image reader waits out a registry 429 and tries again (3 tries); 08 + changelog: the dry-run measurement of the Docker Hub change (0 refused), two runners = two tag caches (R-1334)
This commit is contained in:
admin committed
1 parent
fe677bae94
commit
8644450db2
7 files changed
+877
-9
No files matched your search
@@ -706,5 +706,8 @@ morning sent 224 and was refused none. So: the requests to Docker Hub are spaced
|
||||
a 429 waits (its `Retry-After`, else 10/30/60 s) and tries again, and the image is NOT CHECKED only after the fourth
|
||||
try; a tag list is kept for 24 hours per registry path in the CI runner's cache (`~/.cache/felhom-watch-tags.json`, not
|
||||
committed), so two names of one path (`lscr.io/linuxserver/x`, `linuxserver/x`) and a same-day re-run fetch nothing.
|
||||
The log's `TAGS fetched=… from-cache=… retried-429=…` line counts it. No Docker Hub login is used.
|
||||
The log's `TAGS fetched=… from-cache=… retried-429=…` line counts it. No Docker Hub login is used. Two CI runners take turns, each with its own
|
||||
cache, so the cache helps a same-day re-run on one runner, not the nightly; the spacing is what fixes the night (two
|
||||
dry runs 2026-10-28: 0 refused). The image reader (`image_runtime.py`) also waits out a 429 and tries again (3 tries):
|
||||
ghcr.io refused two blob reads when two dry runs read the same 14 new images 15 minutes apart.
|
||||
|
||||
@@ -0,0 +1,260 @@
|
||||
2026-10-28T07:02:45.6766584Z felhom-gates-runner(version:v0.6.1) received task 2474 of job watch, be triggered by event: workflow_dispatch
|
||||
2026-10-28T07:02:45.6776680Z workflow prepared
|
||||
2026-10-28T07:02:45.6792173Z evaluating expression 'success()'
|
||||
2026-10-28T07:02:45.6793981Z expression 'success()' evaluated to 'true'
|
||||
2026-10-28T07:02:45.6827518Z evaluating expression ''
|
||||
2026-10-28T07:02:45.6828507Z expression '' evaluated to 'true'
|
||||
2026-10-28T07:02:45.6828949Z ⭐ Run Main Fetch main (latest, for the memory) and the two sibling repos
|
||||
2026-10-28T07:02:45.6835870Z Wrote command \n\necho "WATCH_STARTED_AT=$(date +%s)" >> "$GITHUB_ENV"\nbase=http://gitea.gitea-system.svc.cluster.local:3000/admin\ngit init -q . && git remote add origin $base/felhom.eu.git\ngit fetch -q --depth 1 origin main && git checkout -q -B main FETCH_HEAD\necho "felhom.eu main at $(git rev-parse --short=12 HEAD)"\nfor r in felhom-controller app-catalog-felhom.eu; do\n git init -q ../$r && git -C ../$r remote add origin $base/$r.git\n git -C ../$r fetch -q --depth 1 origin main && git -C ../$r checkout -q FETCH_HEAD\n echo "$r at $(git -C ../$r rev-parse --short=12 HEAD)"\ndone\n\n\n to 'workflow/0.sh'
|
||||
2026-10-28T07:02:45.6838134Z ::group::Run echo "WATCH_STARTED_AT=$(date +%s)" >> "$GITHUB_ENV"
|
||||
2026-10-28T07:02:45.6838581Z echo "WATCH_STARTED_AT=$(date +%s)" >> "$GITHUB_ENV"
|
||||
2026-10-28T07:02:45.6838855Z base=http://gitea.gitea-system.svc.cluster.local:3000/admin
|
||||
2026-10-28T07:02:45.6839093Z git init -q . && git remote add origin $base/felhom.eu.git
|
||||
2026-10-28T07:02:45.6839329Z git fetch -q --depth 1 origin main && git checkout -q -B main FETCH_HEAD
|
||||
2026-10-28T07:02:45.6839561Z echo "felhom.eu main at $(git rev-parse --short=12 HEAD)"
|
||||
2026-10-28T07:02:45.6839801Z for r in felhom-controller app-catalog-felhom.eu; do
|
||||
2026-10-28T07:02:45.6840014Z git init -q ../$r && git -C ../$r remote add origin $base/$r.git
|
||||
2026-10-28T07:02:45.6840242Z git -C ../$r fetch -q --depth 1 origin main && git -C ../$r checkout -q FETCH_HEAD
|
||||
2026-10-28T07:02:45.6840600Z echo "$r at $(git -C ../$r rev-parse --short=12 HEAD)"
|
||||
2026-10-28T07:02:45.6840825Z done
|
||||
2026-10-28T07:02:45.6841022Z shell: bash --noprofile --norc -e -o pipefail {0}
|
||||
2026-10-28T07:02:45.6841309Z ::endgroup::
|
||||
2026-10-28T07:03:52.1610192Z felhom.eu main at a3247d9f4402
|
||||
2026-10-28T07:03:56.0824506Z felhom-controller at ed3927f03a52
|
||||
2026-10-28T07:03:58.4269801Z app-catalog-felhom.eu at 0158b5054137
|
||||
2026-10-28T07:03:58.4289933Z ::group::Run set -u
|
||||
2026-10-28T07:03:58.4290302Z set -u
|
||||
2026-10-28T07:03:58.4290487Z mkdir -p documentation/security-watch
|
||||
2026-10-28T07:03:58.4290932Z mode="${MODE:-run}"
|
||||
2026-10-28T07:03:58.4291054Z [ "${GITHUB_EVENT_NAME:-}" = "schedule" ] && mode=run
|
||||
2026-10-28T07:03:58.4291207Z echo "mode: $mode"
|
||||
2026-10-28T07:03:58.4291312Z case "$mode" in
|
||||
2026-10-28T07:03:58.4291418Z test-mail) python3 scripts/security_watch.py --test-mail; exit $? ;;
|
||||
2026-10-28T07:03:58.4291577Z dry) extra="--no-mail" ; state=/tmp/state-dry.json
|
||||
2026-10-28T07:03:58.4291706Z cp documentation/security-watch/state.json "$state" 2>/dev/null || true ;;
|
||||
2026-10-28T07:03:58.4291853Z seed) extra="--seed" ; state=documentation/security-watch/state.json ;;
|
||||
2026-10-28T07:03:58.4292063Z run) extra="" ; state=documentation/security-watch/state.json ;;
|
||||
2026-10-28T07:03:58.4292250Z *) echo "unknown mode $mode"; exit 2 ;;
|
||||
2026-10-28T07:03:58.4292361Z esac
|
||||
2026-10-28T07:03:58.4292453Z python3 scripts/security_watch.py --state="$state" --catalog=../app-catalog-felhom.eu \
|
||||
2026-10-28T07:03:58.4292612Z --controller=../felhom-controller --json=/tmp/watch-results.json $extra
|
||||
2026-10-28T07:03:58.4292806Z shell: bash --noprofile --norc -e -o pipefail {0}
|
||||
2026-10-28T07:03:58.4292956Z env:
|
||||
2026-10-28T07:03:58.4293085Z RESEND_API_KEY: ***
|
||||
2026-10-28T07:03:58.4293216Z GH_ADVISORY_TOKEN: ***
|
||||
2026-10-28T07:03:58.4293326Z MODE: dry
|
||||
2026-10-28T07:03:58.4293424Z FELHOM_WHEEL_FETCH: 1
|
||||
2026-10-28T07:03:58.4293559Z ::endgroup::
|
||||
2026-10-28T07:03:58.4328718Z mode: dry
|
||||
2026-10-28T07:03:58.6964846Z /root/.cache/act/c519d37010cb2508/hostexecutor/scripts/security_watch.py:846: DeprecationWarning: datetime.datetime.utcnow() is deprecated and scheduled for removal in a future version. Use timezone-aware objects to represent datetimes in UTC: datetime.datetime.now(datetime.UTC).
|
||||
2026-10-28T07:03:58.6965920Z today = datetime.date.fromisoformat(opts["today"]) if "today" in opts else datetime.datetime.utcnow().date()
|
||||
2026-10-28T07:03:58.7527191Z security watch 2026-10-28: 197 pins (11 box/build, 97 app, 89 DooPlex); GitHub key PRESENT — every repo's advisories tonight
|
||||
2026-10-28T07:05:17.7461447Z RUNTIME-READ ghcr.io/immich-app/immich-machine-learning:v3.3.5 45 s ok
|
||||
2026-10-28T07:05:25.1474391Z RUNTIME-READ rommapp/romm:5.4.1 25 s ok
|
||||
2026-10-28T07:05:50.2048023Z RUNTIME-READ ghcr.io/immich-app/immich-server:v3.3.5 71 s NOT CHECKED: blob sha256:1fea3edc99a2: HTTP 429
|
||||
2026-10-28T07:05:58.3868665Z RUNTIME-READ ghcr.io/home-assistant/home-assistant:2026.10.4 87 s ok
|
||||
2026-10-28T07:06:08.4045906Z RUNTIME-READ docker.io/library/nextcloud:34.0.5-apache 44 s ok
|
||||
2026-10-28T07:06:19.2808031Z ADVISORY doop actualbudget/actual-server 26.10.0 CVE-2026-111497 (fixed 24.22.1)
|
||||
2026-10-28T07:06:19.2808841Z ADVISORY doop advplyr/audiobookshelf 2.37.1 CVE-2026-111497 (fixed 24.22.1)
|
||||
2026-10-28T07:06:19.2809047Z ADVISORY box cloudflare/cloudflared 2026.10.4 feed:cloudflare-blog:01M5DK5J81T0VC8YTBR2FKD8A3 (fixed read the notice); vulnnotes:cloudflared@2026.10.5:VULN-183456 (fixed 2026.10.5)
|
||||
2026-10-28T07:06:19.2809294Z ADVISORY doop codewithcj/sparkyfitness_server v1.9.0 CVE-2026-111497 (fixed 24.22.1)
|
||||
2026-10-28T07:06:19.2809442Z ADVISORY doop crocodilestick/calibre-web-automated dev CVE-2026-111497 (fixed 1.2.1)
|
||||
2026-10-28T07:06:19.2809607Z ADVISORY doop docker.io/calcom/cal.com v6.2.0 CVE-2026-111497 (fixed 22.23.4, 24.22.1, 26.12.1)
|
||||
2026-10-28T07:06:19.2809773Z ADVISORY doop flomp/wanderer-db v0.21.0 GHSA-vprp-gr6m-j375 (fixed v0.21.2); GHSA-3xp7-7492-j2q6 (fixed v0.21.2); GHSA-j9m4-8qwf-jvx6 (fixed v0.21.2); GHSA-fprh-3pp9-68m9 (fixed v0.21.2); … 1 more
|
||||
2026-10-28T07:06:19.2809979Z ADVISORY doop flomp/wanderer-web v0.21.0 GHSA-vprp-gr6m-j375 (fixed v0.21.2); GHSA-3xp7-7492-j2q6 (fixed v0.21.2); GHSA-j9m4-8qwf-jvx6 (fixed v0.21.2); GHSA-fprh-3pp9-68m9 (fixed v0.21.2); … 2 more
|
||||
2026-10-28T07:06:19.2810162Z ADVISORY doop ghcr.io/gethomepage/homepage v1.13.2 GHSA-669x-4pg4-w24r (fixed 2.2.0); CVE-2026-111497 (fixed 22.23.4)
|
||||
2026-10-28T07:06:19.2811325Z ADVISORY doop ghcr.io/immich-app/immich-machine-learning v2.7.5 GHSA-q89f-h332-8q2h (fixed v3.2.4); GHSA-h5w4-vjv4-9r5q (fixed a version after 3.1.0 (the notice names none)); GHSA-g4w3-c888-cr93 (fixed v3.2.0); GHSA-72rm-x7xr-v679 (fixed v3.3.0); … 7 more
