/kozea/radicale 3.8.1 newest 3.9.0 +2026-10-28T12:07:16.5219620Z BEHIND app gotson/komga 1.28.0 newest 1.29.2 +2026-10-28T12:07:16.5220213Z BEHIND app kimai/kimai2 2.67.0 newest 2.71.0 +2026-10-28T12:07:16.5220506Z BEHIND app lscr.io/linuxserver/bookstack 26.09.2 newest 26.09.20260929 +2026-10-28T12:07:16.5220739Z BEHIND app nextcloud 34.0.4-apache newest 34.0.5-apache +2026-10-28T12:07:16.5220973Z BEHIND app nginx 1.30.5-alpine newest 1.31.8-alpine +2026-10-28T12:07:16.5221186Z BEHIND app qbittorrentofficial/qbittorrent-nox 5.2.4-1 newest 5.3.0-2 +2026-10-28T12:07:16.5221421Z GAP buil alpine 3.24.2 newest 3.24.3 +2026-10-28T12:07:16.5221640Z GAP buil alpine 3.24.2 newest 3.24.3 +2026-10-28T12:07:16.5221775Z GAP doop alpine/k8s 1.37.1 +2026-10-28T12:07:16.5221895Z GAP doop arcadiatechnology/crafty-4 4.11.0 +2026-10-28T12:07:16.5222014Z GAP doop bhgedigital/envsubst latest +2026-10-28T12:07:16.5222130Z GAP doop busybox 1.38 +2026-10-28T12:07:16.5222241Z GAP doop codercom/code-server 4.143.1 +2026-10-28T12:07:16.5222357Z GAP buil debian 13.7-slim +2026-10-28T12:07:16.5222470Z GAP buil debian 13.7-slim +2026-10-28T12:07:16.5222581Z GAP doop docker.io/bitnamilegacy/postgresql 17.6.0-debian-12-r3 +2026-10-28T12:07:16.5222698Z GAP doop docker.io/library/nextcloud 34.0.5-apache +2026-10-28T12:07:16.5222804Z GAP doop docker.io/valkey/valkey 9.2-alpine +2026-10-28T12:07:16.5222923Z GAP doop filebrowser/filebrowser v2.63.23 +2026-10-28T12:07:16.5223040Z GAP doop ghcr.io/cloudnative-pg/postgresql 17.2 newest 17.11 +2026-10-28T12:07:16.5223167Z GAP doop ghcr.io/headlamp-k8s/headlamp v0.46.0 +2026-10-28T12:07:16.5223297Z GAP doop ghcr.io/immich-app/postgres 16-vectorchord0.3.0 +2026-10-28T12:07:16.5223454Z GAP doop ghcr.io/jimmidyson/configmap-reload v0.15.0 +2026-10-28T12:07:16.5223577Z GAP doop ghcr.io/onedr0p/exportarr v2.3.0 +2026-10-28T12:07:16.5223693Z GAP doop ghcr.io/seerr-team/seerr v3.5.1 +2026-10-28T12:07:16.5223820Z GAP doop ghcr.io/seriousm4x/upsnap 5 +2026-10-28T12:07:16.5223935Z GAP doop ghcr.io/stakater/reloader v1.4.22 newest v1.4.23 +2026-10-28T12:07:16.5224053Z GAP doop ghcr.io/tautulli/tautulli v2.18.2 +2026-10-28T12:07:16.5224175Z GAP doop gtstef/filebrowser 1.5.8-stable +2026-10-28T12:07:16.5224290Z GAP doop guacamole/guacamole 1.6.0 +2026-10-28T12:07:16.5224406Z GAP doop guacamole/guacd 1.6.0 +2026-10-28T12:07:16.5224537Z GAP doop index.docker.io/plexinc/pms-docker 1.43.5.11029-6bf8af3f0 +2026-10-28T12:07:16.5224656Z GAP doop itzg/mc-backup 2026.10.1 newest 2026.10.2 +2026-10-28T12:07:16.5224782Z GAP doop itzg/minecraft-server 2026.10.0-java21 newest 2026.10.1-java17 +2026-10-28T12:07:16.5224906Z GAP doop linuxserver/bookstack 26.09.20260929 +2026-10-28T12:07:16.5225035Z GAP doop linuxserver/prowlarr version-2.6.5.5623 +2026-10-28T12:07:16.5225149Z GAP doop linuxserver/qbittorrent 5.3.0 +2026-10-28T12:07:16.5225260Z GAP doop linuxserver/radarr version-6.4.4.10685 +2026-10-28T12:07:16.5225460Z GAP doop linuxserver/sonarr version-4.0.20.3014 +2026-10-28T12:07:16.5225601Z GAP doop mariadb 11 +2026-10-28T12:07:16.5225715Z GAP doop mikefarah/yq 4.54.1 +2026-10-28T12:07:16.5225825Z GAP doop mongodb/mongodb-community-server 8.0.5-ubuntu2204 newest 8.3.13-ubuntu2204 +2026-10-28T12:07:16.5225988Z GAP doop msdeluise/plant-it-server 0.10.0 +2026-10-28T12:07:16.5226104Z GAP doop mysql 8.4 +2026-10-28T12:07:16.5226219Z GAP doop nicolaka/netshoot latest +2026-10-28T12:07:16.5226331Z GAP doop postgis/postgis 16-3.5 +2026-10-28T12:07:16.5226482Z GAP doop postgres 15-alpine +2026-10-28T12:07:16.5226606Z GAP doop postgres 16-alpine +2026-10-28T12:07:16.5226725Z GAP doop privatebin/nginx-fpm-alpine 2.0.6 newest 2.1.0 +2026-10-28T12:07:16.5226886Z GAP doop prom/alertmanager v0.34.1 +2026-10-28T12:07:16.5227005Z GAP doop prom/node-exporter v1.12.1 +2026-10-28T12:07:16.5227122Z GAP doop prom/prometheus v3.15.0 newest v3.15.1 +2026-10-28T12:07:16.5227240Z GAP doop prometheuscommunity/smartctl-exporter v0.15.0 +2026-10-28T12:07:16.5227377Z GAP doop python 3.15-bookworm +2026-10-28T12:07:16.5227491Z GAP doop quay.io/jetstack/version-checker v0.11.0 +2026-10-28T12:07:16.5227607Z GAP doop quay.io/prometheus/blackbox-exporter v0.29.1 +2026-10-28T12:07:16.5227762Z GAP doop renovate/renovate 44.181.1 newest 44.190.2 +2026-10-28T12:07:16.5227885Z GAP doop tailscale/tailscale v1.104.2 +2026-10-28T12:07:16.5227996Z GAP app emby/embyserver 4.11.0.4 newest 4.11.0.11 +2026-10-28T12:07:16.5228244Z GAP app ghcr.io/immich-app/postgres 16-vectorchord0.4.3-pg +2026-10-28T12:07:16.5228390Z GAP app ghcr.io/karakeep-app/karakeep-chrome 151.0.7922.47-r1 +2026-10-28T12:07:16.5228505Z GAP app mariadb 12.3 +2026-10-28T12:07:16.5228617Z GAP app mariadb 11.4 newest 11.8 +2026-10-28T12:07:16.5228829Z GAP app mariadb 11.8 +2026-10-28T12:07:16.5228940Z GAP app mariadb 12.3 +2026-10-28T12:07:16.5229046Z GAP app mariadb 11.8 +2026-10-28T12:07:16.5229154Z GAP app msdeluise/plant-it 0.10.0 +2026-10-28T12:07:16.5229292Z GAP app plexinc/pms-docker 1.43.5.11029-6bf8af3f0 +2026-10-28T12:07:16.5229405Z GAP app postgis/postgis 16-3.5-alpine +2026-10-28T12:07:16.5229582Z GAP app postgis/postgis 17-3.5-alpine +2026-10-28T12:07:16.5229804Z GAP app postgres 18-alpine +2026-10-28T12:07:16.5229929Z GAP app postgres 17-alpine +2026-10-28T12:07:16.5230036Z GAP app postgres 18-alpine +2026-10-28T12:07:16.5230146Z GAP app postgres 18-alpine +2026-10-28T12:07:16.5230285Z GAP app postgres 18-alpine +2026-10-28T12:07:16.5230456Z GAP app postgres 18-alpine +2026-10-28T12:07:16.5230568Z GAP app postgres 