|
||||
2026-10-28T07:06:19.2811702Z ADVISORY doop ghcr.io/immich-app/immich-server v2.7.5 GHSA-q89f-h332-8q2h (fixed v3.2.4); GHSA-h5w4-vjv4-9r5q (fixed a version after 3.1.0 (the notice names none)); GHSA-g4w3-c888-cr93 (fixed v3.2.0); GHSA-72rm-x7xr-v679 (fixed v3.3.0); … 8 more
|
||||
2026-10-28T07:06:19.2811897Z ADVISORY doop ghcr.io/lukegus/termix release-2.9.2 CVE-2026-111497 (fixed 26.12.1)
|
||||
2026-10-28T07:06:19.2812040Z ADVISORY doop ghcr.io/paperless-ngx/paperless-ngx 3.3.4 CVE-2026-111497 (fixed 1.2.1)
|
||||
2026-10-28T07:06:19.2812197Z ADVISORY doop gitea/gitea 1.26.2 GHSA-wx44-9m3m-rjqx (fixed 28.2.0); GHSA-4jmf-h2cm-hg7w (fixed 28.2.0); GHSA-8j56-f865-gqq2 (fixed 28.2.0); GHSA-fxq4-gr55-7x5g (fixed 28.2.0); … 127 more
|
||||
2026-10-28T07:06:19.2812396Z ADVISORY doop grafana/grafana 13.2.4 GHSA-8xmm-x63g-f6xv (fixed no fixed version named yet); GHSA-4724-7jwc-3fpw (fixed the range is unreadable — check by hand); GHSA-2x6g-h2hg-rq84 (fixed the range is unreadable — check by hand); GHSA-8wjh-59cw-9xh4 (fixed no fixed version named yet); … 2 more
|
||||
2026-10-28T07:06:19.2812773Z ADVISORY box gtstef/filebrowser 1.5.8-stable GHSA-gfgm-886h-6r47 (fixed 2.0.2-stable, 2.1.4-beta); GHSA-wxj5-g3qp-g732 (fixed 2.0.2-stable, 2.1.3-beta); GHSA-3j46-5w28-f8p2 (fixed 2.1.0-stable, 2.1.3-beta); GHSA-4vrc-935w-xxq2 (fixed 2.1.0-stable, 2.1.3-beta); … 31 more
|
||||
2026-10-28T07:06:19.2812979Z ADVISORY doop louislam/uptime-kuma 2.5.6 GHSA-qjxc-h5jf-c7rj (fixed the range is unreadable — check by hand); release:louislam/uptime-kuma@2.5.8 (fixed 2.5.8); release:louislam/uptime-kuma@2.5.7 (fixed 2.5.7); CVE-2026-111497 (fixed 22.23.4)
|
||||
2026-10-28T07:06:19.2813197Z ADVISORY doop outlinewiki/outline 1.11.0 GHSA-x4w3-9p9j-cprh (fixed 1.12.0); GHSA-rq53-m97j-f2pg (fixed 1.12.0); GHSA-h6ff-rw9x-5mq2 (fixed 1.12.0); GHSA-rvj7-2gww-6xfq (fixed 1.12.0); … 3 more
|
||||
2026-10-28T07:06:19.2813419Z ADVISORY doop redis 8.10.2 GHSA-c8h9-259x-jff4 (fixed the range is unreadable — check by hand); GHSA-8ghh-qpmp-7826 (fixed no fixed version named yet); GHSA-93m2-935m-8rj3 (fixed no fixed version named yet); GHSA-m8fj-85cg-7vhp (fixed the range is unreadable — check by hand); … 8 more
|
||||
2026-10-28T07:06:19.2813645Z ADVISORY doop rommapp/romm 5.4.0 release:rommapp/romm@5.4.1 (fixed 5.4.1); CVE-2026-111497 (fixed 24.22.1)
|
||||
2026-10-28T07:06:19.2813794Z ADVISORY doop vabene1111/recipes 2.6.15 CVE-2026-111497 (fixed 24.22.1)
|
||||
2026-10-28T07:06:19.2814086Z ADVISORY app actualbudget/actual-server 26.9.0 CVE-2026-111497 (fixed 24.22.1)
|
||||
2026-10-28T07:06:19.2814260Z ADVISORY app calcom/cal.com v6.2.0 GHSA-p3f6-52gv-cj7m (fixed the range is unreadable — check by hand); GHSA-cpf2-q635-xrwx (fixed the range is unreadable — check by hand); CVE-2026-111497 (fixed 22.23.4, 24.22.1, 26.12.1)
|
||||
2026-10-28T07:06:19.2814452Z ADVISORY app codewithcj/sparkyfitness v0.17.3 GHSA-v883-jx9h-qf29 (fixed a version after 1.7.2 (the notice names none)); GHSA-cmmf-53wf-r5gv (fixed a version after 1.6.5 (the notice names none)); GHSA-p8cf-g8rv-gvrq (fixed a version after 1.6.5 (the notice names none))
|
||||
2026-10-28T07:06:19.2814645Z ADVISORY app codewithcj/sparkyfitness_server v0.17.3 GHSA-v883-jx9h-qf29 (fixed a version after 1.7.2 (the notice names none)); GHSA-cmmf-53wf-r5gv (fixed a version after 1.6.5 (the notice names none)); GHSA-p8cf-g8rv-gvrq (fixed a version after 1.6.5 (the notice names none)); CVE-2026-111497 (fixed 24.22.1)
|
||||
2026-10-28T07:06:19.2814899Z ADVISORY app crocodilestick/calibre-web-automated v4.0.8 CVE-2026-111497 (fixed 1.2.1)
|
||||
2026-10-28T07:06:19.2815056Z ADVISORY app f0rc3/gokapi v1.9.6 GHSA-45vh-rpc8-hxpp (fixed 2.2.4); GHSA-qwc6-vc2v-2ggj (fixed 2.2.4); GHSA-j6jp-78w8-34x6 (fixed 2.2.4); GHSA-m2hx-wjxc-9fp4 (fixed 2.2.3); … 6 more
|
||||
2026-10-28T07:06:19.2815243Z ADVISORY app fallenbagel/jellyseerr 2.7.3 GHSA-8j73-j6rc-q8xh (fixed 3.5.0); GHSA-xc6j-6p6h-p799 (fixed 3.5.0); GHSA-mc6w-69r3-62h8 (fixed 3.4.0); GHSA-gx3h-3jg5-q65f (fixed 3.1.0); … 3 more
|
||||
2026-10-28T07:06:19.2815430Z ADVISORY app flomp/wanderer-db v0.20.0 GHSA-vprp-gr6m-j375 (fixed v0.21.2); GHSA-3xp7-7492-j2q6 (fixed v0.21.2); GHSA-j9m4-8qwf-jvx6 (fixed v0.21.2); GHSA-fprh-3pp9-68m9 (fixed v0.21.2); … 7 more
|
||||
2026-10-28T07:06:19.2815616Z ADVISORY app flomp/wanderer-web v0.20.0 GHSA-vprp-gr6m-j375 (fixed v0.21.2); GHSA-3xp7-7492-j2q6 (fixed v0.21.2); GHSA-j9m4-8qwf-jvx6 (fixed v0.21.2); GHSA-fprh-3pp9-68m9 (fixed v0.21.2); … 8 more
|
||||
2026-10-28T07:06:19.2815794Z ADVISORY app freikin/dawarich 1.15.3 release:Freika/dawarich@1.17.0 (fixed 1.17.0); CVE-2026-111497 (fixed 22.23.4, 24.22.1, 26.12.1)
|
||||
2026-10-28T07:06:19.2815986Z ADVISORY app ghcr.io/alexta69/metube 2026.09.29 CVE-2026-111497 (fixed 1.2.1)
|
||||
2026-10-28T07:06:19.2816145Z ADVISORY app ghcr.io/diced/zipline 4.8.0 CVE-2026-111497 (fixed 24.22.1)
|
||||
2026-10-28T07:06:19.2816289Z ADVISORY app ghcr.io/gethomepage/homepage v1.13.2 GHSA-669x-4pg4-w24r (fixed 2.2.0); CVE-2026-111497 (fixed 22.23.4)
|
||||
2026-10-28T07:06:19.2816436Z ADVISORY app ghcr.io/immich-app/immich-machine-learning v3.3.5 GHSA-8244-8vpr-vp9c (fixed the range is unreadable — check by hand)
|
||||
2026-10-28T07:06:19.2816600Z ADVISORY app ghcr.io/immich-app/immich-server v3.3.5 GHSA-8244-8vpr-vp9c (fixed the range is unreadable — check by hand)
|
||||
2026-10-28T07:06:19.2816807Z ADVISORY app ghcr.io/karakeep-app/karakeep 0.33.2 GHSA-pp34-2c9r-mchw (fixed no fixed version named yet); release:karakeep-app/karakeep@v0.34.1 (fixed v0.34.1); release:karakeep-app/karakeep@v0.34.0 (fixed v0.34.0); CVE-2026-111497 (fixed 24.22.1)
|
||||
2026-10-28T07:06:19.2817026Z ADVISORY app ghcr.io/lukegus/termix 2.8.0 GHSA-6gr3-r7jx-wfmh (fixed >= 26.10.0); GHSA-frx8-qqgg-7j7g (fixed >= 26.10.0); GHSA-3q2m-5r5p-w45r (fixed >= 26.10.0); GHSA-rgf3-2q88-q4wp (fixed >= 26.10.0); … 9 more
|
||||
2026-10-28T07:06:19.2817231Z ADVISORY app ghcr.io/paperless-ngx/paperless-ngx 2.20.15 GHSA-c8f3-pqr2-rr24 (fixed 3.3.2); GHSA-2jhj-xqrq-rmrq (fixed 3.1.2); CVE-2026-111497 (fixed 1.1.1)
|
||||
2026-10-28T07:06:19.2817433Z ADVISORY app ghcr.io/papra-hq/papra 26.6.2-rootless CVE-2026-111497 (fixed 26.12.1)
|
||||
2026-10-28T07:06:19.2817602Z ADVISORY app ghcr.io/seanmorley15/adventurelog-backend v0.13.0 release:seanmorley15/AdventureLog@v0.13.1 (fixed v0.13.1)
|
||||
2026-10-28T07:06:19.2817773Z ADVISORY app ghcr.io/seanmorley15/adventurelog-frontend v0.13.0 release:seanmorley15/AdventureLog@v0.13.1 (fixed v0.13.1); CVE-2026-111497 (fixed 26.12.1)
|
||||
2026-10-28T07:06:19.2817940Z ADVISORY app ghcr.io/tandoorrecipes/recipes 2.6.15 GHSA-5f74-7rgh-pc97 (fixed a version after 2.6.15 (the notice names none)); GHSA-pcq2-64qw-jm4x (fixed no fixed version named yet); GHSA-69q3-5q6x-7hmx (fixed no fixed version named yet); GHSA-xq7g-9q95-vjc6 (fixed a version after 2.6.15 (the notice names none)); … 7 more
|
||||
2026-10-28T07:06:19.2818170Z ADVISORY app ghost 6.67.0-alpine CVE-2026-111497 (fixed 22.23.4)
|
||||
2026-10-28T07:06:19.2818408Z ADVISORY app gitea/gitea 1.27.3 GHSA-wx44-9m3m-rjqx (fixed 28.2.0); GHSA-4jmf-h2cm-hg7w (fixed 28.2.0); GHSA-8j56-f865-gqq2 (fixed 28.2.0); GHSA-fxq4-gr55-7x5g (fixed 28.2.0); … 37 more
|
||||
2026-10-28T07:06:19.2818587Z ADVISORY app glanceapp/glance v0.8.5 GHSA-r225-jhr6-68cc (fixed >= 0.8.7)
|
||||
2026-10-28T07:06:19.2818766Z ADVISORY app grafana/grafana 13.2.4 GHSA-8xmm-x63g-f6xv (fixed no fixed version named yet); GHSA-4724-7jwc-3fpw (fixed the range is unreadable — check by hand); GHSA-2x6g-h2hg-rq84 (fixed the range is unreadable — check by hand); GHSA-8wjh-59cw-9xh4 (fixed no fixed version named yet); … 2 more
|
||||
2026-10-28T07:06:19.2818989Z ADVISORY app louislam/uptime-kuma 2.5.7 GHSA-qjxc-h5jf-c7rj (fixed the range is unreadable — check by hand); release:louislam/uptime-kuma@2.5.8 (fixed 2.5.8)
|
||||
2026-10-28T07:06:19.2819151Z ADVISORY app n8nio/n8n 2.44.7 GHSA-365g-vjw2-grx8 (fixed no fixed version named yet)
|
||||
2026-10-28T07:06:19.2819317Z ADVISORY app rommapp/romm 5.4.1 CVE-2026-111497 (fixed 24.22.1)
|
||||
2026-10-28T07:06:19.2819466Z NOT CHECKED doop gitea.dooplex.hu/admin/felhom-act-runner 0.1.0 registry gitea.dooplex.hu: no anonymous token route
|
||||
2026-10-28T07:06:19.2819660Z NOT CHECKED doop gitea.dooplex.hu/admin/jarr latest registry gitea.dooplex.hu: no anonymous token route
|
||||
2026-10-28T07:06:19.2819812Z NOT CHECKED doop gitea.dooplex.hu/admin/recipe-importer latest registry gitea.dooplex.hu: no anonymous token route
|
||||
2026-10-28T07:06:19.2819968Z NOT CHECKED doop gitea.dooplex.hu/admin/revfulop-calendar 1.6.2 registry gitea.dooplex.hu: no anonymous token route
|
||||
2026-10-28T07:06:19.2820118Z NOT CHECKED doop gitea.dooplex.hu/admin/sparkyfitness-export 0.3.0 registry gitea.dooplex.hu: no anonymous token route
|
||||
2026-10-28T07:06:19.2820296Z NOT CHECKED doop gitea.dooplex.hu/admin/wan-probe 0.1.0 registry gitea.dooplex.hu: no anonymous token route
|
||||
2026-10-28T07:06:19.2820494Z NOT CHECKED doop linuxserver/qbittorrent 5.3.0 https://hub.docker.com/v2/repositories/linuxserver/qbittorrent/tags: The read operation timed out
|
||||
2026-10-28T07:06:19.2820673Z NOT CHECKED doop minio/minio latest Docker registry tags of minio/minio: HTTP 401; manifest minio/minio:latest: HTTP 401
|
||||
2026-10-28T07:06:19.2820825Z NOT CHECKED doop mongodb/mongodb-community-server 8.0.5-ubuntu2204 https://hub.docker.com/v2/repositories/mongodb/mongodb-community-server/tags: The read operation timed out
|
||||
2026-10-28T07:06:19.2821003Z BEHIND doop getmeili/meilisearch v1.11.3 newest v1.56.0
|
||||
2026-10-28T07:06:19.2821158Z BEHIND doop ghcr.io/diced/zipline 4.8.1 newest 4.8.2
|
||||
2026-10-28T07:06:19.2821311Z BEHIND app getmeili/meilisearch v1.41.0 newest v1.56.0
|
||||
2026-10-28T07:06:19.2821481Z BEHIND app getmeili/meilisearch v1.36.0 newest v1.56.0
|
||||
2026-10-28T07:06:19.2821620Z BEHIND app ghcr.io/hargata/lubelogger v1.7.3 newest v1.7.4
|
||||
2026-10-28T07:06:19.2821898Z BEHIND app ghcr.io/kozea/radicale 3.8.1 newest 3.9.0
|
||||
2026-10-28T07:06:19.2822053Z BEHIND app gotson/komga 1.28.0 newest 1.29.2
|
||||
2026-10-28T07:06:19.2822213Z BEHIND app kimai/kimai2 2.67.0 newest 2.71.0
|
||||
2026-10-28T07:06:19.2822364Z BEHIND app lscr.io/linuxserver/bookstack 26.09.2 newest 26.09.20260929
|
||||
2026-10-28T07:06:19.2822692Z BEHIND app nextcloud 34.0.4-apache newest 34.0.5-apache
|
||||
2026-10-28T07:06:19.2822853Z BEHIND app nginx 1.30.5-alpine newest 1.31.8-alpine
|
||||
2026-10-28T07:06:19.2823023Z BEHIND app qbittorrentofficial/qbittorrent-nox 5.2.4-1 newest 5.3.0-2
|
||||
2026-10-28T07:06:19.2823180Z GAP buil alpine 3.24.2 newest 3.24.3
|
||||
2026-10-28T07:06:19.2823332Z GAP buil alpine 3.24.2 newest 3.24.3
|
||||
2026-10-28T07:06:19.2823490Z GAP doop alpine/k8s 1.37.1
|
||||
2026-10-28T07:06:19.2823632Z GAP doop arcadiatechnology/crafty-4 4.11.0
|
||||
2026-10-28T07:06:19.2823805Z GAP doop bhgedigital/envsubst latest
|
||||
2026-10-28T07:06:19.2823948Z GAP doop busybox 1.38
|
||||
2026-10-28T07:06:19.2824101Z GAP doop codercom/code-server 4.143.1
|
||||
2026-10-28T07:06:19.2824262Z GAP buil debian 13.7-slim
|
||||
2026-10-28T07:06:19.2824412Z GAP buil debian 13.7-slim
|
||||
2026-10-28T07:06:19.2825231Z GAP doop docker.io/bitnamilegacy/postgresql 17.6.0-debian-12-r3
|
||||
2026-10-28T07:06:19.2825603Z GAP doop docker.io/library/nextcloud 34.0.5-apache
|
||||
2026-10-28T07:06:19.2825886Z GAP doop docker.io/valkey/valkey 9.2-alpine
|
||||
2026-10-28T07:06:19.2826195Z GAP doop filebrowser/filebrowser v2.63.23
|
||||
2026-10-28T07:06:19.2826496Z GAP doop ghcr.io/cloudnative-pg/postgresql 17.2 newest 17.11
|
||||
2026-10-28T07:06:19.2826774Z GAP doop ghcr.io/headlamp-k8s/headlamp v0.46.0
|
||||
2026-10-28T07:06:19.2827069Z GAP doop ghcr.io/immich-app/postgres 16-vectorchord0.3.0
|
||||
2026-10-28T07:06:19.2827313Z GAP doop ghcr.io/jimmidyson/configmap-reload v0.15.0
|
||||
2026-10-28T07:06:19.2827553Z GAP doop ghcr.io/onedr0p/exportarr v2.3.0
|
||||
2026-10-28T07:06:19.2827841Z GAP doop ghcr.io/seerr-team/seerr v3.5.1
|
||||
2026-10-28T07:06:19.2828093Z GAP doop ghcr.io/seriousm4x/upsnap 5
|
||||
2026-10-28T07:06:19.2828445Z GAP doop ghcr.io/stakater/reloader v1.4.22 newest v1.4.23
|
||||
2026-10-28T07:06:19.2828750Z GAP doop ghcr.io/tautulli/tautulli v2.18.2
|
||||
2026-10-28T07:06:19.2828993Z GAP doop griefed/serverpackcreator 8.1.2
|
||||
2026-10-28T07:06:19.2829238Z GAP doop gtstef/filebrowser 1.5.8-stable
|
||||
2026-10-28T07:06:19.2829490Z GAP doop guacamole/guacamole 1.6.0
|
||||
2026-10-28T07:06:19.2829690Z GAP doop guacamole/guacd 1.6.0
|
||||
2026-10-28T07:06:19.2829883Z GAP doop index.docker.io/plexinc/pms-docker 1.43.5.11029-6bf8af3f0
|
||||
2026-10-28T07:06:19.2830113Z GAP doop itzg/mc-backup 2026.10.1 newest 2026.10.2
|
||||
2026-10-28T07:06:19.2830457Z GAP doop itzg/minecraft-server 2026.10.0-java21 newest 2026.10.1-java17
|
||||
2026-10-28T07:06:19.2830760Z GAP doop linuxserver/bookstack 26.09.20260929
|
||||
2026-10-28T07:06:19.2830962Z GAP doop linuxserver/prowlarr version-2.6.5.5623
|
||||
2026-10-28T07:06:19.2831169Z GAP doop linuxserver/radarr version-6.4.4.10685
|
||||
2026-10-28T07:06:19.2831453Z GAP doop linuxserver/sonarr version-4.0.20.3014
|
||||
2026-10-28T07:06:19.2831659Z GAP doop mariadb 11
|
||||
2026-10-28T07:06:19.2831867Z GAP doop mikefarah/yq 4.54.1
|
||||
2026-10-28T07:06:19.2832243Z GAP doop msdeluise/plant-it-server 0.10.0
|
||||
2026-10-28T07:06:19.2832532Z GAP doop mysql 8.4
|
||||
2026-10-28T07:06:19.2832723Z GAP doop nicolaka/netshoot latest
|
||||
2026-10-28T07:06:19.2832954Z GAP doop postgis/postgis 16-3.5
|
||||
2026-10-28T07:06:19.2833142Z GAP doop postgres 15-alpine
|
||||
2026-10-28T07:06:19.2833332Z GAP doop postgres 16-alpine
|
||||
2026-10-28T07:06:19.2833852Z GAP doop privatebin/nginx-fpm-alpine 2.0.6 newest 2.1.0
|
||||
2026-10-28T07:06:19.2834065Z GAP doop prom/alertmanager v0.34.1
|
||||
2026-10-28T07:06:19.2834260Z GAP doop prom/node-exporter v1.12.1
|
||||
2026-10-28T07:06:19.2834451Z GAP doop prom/prometheus v3.15.0 newest v3.15.1
|
||||
2026-10-28T07:06:19.2834709Z GAP doop prometheuscommunity/smartctl-exporter v0.15.0
|
||||
2026-10-28T07:06:19.2834902Z GAP doop python 3.15-bookworm
|
||||
2026-10-28T07:06:19.2835088Z GAP doop quay.io/jetstack/version-checker v0.11.0
|
||||
2026-10-28T07:06:19.2835327Z GAP doop quay.io/prometheus/blackbox-exporter v0.29.1
|
||||
2026-10-28T07:06:19.2835572Z GAP doop renovate/renovate 44.181.1 newest 44.190.1
|
||||
2026-10-28T07:06:19.2835776Z GAP doop tailscale/tailscale v1.104.2
|
||||
2026-10-28T07:06:19.2835973Z GAP app emby/embyserver 4.11.0.4 newest 4.11.0.11
|
||||
2026-10-28T07:06:19.2836221Z GAP app ghcr.io/immich-app/postgres 16-vectorchord0.4.3-pg
|
||||
2026-10-28T07:06:19.2836415Z GAP app ghcr.io/karakeep-app/karakeep-chrome 151.0.7922.47-r1
|
||||
2026-10-28T07:06:19.2836611Z GAP app mariadb 12.3
|
||||
2026-10-28T07:06:19.2836937Z GAP app mariadb 11.4 newest 11.8
|
||||
2026-10-28T07:06:19.2837133Z GAP app mariadb 11.8
|
||||
2026-10-28T07:06:19.2837324Z GAP app mariadb 12.3
|
||||
2026-10-28T07:06:19.2837511Z GAP app mariadb 11.8
|
||||
2026-10-28T07:06:19.2837695Z GAP app msdeluise/plant-it 0.10.0
|
||||
2026-10-28T07:06:19.2837984Z GAP app plexinc/pms-docker 1.43.5.11029-6bf8af3f0
|
||||
2026-10-28T07:06:19.2838180Z GAP app postgis/postgis 16-3.5-alpine
|
||||
2026-10-28T07:06:19.2838465Z GAP app postgis/postgis 17-3.5-alpine
|
||||
2026-10-28T07:06:19.2838650Z GAP app postgres 18-alpine
|
||||
2026-10-28T07:06:19.2838855Z GAP app postgres 17-alpine
|
||||
2026-10-28T07:06:19.2839043Z GAP app postgres 18-alpine
|
||||
2026-10-28T07:06:19.2839235Z GAP app postgres 18-alpine
|
||||
2026-10-28T07:06:19.2839427Z GAP app postgres 18-alpine
|
||||
2026-10-28T07:06:19.2839618Z GAP app postgres 18-alpine
|
||||
2026-10-28T07:06:19.2839819Z GAP app postgres 18-alpine
|
||||
2026-10-28T07:06:19.2840019Z GAP app postgres 17-alpine
|
||||
2026-10-28T07:06:19.2840214Z GAP app postgres 16-alpine
|
||||
2026-10-28T07:06:19.2840408Z GAP app registry.gitlab.com/crafty-controller/crafty-4 4.11.0
|
||||
2026-10-28T07:06:19.2840601Z FLOATING doop ghcr.io/seanmorley15/adventurelog-backend latest
|
||||
2026-10-28T07:06:19.2840803Z FLOATING doop ghcr.io/seanmorley15/adventurelog-frontend latest
|
||||
2026-10-28T07:06:19.2841001Z FLOATING doop nginx 1.31-alpine
|
||||
2026-10-28T07:06:19.2841215Z FLOATING doop redis 8-alpine
|
||||
2026-10-28T07:06:19.2841485Z FLOATING doop redis 8.10-alpine
|
||||
2026-10-28T07:06:19.2841674Z FLOATING app ghcr.io/claperco/claper 2.5
|
||||
2026-10-28T07:06:19.2841873Z FLOATING app ghcr.io/thomiceli/opengist 1.15
|
||||
2026-10-28T07:06:19.2842060Z FLOATING app jellyfin/jellyfin 12.4
|
||||
2026-10-28T07:06:19.2842251Z FLOATING app lscr.io/linuxserver/prowlarr version-2.6.5.5623
|
||||
2026-10-28T07:06:19.2842446Z FLOATING app lscr.io/linuxserver/sabnzbd version-5.1.3
|
||||
2026-10-28T07:06:19.2842657Z FLOATING app lscr.io/linuxserver/transmission version-4.1.3-r0
|
||||
2026-10-28T07:06:19.2842863Z FLOATING app nzbgetcom/nzbget v26.3
|
||||