18-alpine +2026-10-28T12:07:16.5230709Z GAP app postgres 17-alpine +2026-10-28T12:07:16.5230827Z GAP app postgres 16-alpine +2026-10-28T12:07:16.5230934Z GAP app registry.gitlab.com/crafty-controller/crafty-4 4.11.0 +2026-10-28T12:07:16.5231049Z FLOATING doop ghcr.io/seanmorley15/adventurelog-backend latest +2026-10-28T12:07:16.5231193Z FLOATING doop ghcr.io/seanmorley15/adventurelog-frontend latest +2026-10-28T12:07:16.5231307Z FLOATING doop nginx 1.31-alpine +2026-10-28T12:07:16.5231420Z FLOATING doop redis 8-alpine +2026-10-28T12:07:16.5231565Z FLOATING doop redis 8.10-alpine +2026-10-28T12:07:16.5231682Z FLOATING app ghcr.io/claperco/claper 2.5 +2026-10-28T12:07:16.5231874Z FLOATING app ghcr.io/thomiceli/opengist 1.15 +2026-10-28T12:07:16.5232046Z FLOATING app jellyfin/jellyfin 12.4 +2026-10-28T12:07:16.5232223Z FLOATING app lscr.io/linuxserver/prowlarr version-2.6.5.5623 +2026-10-28T12:07:16.5232336Z FLOATING app lscr.io/linuxserver/sabnzbd version-5.1.3 +2026-10-28T12:07:16.5232449Z FLOATING app lscr.io/linuxserver/transmission version-4.1.3-r0 +2026-10-28T12:07:16.5232596Z FLOATING app nzbgetcom/nzbget v26.3 +2026-10-28T12:07:16.5232705Z FLOATING app redis 7.4-alpine +2026-10-28T12:07:16.5232811Z FLOATING app redis 7-alpine +2026-10-28T12:07:16.5232918Z FLOATING app redis 7-alpine +2026-10-28T12:07:16.5233057Z FLOATING app redis 7-alpine +2026-10-28T12:07:16.5233162Z FLOATING app redis 7-alpine +2026-10-28T12:07:16.5233336Z FLOATING app redis 7-alpine +2026-10-28T12:07:16.5233486Z FLOATING app redis 7-alpine +2026-10-28T12:07:16.5233664Z FLOATING app wger/server 2.7 +2026-10-28T12:07:16.5233775Z SELF box gitea.dooplex.hu/admin/felhom-samba 1.2.0 +2026-10-28T12:07:16.5233883Z SELF app gitea.dooplex.hu/admin/recipe-importer v0.9.11 +2026-10-28T12:07:16.5234027Z CURRENT doop codewithcj/sparkyfitness v1.9.0 +2026-10-28T12:07:16.5234138Z CURRENT doop f0rc3/gokapi v2.2.4 +2026-10-28T12:07:16.5234370Z CURRENT doop ghcr.io/alam00000/bentopdf 2.8.10 +2026-10-28T12:07:16.5234523Z CURRENT doop ghcr.io/thomiceli/opengist 1.15.3 +2026-10-28T12:07:16.5234641Z CURRENT doop glanceapp/glance v0.8.7 +2026-10-28T12:07:16.5234755Z CURRENT buil golang 1.27.3-trixie +2026-10-28T12:07:16.5234868Z CURRENT buil golang 1.27.3-alpine3.24 +2026-10-28T12:07:16.5235007Z CURRENT doop onlyoffice/documentserver 9.4.0 +2026-10-28T12:07:16.5235116Z CURRENT buil restic 0.19.1 +2026-10-28T12:07:16.5235295Z CURRENT box traefik v3.7.16 +2026-10-28T12:07:16.5235444Z CURRENT doop vaultwarden/server 1.37.4 +2026-10-28T12:07:16.5235558Z CURRENT app deluan/navidrome 0.64.2 +2026-10-28T12:07:16.5235735Z CURRENT app docmost/docmost 0.97.0 +2026-10-28T12:07:16.5235844Z CURRENT app freikin/dawarich 1.19.0 +2026-10-28T12:07:16.5235981Z CURRENT app