2026-10-28T07:06:19.2843053Z FLOATING app redis 7.4-alpine
|
||||
2026-10-28T07:06:19.2843248Z FLOATING app redis 7-alpine
|
||||
2026-10-28T07:06:19.2843658Z FLOATING app redis 7-alpine
|
||||
2026-10-28T07:06:19.2843924Z FLOATING app redis 7-alpine
|
||||
2026-10-28T07:06:19.2844113Z FLOATING app redis 7-alpine
|
||||
2026-10-28T07:06:19.2844335Z FLOATING app redis 7-alpine
|
||||
2026-10-28T07:06:19.2844538Z FLOATING app redis 7-alpine
|
||||
2026-10-28T07:06:19.2844728Z FLOATING app wger/server 2.7
|
||||
2026-10-28T07:06:19.2844931Z SELF box gitea.dooplex.hu/admin/felhom-samba 1.2.0
|
||||
2026-10-28T07:06:19.2845119Z SELF app gitea.dooplex.hu/admin/recipe-importer v0.9.11
|
||||
2026-10-28T07:06:19.2845312Z CURRENT doop codewithcj/sparkyfitness v1.9.0
|
||||
2026-10-28T07:06:19.2845490Z CURRENT doop f0rc3/gokapi v2.2.4
|
||||
2026-10-28T07:06:19.2845684Z CURRENT doop ghcr.io/alam00000/bentopdf 2.8.10
|
||||
2026-10-28T07:06:19.2845875Z CURRENT doop ghcr.io/thomiceli/opengist 1.15.3
|
||||
2026-10-28T07:06:19.2846055Z CURRENT doop glanceapp/glance v0.8.7
|
||||
2026-10-28T07:06:19.2846307Z CURRENT buil golang 1.27.3-trixie
|
||||
2026-10-28T07:06:19.2846492Z CURRENT buil golang 1.27.3-alpine3.24
|
||||
2026-10-28T07:06:19.2846699Z CURRENT doop onlyoffice/documentserver 9.4.0
|
||||
2026-10-28T07:06:19.2846892Z CURRENT buil restic 0.19.1
|
||||
2026-10-28T07:06:19.2847085Z CURRENT box traefik v3.7.16
|
||||
2026-10-28T07:06:19.2847284Z CURRENT doop vaultwarden/server 1.37.4
|
||||
2026-10-28T07:06:19.2847475Z CURRENT app deluan/navidrome 0.64.2
|
||||
2026-10-28T07:06:19.2847665Z CURRENT app docmost/docmost 0.97.0
|
||||
2026-10-28T07:06:19.2847859Z CURRENT app ghcr.io/advplyr/audiobookshelf 2.37.2
|
||||
2026-10-28T07:06:19.2848040Z CURRENT app ghcr.io/alam00000/bentopdf v2.8.10
|
||||
2026-10-28T07:06:19.2848250Z CURRENT app ghcr.io/cmintey/wishlist v0.69.0
|
||||
2026-10-28T07:06:19.2848439Z CURRENT app ghcr.io/gramps-project/grampsweb v25.6.0
|
||||
2026-10-28T07:06:19.2848647Z CURRENT app ghcr.io/grimmory-tools/grimmory v3.5.0
|
||||
2026-10-28T07:06:19.2848841Z CURRENT app ghcr.io/home-assistant/home-assistant 2026.10.4
|
||||
2026-10-28T07:06:19.2849037Z CURRENT app ghcr.io/mealie-recipes/mealie v3.29.0
|
||||
2026-10-28T07:06:19.2849278Z CURRENT app ghcr.io/sysadminsmedia/homebox 0.27.1
|
||||
2026-10-28T07:06:19.2849468Z CURRENT app lscr.io/linuxserver/code-server 4.143.1
|
||||
2026-10-28T07:06:19.2849668Z CURRENT app lscr.io/linuxserver/grocy 4.7.1
|
||||
2026-10-28T07:06:19.2849876Z CURRENT app lscr.io/linuxserver/radarr 6.4.4
|
||||
2026-10-28T07:06:19.2850077Z CURRENT app lscr.io/linuxserver/sonarr 4.0.20
|
||||
2026-10-28T07:06:19.2850269Z CURRENT app lukevella/rallly 4.16.3
|
||||
2026-10-28T07:06:19.2850469Z CURRENT app onlyoffice/documentserver 9.4.0
|
||||
2026-10-28T07:06:19.2850970Z CURRENT app outlinewiki/outline 1.12.0
|
||||
2026-10-28T07:06:19.2851212Z CURRENT app privatebin/pdo 2.1.0
|
||||
2026-10-28T07:06:19.2851512Z CURRENT app vaultwarden/server 1.37.4-alpine
|
||||
2026-10-28T07:06:19.2851749Z CURRENT app vikunja/vikunja 2.7.1
|
||||
2026-10-28T07:06:19.2851952Z COUNTS ADVISORY=50 BEHIND=12 CURRENT=31 FLOATING=20 GAP=73 NOT_CHECKED=9 SELF=2
|
||||
2026-10-28T07:06:19.2852161Z RUNTIME read=5 (272 s) from-cache=180 not-checked=1 zstd-decoder=<module 'zstandard' from '/tmp/felhom-zstandard-ahylbyrh/zstandard/__init__.py'>
|
||||
2026-10-28T07:06:19.2852475Z REQUESTS api.github.com=68 api.osv.dev=1 auth.docker.io=1 blog.cloudflare.com=1 ghcr.io=174 github.com=62 hub.docker.com=224 raw.githubusercontent.com=1 registry-1.docker.io=1
|
||||
2026-10-28T07:06:19.3082763Z MAIL (not sent, --no-mail): [Felhom security] the watch could not check runtime
|
||||
2026-10-28T07:06:19.3203515Z STATE written: /tmp/state-dry.json (323 known advisories)
|
||||
2026-10-28T07:06:19.3776008Z Cleaning up container for job watch
|
||||
2026-10-28T07:06:19.9594784Z 🏁 Job succeeded
|
||||
@@ -0,0 +1,271 @@
|
||||
2026-10-28T11:47:02.4712178Z felhom-gates-runner-2(version:v0.6.1) received task 2482 of job watch, be triggered by event: workflow_dispatch
|
||||
2026-10-28T11:47:02.4727581Z workflow prepared
|
||||
2026-10-28T11:47:02.4741272Z evaluating expression 'success()'
|
||||
2026-10-28T11:47:02.4742773Z expression 'success()' evaluated to 'true'
|
||||
2026-10-28T11:47:02.4783413Z evaluating expression ''
|
||||
2026-10-28T11:47:02.4784409Z expression '' evaluated to 'true'
|
||||
2026-10-28T11:47:02.4784720Z ⭐ Run Main Fetch main (latest, for the memory) and the two sibling repos
|
||||
2026-10-28T11:47:02.4790937Z Wrote command \n\necho "WATCH_STARTED_AT=$(date +%s)" >> "$GITHUB_ENV"\nbase=http://gitea.gitea-system.svc.cluster.local:3000/admin\ngit init -q . && git remote add origin $base/felhom.eu.git\ngit fetch -q --depth 1 origin main && git checkout -q -B main FETCH_HEAD\necho "felhom.eu main at $(git rev-parse --short=12 HEAD)"\nfor r in felhom-controller app-catalog-felhom.eu; do\n git init -q ../$r && git -C ../$r remote add origin $base/$r.git\n git -C ../$r fetch -q --depth 1 origin main && git -C ../$r checkout -q FETCH_HEAD\n echo "$r at $(git -C ../$r rev-parse --short=12 HEAD)"\ndone\n\n\n to 'workflow/0.sh'
|
||||
2026-10-28T11:47:02.4793153Z ::group::Run echo "WATCH_STARTED_AT=$(date +%s)" >> "$GITHUB_ENV"
|
||||
2026-10-28T11:47:02.4793593Z echo "WATCH_STARTED_AT=$(date +%s)" >> "$GITHUB_ENV"
|
||||
2026-10-28T11:47:02.4794051Z base=http://gitea.gitea-system.svc.cluster.local:3000/admin
|
||||
2026-10-28T11:47:02.4794292Z git init -q . && git remote add origin $base/felhom.eu.git
|
||||
2026-10-28T11:47:02.4794511Z git fetch -q --depth 1 origin main && git checkout -q -B main FETCH_HEAD
|
||||
2026-10-28T11:47:02.4794786Z echo "felhom.eu main at $(git rev-parse --short=12 HEAD)"
|
||||
2026-10-28T11:47:02.4795009Z for r in felhom-controller app-catalog-felhom.eu; do
|
||||
2026-10-28T11:47:02.4795221Z git init -q ../$r && git -C ../$r remote add origin $base/$r.git
|
||||
2026-10-28T11:47:02.4795448Z git -C ../$r fetch -q --depth 1 origin main && git -C ../$r checkout -q FETCH_HEAD
|
||||
2026-10-28T11:47:02.4795888Z echo "$r at $(git -C ../$r rev-parse --short=12 HEAD)"
|
||||
2026-10-28T11:47:02.4796114Z done
|
||||
2026-10-28T11:47:02.4796293Z shell: bash --noprofile --norc -e -o pipefail {0}
|
||||
2026-10-28T11:47:02.4796580Z ::endgroup::
|
||||
2026-10-28T11:47:56.5865886Z felhom.eu main at fe677bae9415
|
||||
2026-10-28T11:47:59.8988977Z felhom-controller at ed3927f03a52
|
||||
2026-10-28T11:48:01.5259435Z app-catalog-felhom.eu at 0829994440ca
|
||||
2026-10-28T11:48:01.5277395Z ::group::Run set -u
|
||||
2026-10-28T11:48:01.5277618Z set -u
|
||||
2026-10-28T11:48:01.5277735Z mkdir -p documentation/security-watch
|
||||
2026-10-28T11:48:01.5277846Z mode="${MODE:-run}"
|
||||
2026-10-28T11:48:01.5278088Z [ "${GITHUB_EVENT_NAME:-}" = "schedule" ] && mode=run
|
||||
2026-10-28T11:48:01.5278204Z echo "mode: $mode"
|
||||
2026-10-28T11:48:01.5278306Z case "$mode" in
|
||||
2026-10-28T11:48:01.5278415Z test-mail) python3 scripts/security_watch.py --test-mail; exit $? ;;
|
||||
2026-10-28T11:48:01.5278539Z dry) extra="--no-mail" ; state=/tmp/state-dry.json
|
||||
2026-10-28T11:48:01.5278661Z cp documentation/security-watch/state.json "$state" 2>/dev/null || true ;;
|
||||
2026-10-28T11:48:01.5278798Z seed) extra="--seed" ; state=documentation/security-watch/state.json ;;
|
||||
2026-10-28T11:48:01.5278945Z run) extra="" ; state=documentation/security-watch/state.json ;;
|
||||
2026-10-28T11:48:01.5279081Z *) echo "unknown mode $mode"; exit 2 ;;
|
||||
2026-10-28T11:48:01.5279194Z esac
|
||||
2026-10-28T11:48:01.5279291Z python3 scripts/security_watch.py --state="$state" --catalog=../app-catalog-felhom.eu \
|
||||
2026-10-28T11:48:01.5279432Z --controller=../felhom-controller --json=/tmp/watch-results.json $extra
|
||||
2026-10-28T11:48:01.5279561Z shell: bash --noprofile --norc -e -o pipefail {0}
|
||||
2026-10-28T11:48:01.5279705Z env:
|
||||
2026-10-28T11:48:01.5279832Z RESEND_API_KEY: ***
|
||||
2026-10-28T11:48:01.5279958Z GH_ADVISORY_TOKEN: ***
|
||||
2026-10-28T11:48:01.5280076Z MODE: dry
|
||||
2026-10-28T11:48:01.5280181Z FELHOM_WHEEL_FETCH: 1
|
||||
2026-10-28T11:48:01.5280300Z ::endgroup::
|
||||
2026-10-28T11:48:01.5315547Z mode: dry
|
||||
2026-10-28T11:48:01.8669447Z /root/.cache/act/f1c467c06942a567/hostexecutor/scripts/security_watch.py:905: DeprecationWarning: datetime.datetime.utcnow() is deprecated and scheduled for removal in a future version. Use timezone-aware objects to represent datetimes in UTC: datetime.datetime.now(datetime.UTC).
|
||||
2026-10-28T11:48:01.8670299Z today = datetime.date.fromisoformat(opts["today"]) if "today" in opts else datetime.datetime.utcnow().date()
|
||||
2026-10-28T11:48:01.9215140Z security watch 2026-10-28: 197 pins (11 box/build, 97 app, 89 DooPlex); GitHub key PRESENT — every repo's advisories tonight
|
||||
2026-10-28T11:48:40.4619259Z RUNTIME-READ golang:1.27.3-trixie 19 s ok
|
||||
2026-10-28T11:50:57.5410366Z RUNTIME-READ ghost:6.73.0-alpine 82 s ok
|
||||
2026-10-28T11:51:12.1336631Z RUNTIME-READ ghcr.io/immich-app/immich-machine-learning:v3.3.5 69 s ok
|
||||
2026-10-28T11:51:28.9427653Z RUNTIME-READ freikin/dawarich:1.19.0 123 s ok
|
||||
2026-10-28T11:51:33.4310838Z RUNTIME-READ ghcr.io/home-assistant/home-assistant:2026.10.4 112 s ok
|
||||
2026-10-28T11:51:44.1628720Z RUNTIME-READ ghcr.io/immich-app/immich-server:v3.3.5 107 s ok
|
||||
2026-10-28T11:51:48.7752810Z RUNTIME-READ ghcr.io/karakeep-app/karakeep:0.34.1 117 s ok
|
||||
2026-10-28T11:51:53.3128744Z RUNTIME-READ ghcr.io/alexta69/metube:2026.10.27 37 s ok
|
||||
2026-10-28T11:52:26.9311967Z RUNTIME-READ ghcr.io/papra-hq/papra:26.7.1-rootless 44 s ok
|
||||
2026-10-28T11:52:35.4240046Z RUNTIME-READ rommapp/romm:5.4.1 29 s ok
|
||||
2026-10-28T11:52:52.6459707Z RUNTIME-READ ghcr.io/tandoorrecipes/recipes:2.7.2 47 s ok
|
||||
2026-10-28T11:53:08.2131671Z RUNTIME-READ ghcr.io/diced/zipline:4.8.2 41 s ok
|
||||
2026-10-28T11:53:22.4556889Z RUNTIME-READ docker.io/library/nextcloud:34.0.5-apache 42 s ok
|
||||
2026-10-28T11:53:59.4333189Z RUNTIME-READ python:3.15-bookworm 21 s ok
|
||||
2026-10-28T11:53:59.5401475Z ADVISORY doop actualbudget/actual-server 26.10.0 CVE-2026-111497 (fixed 24.22.1)
|
||||
2026-10-28T11:53:59.5402195Z ADVISORY doop advplyr/audiobookshelf 2.37.1 CVE-2026-111497 (fixed 24.22.1)
|
||||
2026-10-28T11:53:59.5402380Z ADVISORY box cloudflare/cloudflared 2026.10.4 feed:cloudflare-blog:01M5DK5J81T0VC8YTBR2FKD8A3 (fixed read the notice); vulnnotes:cloudflared@2026.10.5:VULN-183456 (fixed 2026.10.5)
|
||||
2026-10-28T11:53:59.5402575Z ADVISORY doop codewithcj/sparkyfitness_server v1.9.0 CVE-2026-111497 (fixed 24.22.1)
|
||||
2026-10-28T11:53:59.5402755Z ADVISORY doop crocodilestick/calibre-web-automated dev CVE-2026-111497 (fixed 1.2.1)
|
||||
2026-10-28T11:53:59.5402938Z ADVISORY doop docker.io/calcom/cal.com v6.2.0 CVE-2026-111497 (fixed 22.23.4, 24.22.1, 26.12.1)
|
||||
2026-10-28T11:53:59.5403115Z ADVISORY doop flomp/wanderer-db v0.21.0 GHSA-vprp-gr6m-j375 (fixed v0.21.2); GHSA-3xp7-7492-j2q6 (fixed v0.21.2); GHSA-j9m4-8qwf-jvx6 (fixed v0.21.2); GHSA-fprh-3pp9-68m9 (fixed v0.21.2); … 1 more
|
||||
2026-10-28T11:53:59.5403474Z ADVISORY doop flomp/wanderer-web v0.21.0 GHSA-vprp-gr6m-j375 (fixed v0.21.2); GHSA-3xp7-7492-j2q6 (fixed v0.21.2); GHSA-j9m4-8qwf-jvx6 (fixed v0.21.2); GHSA-fprh-3pp9-68m9 (fixed v0.21.2); … 2 more
|
||||
2026-10-28T11:53:59.5403659Z ADVISORY doop ghcr.io/gethomepage/homepage v1.13.2 GHSA-669x-4pg4-w24r (fixed 2.2.0); CVE-2026-111497 (fixed 22.23.4)
|
||||
2026-10-28T11:53:59.5403825Z ADVISORY doop ghcr.io/immich-app/immich-machine-learning v2.7.5 GHSA-q89f-h332-8q2h (fixed v3.2.4); GHSA-h5w4-vjv4-9r5q (fixed a version after 3.1.0 (the notice names none)); GHSA-g4w3-c888-cr93 (fixed v3.2.0); GHSA-72rm-x7xr-v679 (fixed v3.3.0); … 7 more
|
||||
2026-10-28T11:53:59.5404003Z ADVISORY doop ghcr.io/immich-app/immich-server v2.7.5 GHSA-q89f-h332-8q2h (fixed v3.2.4); GHSA-h5w4-vjv4-9r5q (fixed a version after 3.1.0 (the notice names none)); GHSA-g4w3-c888-cr93 (fixed v3.2.0); GHSA-72rm-x7xr-v679 (fixed v3.3.0); … 8 more
|
||||
2026-10-28T11:53:59.5404194Z ADVISORY doop ghcr.io/lukegus/termix release-2.9.2 CVE-2026-111497 (fixed 26.12.1)
|
||||
2026-10-28T11:53:59.5404329Z ADVISORY doop ghcr.io/paperless-ngx/paperless-ngx 3.3.4 CVE-2026-111497 (fixed 1.2.1)
|
||||
2026-10-28T11:53:59.5404487Z ADVISORY doop gitea/gitea 1.26.2 GHSA-wx44-9m3m-rjqx (fixed 28.2.0); GHSA-4jmf-h2cm-hg7w (fixed 28.2.0); GHSA-8j56-f865-gqq2 (fixed 28.2.0); GHSA-fxq4-gr55-7x5g (fixed 28.2.0); … 127 more
|
||||
2026-10-28T11:53:59.5404679Z ADVISORY doop grafana/grafana 13.2.4 GHSA-8xmm-x63g-f6xv (fixed no fixed version named yet); GHSA-4724-7jwc-3fpw (fixed the range is unreadable — check by hand); GHSA-2x6g-h2hg-rq84 (fixed the range is unreadable — check by hand); GHSA-8wjh-59cw-9xh4 (fixed no fixed version named yet); … 2 more
|
||||
2026-10-28T11:53:59.5404914Z ADVISORY box gtstef/filebrowser 1.5.8-stable GHSA-gfgm-886h-6r47 (fixed 2.0.2-stable, 2.1.4-beta); GHSA-wxj5-g3qp-g732 (fixed 2.0.2-stable, 2.1.3-beta); GHSA-3j46-5w28-f8p2 (fixed 2.1.0-stable, 2.1.3-beta); GHSA-4vrc-935w-xxq2 (fixed 2.1.0-stable, 2.1.3-beta); … 31 more
|
||||
2026-10-28T11:53:59.5405103Z ADVISORY doop louislam/uptime-kuma 2.5.6 GHSA-qjxc-h5jf-c7rj (fixed the range is unreadable — check by hand); release:louislam/uptime-kuma@2.5.8 (fixed 2.5.8); release:louislam/uptime-kuma@2.5.7 (fixed 2.5.7); CVE-2026-111497 (fixed 22.23.4)
|
||||
2026-10-28T11:53:59.5406272Z ADVISORY doop outlinewiki/outline 1.11.0 GHSA-x4w3-9p9j-cprh (fixed 1.12.0); GHSA-rq53-m97j-f2pg (fixed 1.12.0); GHSA-h6ff-rw9x-5mq2 (fixed 1.12.0); GHSA-rvj7-2gww-6xfq (fixed 1.12.0); … 3 more
|
||||
2026-10-28T11:53:59.5406483Z ADVISORY doop redis 8.10.2 GHSA-c8h9-259x-jff4 (fixed the range is unreadable — check by hand); GHSA-8ghh-qpmp-7826 (fixed no fixed version named yet); GHSA-93m2-935m-8rj3 (fixed no fixed version named yet); GHSA-m8fj-85cg-7vhp (fixed the range is unreadable — check by hand); … 8 more
|
||||
2026-10-28T11:53:59.5406678Z ADVISORY doop rommapp/romm 5.4.0 release:rommapp/romm@5.4.1 (fixed 5.4.1); CVE-2026-111497 (fixed 24.22.1)
|
||||
2026-10-28T11:53:59.5406811Z ADVISORY doop vabene1111/recipes 2.6.15 CVE-2026-111497 (fixed 24.22.1)
|
||||
2026-10-28T11:53:59.5406943Z ADVISORY app actualbudget/actual-server 26.9.0 CVE-2026-111497 (fixed 24.22.1)
|
||||
2026-10-28T11:53:59.5407072Z ADVISORY app calcom/cal.com v6.2.0 GHSA-p3f6-52gv-cj7m (fixed the range is unreadable — check by hand); GHSA-cpf2-q635-xrwx (fixed the range is unreadable — check by hand); CVE-2026-111497 (fixed 22.23.4, 24.22.1, 26.12.1)
|
||||
2026-10-28T11:53:59.5407282Z ADVISORY app codewithcj/sparkyfitness v0.17.3 GHSA-v883-jx9h-qf29 (fixed a version after 1.7.2 (the notice names none)); GHSA-cmmf-53wf-r5gv (fixed a version after 1.6.5 (the notice names none)); GHSA-p8cf-g8rv-gvrq (fixed a version after 1.6.5 (the notice names none))
|
||||
2026-10-28T11:53:59.5407455Z ADVISORY app codewithcj/sparkyfitness_server v0.17.3 GHSA-v883-jx9h-qf29 (fixed a version after 1.7.2 (the notice names none)); GHSA-cmmf-53wf-r5gv (fixed a version after 1.6.5 (the notice names none)); GHSA-p8cf-g8rv-gvrq (fixed a version after 1.6.5 (the notice names none)); CVE-2026-111497 (fixed 24.22.1)
|
||||
2026-10-28T11:53:59.5407635Z ADVISORY app crocodilestick/calibre-web-automated v4.0.8 CVE-2026-111497 (fixed 1.2.1)
|
||||
2026-10-28T11:53:59.5407767Z ADVISORY app f0rc3/gokapi v1.9.6 GHSA-45vh-rpc8-hxpp (fixed 2.2.4); GHSA-qwc6-vc2v-2ggj (fixed 2.2.4); GHSA-j6jp-78w8-34x6 (fixed 2.2.4); GHSA-m2hx-wjxc-9fp4 (fixed 2.2.3); … 6 more
|
||||
2026-10-28T11:53:59.5407937Z ADVISORY app fallenbagel/jellyseerr 2.7.3 GHSA-8j73-j6rc-q8xh (fixed 3.5.0); GHSA-xc6j-6p6h-p799 (fixed 3.5.0); GHSA-mc6w-69r3-62h8 (fixed 3.4.0); GHSA-gx3h-3jg5-q65f (fixed 3.1.0); … 3 more
|
||||
2026-10-28T11:53:59.5408110Z ADVISORY app flomp/wanderer-db v0.20.0 GHSA-vprp-gr6m-j375 (fixed v0.21.2); GHSA-3xp7-7492-j2q6 (fixed v0.21.2); GHSA-j9m4-8qwf-jvx6 (fixed v0.21.2); GHSA-fprh-3pp9-68m9 (fixed v0.21.2); … 7 more
|
||||