ghcr.io/advplyr/audiobookshelf 2.37.2 +2026-10-28T12:07:16.5236089Z CURRENT app ghcr.io/alam00000/bentopdf v2.8.10 +2026-10-28T12:07:16.5236198Z CURRENT app ghcr.io/alexta69/metube 2026.10.27 +2026-10-28T12:07:16.5236348Z CURRENT app ghcr.io/cmintey/wishlist v0.69.0 +2026-10-28T12:07:16.5236463Z CURRENT app ghcr.io/diced/zipline 4.8.2 +2026-10-28T12:07:16.5236572Z CURRENT app ghcr.io/gramps-project/grampsweb v25.6.0 +2026-10-28T12:07:16.5236688Z CURRENT app ghcr.io/grimmory-tools/grimmory v3.5.0 +2026-10-28T12:07:16.5236940Z CURRENT app ghcr.io/home-assistant/home-assistant 2026.10.4 +2026-10-28T12:07:16.5237051Z CURRENT app ghcr.io/mealie-recipes/mealie v3.29.0 +2026-10-28T12:07:16.5237165Z CURRENT app ghcr.io/papra-hq/papra 26.7.1-rootless +2026-10-28T12:07:16.5237306Z CURRENT app ghcr.io/seanmorley15/adventurelog-backend v0.13.1 +2026-10-28T12:07:16.5237422Z CURRENT app ghcr.io/seanmorley15/adventurelog-frontend v0.13.1 +2026-10-28T12:07:16.5237598Z CURRENT app ghcr.io/sysadminsmedia/homebox 0.27.1 +2026-10-28T12:07:16.5237711Z CURRENT app ghost 6.73.0-alpine +2026-10-28T12:07:16.5237872Z CURRENT app lscr.io/linuxserver/code-server 4.143.1 +2026-10-28T12:07:16.5237983Z CURRENT app lscr.io/linuxserver/grocy 4.7.1 +2026-10-28T12:07:16.5238094Z CURRENT app lscr.io/linuxserver/radarr 6.4.4 +2026-10-28T12:07:16.5238243Z CURRENT app lscr.io/linuxserver/sonarr 4.0.20 +2026-10-28T12:07:16.5238359Z CURRENT app lukevella/rallly 4.16.3 +2026-10-28T12:07:16.5238594Z CURRENT app onlyoffice/documentserver 9.4.0 +2026-10-28T12:07:16.5238706Z CURRENT app outlinewiki/outline 1.12.0 +2026-10-28T12:07:16.5238842Z CURRENT app privatebin/pdo 2.1.0 +2026-10-28T12:07:16.5238956Z CURRENT app vaultwarden/server 1.37.4-alpine +2026-10-28T12:07:16.5239065Z CURRENT app vikunja/vikunja 2.7.1 +2026-10-28T12:07:16.5239262Z COUNTS ADVISORY=43 BEHIND=12 CURRENT=38 FLOATING=20 GAP=74 NOT_CHECKED=8 SELF=2 +2026-10-28T12:07:16.5239380Z RUNTIME read=14 (904 s) from-cache=171 not-checked=2 zstd-decoder=zstandard 0.25.0 (pinned wheel, sha256 checked) +2026-10-28T12:07:16.5239508Z TAGS fetched=117 from-cache=0 retried-429=0 (cache /root/.cache/felhom-watch-tags.json) +2026-10-28T12:07:16.5239627Z REQUESTS api.github.com=70 api.osv.dev=1 auth.docker.io=1 blog.cloudflare.com=1 ghcr.io=125 github.com=62 hub.docker.com=210 raw.githubusercontent.com=1 registry-1.docker.io=1 +2026-10-28T12:07:16.5488789Z MAIL (not sent, --no-mail): [Felhom security] n8n — 12 new advisories +2026-10-28T12:07:16.5489387Z MAIL (not sent, --no-mail): [Felhom security] the watch could not check runtime +2026-10-28T12:07:16.5598084Z STATE written: /tmp/state-dry.json (379 known advisories) +2026-10-28T12:07:16.6775446Z Cleaning up container for job watch +2026-10-28T12:07:17.1822675Z 🏁 Job succeeded