2026-10-28T11:53:59.5408268Z ADVISORY app flomp/wanderer-web v0.20.0 GHSA-vprp-gr6m-j375 (fixed v0.21.2); GHSA-3xp7-7492-j2q6 (fixed v0.21.2); GHSA-j9m4-8qwf-jvx6 (fixed v0.21.2); GHSA-fprh-3pp9-68m9 (fixed v0.21.2); … 8 more
|
||||
2026-10-28T11:53:59.5408424Z ADVISORY app ghcr.io/gethomepage/homepage v1.13.2 GHSA-669x-4pg4-w24r (fixed 2.2.0); CVE-2026-111497 (fixed 22.23.4)
|
||||
2026-10-28T11:53:59.5408574Z ADVISORY app ghcr.io/immich-app/immich-machine-learning v3.3.5 GHSA-8244-8vpr-vp9c (fixed the range is unreadable — check by hand)
|
||||
2026-10-28T11:53:59.5408739Z ADVISORY app ghcr.io/immich-app/immich-server v3.3.5 GHSA-8244-8vpr-vp9c (fixed the range is unreadable — check by hand)
|
||||
2026-10-28T11:53:59.5408953Z ADVISORY app ghcr.io/karakeep-app/karakeep 0.34.1 GHSA-pp34-2c9r-mchw (fixed no fixed version named yet)
|
||||
2026-10-28T11:53:59.5409117Z ADVISORY app ghcr.io/lukegus/termix 2.8.0 GHSA-6gr3-r7jx-wfmh (fixed >= 26.10.0); GHSA-frx8-qqgg-7j7g (fixed >= 26.10.0); GHSA-3q2m-5r5p-w45r (fixed >= 26.10.0); GHSA-rgf3-2q88-q4wp (fixed >= 26.10.0); … 9 more
|
||||
2026-10-28T11:53:59.5410068Z ADVISORY app ghcr.io/paperless-ngx/paperless-ngx 2.20.15 GHSA-c8f3-pqr2-rr24 (fixed 3.3.2); GHSA-2jhj-xqrq-rmrq (fixed 3.1.2); CVE-2026-111497 (fixed 1.1.1)
|
||||
2026-10-28T11:53:59.5411038Z ADVISORY app ghcr.io/tandoorrecipes/recipes 2.7.2 GHSA-c7mc-c9jr-38hf (fixed the range is unreadable — check by hand); GHSA-cqj3-64qw-4w52 (fixed the range is unreadable — check by hand)
|
||||
2026-10-28T11:53:59.5411537Z ADVISORY app gitea/gitea 1.27.3 GHSA-wx44-9m3m-rjqx (fixed 28.2.0); GHSA-4jmf-h2cm-hg7w (fixed 28.2.0); GHSA-8j56-f865-gqq2 (fixed 28.2.0); GHSA-fxq4-gr55-7x5g (fixed 28.2.0); … 37 more
|
||||
2026-10-28T11:53:59.5411889Z ADVISORY app glanceapp/glance v0.8.5 GHSA-r225-jhr6-68cc (fixed >= 0.8.7)
|
||||
2026-10-28T11:53:59.5412063Z ADVISORY app grafana/grafana 13.2.4 GHSA-8xmm-x63g-f6xv (fixed no fixed version named yet); GHSA-4724-7jwc-3fpw (fixed the range is unreadable — check by hand); GHSA-2x6g-h2hg-rq84 (fixed the range is unreadable — check by hand); GHSA-8wjh-59cw-9xh4 (fixed no fixed version named yet); … 2 more
|
||||
2026-10-28T11:53:59.5412282Z ADVISORY app louislam/uptime-kuma 2.5.7 GHSA-qjxc-h5jf-c7rj (fixed the range is unreadable — check by hand); release:louislam/uptime-kuma@2.5.8 (fixed 2.5.8)
|
||||
2026-10-28T11:53:59.5412449Z ADVISORY app n8nio/n8n 2.44.7 GHSA-2x68-96jw-5r6c (fixed >= 3.0.1); GHSA-9p7v-45m2-wxgj (fixed >= 3.0.1); GHSA-mx4r-96jx-v278 (fixed >= 3.0.1); GHSA-4v22-g448-h4rg (fixed >= 2.45.5, >= 2.46.1, >= 3.0.1); … 9 more
|
||||
2026-10-28T11:53:59.5412609Z ADVISORY app rommapp/romm 5.4.1 CVE-2026-111497 (fixed 24.22.1)
|
||||
2026-10-28T11:53:59.5412768Z NOT CHECKED doop gitea.dooplex.hu/admin/felhom-act-runner 0.1.0 registry gitea.dooplex.hu: no anonymous token route
|
||||
2026-10-28T11:53:59.5412922Z NOT CHECKED doop gitea.dooplex.hu/admin/jarr latest registry gitea.dooplex.hu: no anonymous token route
|
||||
2026-10-28T11:53:59.5413054Z NOT CHECKED doop gitea.dooplex.hu/admin/recipe-importer latest registry gitea.dooplex.hu: no anonymous token route
|
||||
2026-10-28T11:53:59.5413180Z NOT CHECKED doop gitea.dooplex.hu/admin/revfulop-calendar 1.6.2 registry gitea.dooplex.hu: no anonymous token route
|
||||
2026-10-28T11:53:59.5413313Z NOT CHECKED doop gitea.dooplex.hu/admin/sparkyfitness-export 0.3.0 registry gitea.dooplex.hu: no anonymous token route
|
||||
2026-10-28T11:53:59.5413556Z NOT CHECKED doop gitea.dooplex.hu/admin/wan-probe 0.1.0 registry gitea.dooplex.hu: no anonymous token route
|
||||
2026-10-28T11:53:59.5413785Z NOT CHECKED doop minio/minio latest Docker registry tags of minio/minio: HTTP 401; manifest minio/minio:latest: HTTP 401
|
||||
2026-10-28T11:53:59.5413926Z BEHIND doop getmeili/meilisearch v1.11.3 newest v1.56.0
|
||||
2026-10-28T11:53:59.5414047Z BEHIND doop ghcr.io/diced/zipline 4.8.1 newest 4.8.2
|
||||
2026-10-28T11:53:59.5414187Z BEHIND app getmeili/meilisearch v1.41.0 newest v1.56.0
|
||||
2026-10-28T11:53:59.5414307Z BEHIND app getmeili/meilisearch v1.36.0 newest v1.56.0
|
||||
2026-10-28T11:53:59.5414445Z BEHIND app ghcr.io/hargata/lubelogger v1.7.3 newest v1.7.4
|
||||
2026-10-28T11:53:59.5414564Z BEHIND app ghcr.io/kozea/radicale 3.8.1 newest 3.9.0
|
||||
2026-10-28T11:53:59.5414679Z BEHIND app gotson/komga 1.28.0 newest 1.29.2
|
||||
2026-10-28T11:53:59.5414794Z BEHIND app kimai/kimai2 2.67.0 newest 2.71.0
|
||||
2026-10-28T11:53:59.5414929Z BEHIND app lscr.io/linuxserver/bookstack 26.09.2 newest 26.09.20260929
|
||||
2026-10-28T11:53:59.5415078Z BEHIND app nextcloud 34.0.4-apache newest 34.0.5-apache
|
||||
2026-10-28T11:53:59.5415199Z BEHIND app nginx 1.30.5-alpine newest 1.31.8-alpine
|
||||
2026-10-28T11:53:59.5415329Z BEHIND app qbittorrentofficial/qbittorrent-nox 5.2.4-1 newest 5.3.0-2
|
||||
2026-10-28T11:53:59.5415452Z GAP buil alpine 3.24.2 newest 3.24.3
|
||||
2026-10-28T11:53:59.5415593Z GAP buil alpine 3.24.2 newest 3.24.3
|
||||
2026-10-28T11:53:59.5415728Z GAP doop alpine/k8s 1.37.1
|
||||
2026-10-28T11:53:59.5415849Z GAP doop arcadiatechnology/crafty-4 4.11.0
|
||||
2026-10-28T11:53:59.5415970Z GAP doop bhgedigital/envsubst latest
|
||||
2026-10-28T11:53:59.5416086Z GAP doop busybox 1.38
|
||||
2026-10-28T11:53:59.5416212Z GAP doop codercom/code-server 4.143.1
|
||||
2026-10-28T11:53:59.5416346Z GAP buil debian 13.7-slim
|
||||
2026-10-28T11:53:59.5416499Z GAP buil debian 13.7-slim
|
||||
2026-10-28T11:53:59.5416632Z GAP doop docker.io/bitnamilegacy/postgresql 17.6.0-debian-12-r3
|
||||
2026-10-28T11:53:59.5416777Z GAP doop docker.io/library/nextcloud 34.0.5-apache
|
||||
2026-10-28T11:53:59.5416923Z GAP doop docker.io/valkey/valkey 9.2-alpine
|
||||
2026-10-28T11:53:59.5417043Z GAP doop filebrowser/filebrowser v2.63.23
|
||||
2026-10-28T11:53:59.5417185Z GAP doop ghcr.io/cloudnative-pg/postgresql 17.2 newest 17.11
|
||||
2026-10-28T11:53:59.5417367Z GAP doop ghcr.io/headlamp-k8s/headlamp v0.46.0
|
||||
2026-10-28T11:53:59.5417502Z GAP doop ghcr.io/immich-app/postgres 16-vectorchord0.3.0
|
||||
2026-10-28T11:53:59.5417649Z GAP doop ghcr.io/jimmidyson/configmap-reload v0.15.0
|
||||
2026-10-28T11:53:59.5417769Z GAP doop ghcr.io/onedr0p/exportarr v2.3.0
|
||||
2026-10-28T11:53:59.5417888Z GAP doop ghcr.io/seerr-team/seerr v3.5.1
|
||||
2026-10-28T11:53:59.5418006Z GAP doop ghcr.io/seriousm4x/upsnap 5
|
||||
2026-10-28T11:53:59.5418136Z GAP doop ghcr.io/stakater/reloader v1.4.22 newest v1.4.23
|
||||
2026-10-28T11:53:59.5418297Z GAP doop ghcr.io/tautulli/tautulli v2.18.2
|
||||
2026-10-28T11:53:59.5418444Z GAP doop griefed/serverpackcreator 8.1.2
|
||||
2026-10-28T11:53:59.5418588Z GAP doop gtstef/filebrowser 1.5.8-stable
|
||||
2026-10-28T11:53:59.5418717Z GAP doop guacamole/guacamole 1.6.0
|
||||
2026-10-28T11:53:59.5418857Z GAP doop guacamole/guacd 1.6.0
|
||||
2026-10-28T11:53:59.5418985Z GAP doop index.docker.io/plexinc/pms-docker 1.43.5.11029-6bf8af3f0
|
||||
2026-10-28T11:53:59.5419147Z GAP doop itzg/mc-backup 2026.10.1 newest 2026.10.2
|
||||
2026-10-28T11:53:59.5419594Z GAP doop itzg/minecraft-server 2026.10.0-java21 newest 2026.10.1-java17
|
||||
2026-10-28T11:53:59.5419808Z GAP doop linuxserver/bookstack 26.09.20260929
|
||||
2026-10-28T11:53:59.5419982Z GAP doop linuxserver/prowlarr version-2.6.5.5623
|
||||
2026-10-28T11:53:59.5420145Z GAP doop linuxserver/qbittorrent 5.3.0
|
||||
2026-10-28T11:53:59.5420268Z GAP doop linuxserver/radarr version-6.4.4.10685
|
||||
2026-10-28T11:53:59.5420386Z GAP doop linuxserver/sonarr version-4.0.20.3014
|
||||
2026-10-28T11:53:59.5420500Z GAP doop mariadb 11
|
||||
2026-10-28T11:53:59.5420700Z GAP doop mikefarah/yq 4.54.1
|
||||
2026-10-28T11:53:59.5420851Z GAP doop mongodb/mongodb-community-server 8.0.5-ubuntu2204 newest 8.3.13-ubuntu2204
|
||||
2026-10-28T11:53:59.5420988Z GAP doop msdeluise/plant-it-server 0.10.0
|
||||
2026-10-28T11:53:59.5421111Z GAP doop mysql 8.4
|
||||
2026-10-28T11:53:59.5421256Z GAP doop nicolaka/netshoot latest
|
||||
2026-10-28T11:53:59.5421371Z GAP doop postgis/postgis 16-3.5
|
||||
2026-10-28T11:53:59.5421562Z GAP doop postgres 15-alpine
|
||||
2026-10-28T11:53:59.5421889Z GAP doop postgres 16-alpine
|
||||
2026-10-28T11:53:59.5422012Z GAP doop privatebin/nginx-fpm-alpine 2.0.6 newest 2.1.0
|
||||
2026-10-28T11:53:59.5422132Z GAP doop prom/alertmanager v0.34.1
|
||||
2026-10-28T11:53:59.5422246Z GAP doop prom/node-exporter v1.12.1
|
||||
2026-10-28T11:53:59.5422393Z GAP doop prom/prometheus v3.15.0 newest v3.15.1
|
||||
2026-10-28T11:53:59.5422517Z GAP doop prometheuscommunity/smartctl-exporter v0.15.0
|
||||
2026-10-28T11:53:59.5422636Z GAP doop python 3.15-bookworm
|
||||
2026-10-28T11:53:59.5422785Z GAP doop quay.io/jetstack/version-checker v0.11.0
|
||||
2026-10-28T11:53:59.5422901Z GAP doop quay.io/prometheus/blackbox-exporter v0.29.1
|
||||
2026-10-28T11:53:59.5423021Z GAP doop renovate/renovate 44.181.1 newest 44.190.2
|
||||
2026-10-28T11:53:59.5423136Z GAP doop tailscale/tailscale v1.104.2
|
||||
2026-10-28T11:53:59.5423277Z GAP app emby/embyserver 4.11.0.4 newest 4.11.0.11
|
||||
2026-10-28T11:53:59.5423391Z GAP app ghcr.io/immich-app/postgres 16-vectorchord0.4.3-pg
|
||||
2026-10-28T11:53:59.5423509Z GAP app ghcr.io/karakeep-app/karakeep-chrome 151.0.7922.47-r1
|
||||
2026-10-28T11:53:59.5423653Z GAP app mariadb 12.3
|
||||
2026-10-28T11:53:59.5423765Z GAP app mariadb 11.4 newest 11.8
|
||||
2026-10-28T11:53:59.5423942Z GAP app mariadb 11.8
|
||||
2026-10-28T11:53:59.5424110Z GAP app mariadb 12.3
|
||||
2026-10-28T11:53:59.5424246Z GAP app mariadb 11.8
|
||||
2026-10-28T11:53:59.5424354Z GAP app msdeluise/plant-it 0.10.0
|
||||
2026-10-28T11:53:59.5424468Z GAP app plexinc/pms-docker 1.43.5.11029-6bf8af3f0
|
||||
2026-10-28T11:53:59.5424658Z GAP app postgis/postgis 16-3.5-alpine
|
||||
2026-10-28T11:53:59.5424868Z GAP app postgis/postgis 17-3.5-alpine
|
||||
2026-10-28T11:53:59.5424980Z GAP app postgres 18-alpine
|
||||
2026-10-28T11:53:59.5425088Z GAP app postgres 17-alpine
|
||||
2026-10-28T11:53:59.5425406Z GAP app postgres 18-alpine
|
||||
2026-10-28T11:53:59.5425533Z GAP app postgres 18-alpine
|
||||
2026-10-28T11:53:59.5425641Z GAP app postgres 18-alpine
|
||||
2026-10-28T11:53:59.5425794Z GAP app postgres 18-alpine
|
||||
2026-10-28T11:53:59.5425968Z GAP app postgres 18-alpine
|
||||
2026-10-28T11:53:59.5426086Z GAP app postgres 17-alpine
|
||||
2026-10-28T11:53:59.5426196Z GAP app postgres 16-alpine
|
||||
2026-10-28T11:53:59.5426377Z GAP app registry.gitlab.com/crafty-controller/crafty-4 4.11.0
|
||||
2026-10-28T11:53:59.5426501Z FLOATING doop ghcr.io/seanmorley15/adventurelog-backend latest
|
||||
2026-10-28T11:53:59.5426617Z FLOATING doop ghcr.io/seanmorley15/adventurelog-frontend latest
|
||||
2026-10-28T11:53:59.5426769Z FLOATING doop nginx 1.31-alpine
|
||||
2026-10-28T11:53:59.5426941Z FLOATING doop redis 8-alpine
|
||||
2026-10-28T11:53:59.5427058Z FLOATING doop redis 8.10-alpine
|
||||
2026-10-28T11:53:59.5427167Z FLOATING app ghcr.io/claperco/claper 2.5
|
||||
2026-10-28T11:53:59.5427319Z FLOATING app ghcr.io/thomiceli/opengist 1.15
|
||||
2026-10-28T11:53:59.5427427Z FLOATING app jellyfin/jellyfin 12.4
|
||||
2026-10-28T11:53:59.5427594Z FLOATING app lscr.io/linuxserver/prowlarr version-2.6.5.5623
|
||||
2026-10-28T11:53:59.5427755Z FLOATING app lscr.io/linuxserver/sabnzbd version-5.1.3
|
||||
2026-10-28T11:53:59.5427870Z FLOATING app lscr.io/linuxserver/transmission version-4.1.3-r0
|
||||
2026-10-28T11:53:59.5427979Z FLOATING app nzbgetcom/nzbget v26.3
|
||||
2026-10-28T11:53:59.5428091Z FLOATING app redis 7.4-alpine
|
||||
2026-10-28T11:53:59.5428225Z FLOATING app redis 7-alpine
|
||||
2026-10-28T11:53:59.5428338Z FLOATING app redis 7-alpine
|
||||
2026-10-28T11:53:59.5428442Z FLOATING app redis 7-alpine
|
||||
2026-10-28T11:53:59.5428584Z FLOATING app redis 7-alpine
|
||||
2026-10-28T11:53:59.5428690Z FLOATING app redis 7-alpine
|
||||
2026-10-28T11:53:59.5428799Z FLOATING app redis 7-alpine
|
||||
2026-10-28T11:53:59.5428904Z FLOATING app wger/server 2.7
|
||||
2026-10-28T11:53:59.5429101Z SELF box gitea.dooplex.hu/admin/felhom-samba 1.2.0
|
||||
2026-10-28T11:53:59.5429438Z SELF app gitea.dooplex.hu/admin/recipe-importer v0.9.11
|
||||
2026-10-28T11:53:59.5429556Z CURRENT doop codewithcj/sparkyfitness v1.9.0
|
||||
2026-10-28T11:53:59.5429700Z CURRENT doop f0rc3/gokapi v2.2.4
|
||||
2026-10-28T11:53:59.5429815Z CURRENT doop ghcr.io/alam00000/bentopdf 2.8.10
|
||||
2026-10-28T11:53:59.5429929Z CURRENT doop ghcr.io/thomiceli/opengist 1.15.3
|
||||
2026-10-28T11:53:59.5430043Z CURRENT doop glanceapp/glance v0.8.7
|
||||
2026-10-28T11:53:59.5430182Z CURRENT buil golang 1.27.3-trixie
|
||||
2026-10-28T11:53:59.5430292Z CURRENT buil golang 1.27.3-alpine3.24
|
||||
2026-10-28T11:53:59.5430397Z CURRENT doop onlyoffice/documentserver 9.4.0
|
||||
2026-10-28T11:53:59.5430545Z CURRENT buil restic 0.19.1
|
||||
2026-10-28T11:53:59.5430657Z CURRENT box traefik v3.7.16
|
||||
2026-10-28T11:53:59.5430828Z CURRENT doop vaultwarden/server 1.37.4
|
||||
2026-10-28T11:53:59.5430947Z CURRENT app deluan/navidrome 0.64.2
|
||||
2026-10-28T11:53:59.5431083Z CURRENT app docmost/docmost 0.97.0
|
||||
2026-10-28T11:53:59.5431193Z CURRENT app freikin/dawarich 1.19.0
|
||||
2026-10-28T11:53:59.5431306Z CURRENT app ghcr.io/advplyr/audiobookshelf 2.37.2
|
||||
2026-10-28T11:53:59.5431445Z CURRENT app ghcr.io/alam00000/bentopdf v2.8.10
|
||||
2026-10-28T11:53:59.5431657Z CURRENT app ghcr.io/alexta69/metube 2026.10.27
|
||||
2026-10-28T11:53:59.5431768Z CURRENT app ghcr.io/cmintey/wishlist v0.69.0
|
||||
2026-10-28T11:53:59.5431878Z CURRENT app ghcr.io/diced/zipline 4.8.2
|
||||
2026-10-28T11:53:59.5432012Z CURRENT app ghcr.io/gramps-project/grampsweb v25.6.0
|
||||
2026-10-28T11:53:59.5432127Z CURRENT app ghcr.io/grimmory-tools/grimmory v3.5.0
|
||||
2026-10-28T11:53:59.5432246Z CURRENT app ghcr.io/home-assistant/home-assistant 2026.10.4
|
||||
2026-10-28T11:53:59.5432448Z CURRENT app ghcr.io/mealie-recipes/mealie v3.29.0
|
||||
2026-10-28T11:53:59.5432622Z CURRENT app ghcr.io/papra-hq/papra 26.7.1-rootless
|
||||
2026-10-28T11:53:59.5432734Z CURRENT app ghcr.io/seanmorley15/adventurelog-backend v0.13.1
|
||||
2026-10-28T11:53:59.5432849Z CURRENT app ghcr.io/seanmorley15/adventurelog-frontend v0.13.1
|
||||
2026-10-28T11:53:59.5432986Z CURRENT app ghcr.io/sysadminsmedia/homebox 0.27.1
|
||||
2026-10-28T11:53:59.5433094Z CURRENT app ghost 6.73.0-alpine
|
||||
2026-10-28T11:53:59.5433201Z CURRENT app lscr.io/linuxserver/code-server 4.143.1
|
||||
2026-10-28T11:53:59.5433382Z CURRENT app lscr.io/linuxserver/grocy 4.7.1
|
||||
2026-10-28T11:53:59.5433494Z CURRENT app lscr.io/linuxserver/radarr 6.4.4
|
||||
2026-10-28T11:53:59.5433600Z CURRENT app lscr.io/linuxserver/sonarr 4.0.20
|
||||
2026-10-28T11:53:59.5433712Z CURRENT app lukevella/rallly 4.16.3
|
||||
2026-10-28T11:53:59.5433845Z CURRENT app onlyoffice/documentserver 9.4.0
|
||||
2026-10-28T11:53:59.5434024Z CURRENT app outlinewiki/outline 1.12.0
|
||||
2026-10-28T11:53:59.5434134Z CURRENT app privatebin/pdo 2.1.0
|
||||
2026-10-28T11:53:59.5434276Z CURRENT app vaultwarden/server 1.37.4-alpine
|
||||
2026-10-28T11:53:59.5434505Z CURRENT app vikunja/vikunja 2.7.1
|
||||
2026-10-28T11:53:59.5434622Z COUNTS ADVISORY=43 BEHIND=12 CURRENT=38 FLOATING=20 GAP=75 NOT_CHECKED=7 SELF=2
|
||||
2026-10-28T11:53:59.5434737Z RUNTIME read=14 (890 s) from-cache=171 not-checked=0 zstd-decoder=zstandard 0.25.0 (pinned wheel, sha256 checked)
|
||||
2026-10-28T11:53:59.5434899Z TAGS fetched=119 from-cache=0 retried-429=0 (cache /root/.cache/felhom-watch-tags.json)
|
||||
2026-10-28T11:53:59.5435025Z REQUESTS api.github.com=69 api.osv.dev=1 auth.docker.io=1 blog.cloudflare.com=1 ghcr.io=174 github.com=62 hub.docker.com=211 raw.githubusercontent.com=1 registry-1.docker.io=1
|
||||
2026-10-28T11:53:59.5638426Z MAIL (not sent, --no-mail): [Felhom security] n8n — 12 new advisories
|
||||
2026-10-28T11:53:59.5638978Z MAIL (not sent, --no-mail): [Felhom security] the watch could not check runtime
|
||||
2026-10-28T11:53:59.5729218Z STATE written: /tmp/state-dry.json (382 known advisories)
|
||||
2026-10-28T11:53:59.6741799Z Cleaning up container for job watch
|
||||
2026-10-28T11:54:00.2357155Z 🏁 Job succeeded
|
||||
@@ -0,0 +1,285 @@
|
||||
2026-10-28T03:40:06.3485708Z felhom-gates-runner-2(version:v0.6.1) received task 2469 of job watch, be triggered by event: schedule
|
||||
2026-10-28T03:40:06.3521612Z workflow prepared
|
||||
2026-10-28T03:40:06.3523208Z evaluating expression 'success()'
|
||||
2026-10-28T03:40:06.3524206Z expression 'success()' evaluated to 'true'
|
||||
2026-10-28T03:40:06.3530159Z evaluating expression ''
|
||||
2026-10-28T03:40:06.3530552Z expression '' evaluated to 'true'
|
||||
2026-10-28T03:40:06.3530959Z ⭐ Run Main Fetch main (latest, for the memory) and the two sibling repos
|
||||
2026-10-28T03:40:06.3534372Z Wrote command \n\necho "WATCH_STARTED_AT=$(date +%s)" >> "$GITHUB_ENV"\nbase=http://gitea.gitea-system.svc.cluster.local:3000/admin\ngit init -q . && git remote add origin $base/felhom.eu.git\ngit fetch -q --depth 1 origin main && git checkout -q -B main FETCH_HEAD\necho "felhom.eu main at $(git rev-parse --short=12 HEAD)"\nfor r in felhom-controller app-catalog-felhom.eu; do\n git init -q ../$r && git -C ../$r remote add origin $base/$r.git\n git -C ../$r fetch -q --depth 1 origin main && git -C ../$r checkout -q FETCH_HEAD\n echo "$r at $(git -C ../$r rev-parse --short=12 HEAD)"\ndone\n\n\n to 'workflow/0.sh'
|
||||
2026-10-28T03:40:06.3535721Z ::group::Run echo "WATCH_STARTED_AT=$(date +%s)" >> "$GITHUB_ENV"
|
||||
2026-10-28T03:40:06.3535978Z echo "WATCH_STARTED_AT=$(date +%s)" >> "$GITHUB_ENV"
|
||||
2026-10-28T03:40:06.3536252Z base=http://gitea.gitea-system.svc.cluster.local:3000/admin
|
||||
2026-10-28T03:40:06.3536383Z git init -q . && git remote add origin $base/felhom.eu.git
|
||||
2026-10-28T03:40:06.3536547Z git fetch -q --depth 1 origin main && git checkout -q -B main FETCH_HEAD
|
||||
2026-10-28T03:40:06.3536673Z echo "felhom.eu main at $(git rev-parse --short=12 HEAD)"
|
||||
2026-10-28T03:40:06.3536803Z for r in felhom-controller app-catalog-felhom.eu; do
|
||||
2026-10-28T03:40:06.3536958Z git init -q ../$r && git -C ../$r remote add origin $base/$r.git
|
||||
2026-10-28T03:40:06.3537095Z git -C ../$r fetch -q --depth 1 origin main && git -C ../$r checkout -q FETCH_HEAD
|
||||
2026-10-28T03:40:06.3537224Z echo "$r at $(git -C ../$r rev-parse --short=12 HEAD)"
|
||||
2026-10-28T03:40:06.3537342Z done
|
||||
2026-10-28T03:40:06.3537482Z shell: bash --noprofile --norc -e -o pipefail {0}
|
||||
2026-10-28T03:40:06.3537613Z ::endgroup::
|
||||
2026-10-28T03:40:39.3201705Z felhom.eu main at 3d3cd3ad7cb0
|
||||
2026-10-28T03:40:41.5191870Z felhom-controller at ed3927f03a52
|
||||
2026-10-28T03:40:42.7211795Z app-catalog-felhom.eu at 540f18552bbf
|
||||
2026-10-28T03:40:42.7235514Z ::group::Run set -u
|
||||
2026-10-28T03:40:42.7235894Z set -u
|
||||
2026-10-28T03:40:42.7236110Z mkdir -p documentation/security-watch
|
||||
2026-10-28T03:40:42.7236376Z mode="${MODE:-run}"
|
||||
2026-10-28T03:40:42.7236571Z [ "${GITHUB_EVENT_NAME:-}" = "schedule" ] && mode=run
|
||||
2026-10-28T03:40:42.7236777Z echo "mode: $mode"
|
||||
2026-10-28T03:40:42.7236961Z case "$mode" in
|
||||
2026-10-28T03:40:42.7237243Z test-mail) python3 scripts/security_watch.py --test-mail; exit $? ;;
|
||||
2026-10-28T03:40:42.7237461Z dry) extra="--no-mail" ; state=/tmp/state-dry.json
|
||||
2026-10-28T03:40:42.7237664Z cp documentation/security-watch/state.json "$state" 2>/dev/null || true ;;
|
||||
2026-10-28T03:40:42.7237932Z seed) extra="--seed" ; state=documentation/security-watch/state.json ;;
|
||||
2026-10-28T03:40:42.7238152Z run) extra="" ; state=documentation/security-watch/state.json ;;
|
||||
2026-10-28T03:40:42.7238354Z *) echo "unknown mode $mode"; exit 2 ;;
|
||||
2026-10-28T03:40:42.7238545Z esac
|
||||
2026-10-28T03:40:42.7238776Z python3 scripts/security_watch.py --state="$state" --catalog=../app-catalog-felhom.eu \
|
||||
2026-10-28T03:40:42.7239012Z --controller=../felhom-controller --json=/tmp/watch-results.json $extra
|
||||
2026-10-28T03:40:42.7239227Z shell: bash --noprofile --norc -e -o pipefail {0}
|
||||
2026-10-28T03:40:42.7239528Z env:
|
||||
2026-10-28T03:40:42.7240564Z RESEND_API_KEY: ***
|
||||
2026-10-28T03:40:42.7240790Z GH_ADVISORY_TOKEN: ***
|
||||
2026-10-28T03:40:42.7241057Z MODE:
|
||||
2026-10-28T03:40:42.7241238Z ::endgroup::
|
||||
2026-10-28T03:40:42.7278994Z mode: run
|
||||
2026-10-28T03:40:42.9280801Z /root/.cache/act/0366a85aab65e222/hostexecutor/scripts/security_watch.py:829: DeprecationWarning: datetime.datetime.utcnow() is deprecated and scheduled for removal in a future version. Use timezone-aware objects to represent datetimes in UTC: datetime.datetime.now(datetime.UTC).
|
||||
2026-10-28T03:40:42.9281606Z today = datetime.date.fromisoformat(opts["today"]) if "today" in opts else datetime.datetime.utcnow().date()
|
||||
2026-10-28T03:40:42.9827880Z security watch 2026-10-28: 197 pins (11 box/build, 97 app, 89 DooPlex); GitHub key PRESENT — every repo's advisories tonight
|
||||
2026-10-28T03:42:15.7217578Z ADVISORY doop actualbudget/actual-server 26.10.0 CVE-2026-111497 (fixed 24.22.1)
|
||||
2026-10-28T03:42:15.7218164Z ADVISORY doop advplyr/audiobookshelf 2.37.1 CVE-2026-111497 (fixed 24.22.1)
|
||||
2026-10-28T03:42:15.7218581Z ADVISORY box cloudflare/cloudflared 2026.10.4 feed:cloudflare-blog:01M5DK5J81T0VC8YTBR2FKD8A3 (fixed read the notice); vulnnotes:cloudflared@2026.10.5:VULN-183456 (fixed 2026.10.5)
|
||||
2026-10-28T03:42:15.7218766Z ADVISORY doop codewithcj/sparkyfitness_server v1.9.0 CVE-2026-111497 (fixed 24.22.1)
|
||||
2026-10-28T03:42:15.7218908Z ADVISORY doop crocodilestick/calibre-web-automated dev CVE-2026-111497 (fixed 1.2.1)
|
||||
2026-10-28T03:42:15.7219112Z ADVISORY doop docker.io/calcom/cal.com v6.2.0 CVE-2026-111497 (fixed 22.23.4, 24.22.1, 26.12.1)
|
||||
2026-10-28T03:42:15.7219254Z ADVISORY doop flomp/wanderer-db v0.21.0 GHSA-vprp-gr6m-j375 (fixed v0.21.2); GHSA-3xp7-7492-j2q6 (fixed v0.21.2); GHSA-j9m4-8qwf-jvx6 (fixed v0.21.2); GHSA-fprh-3pp9-68m9 (fixed v0.21.2); … 1 more
|
||||
2026-10-28T03:42:15.7219436Z ADVISORY doop flomp/wanderer-web v0.21.0 GHSA-vprp-gr6m-j375 (fixed v0.21.2); GHSA-3xp7-7492-j2q6 (fixed v0.21.2); GHSA-j9m4-8qwf-jvx6 (fixed v0.21.2); GHSA-fprh-3pp9-68m9 (fixed v0.21.2); … 2 more
|
||||
2026-10-28T03:42:15.7219603Z ADVISORY doop ghcr.io/gethomepage/homepage v1.13.2 GHSA-669x-4pg4-w24r (fixed 2.2.0); CVE-2026-111497 (fixed 22.23.4)
|
||||
2026-10-28T03:42:15.7219763Z ADVISORY doop ghcr.io/immich-app/immich-machine-learning v2.7.5 GHSA-q89f-h332-8q2h (fixed v3.2.4); GHSA-h5w4-vjv4-9r5q (fixed a version after 3.1.0 (the notice names none)); GHSA-g4w3-c888-cr93 (fixed v3.2.0); GHSA-72rm-x7xr-v679 (fixed v3.3.0); … 7 more
|
||||
2026-10-28T03:42:15.7220024Z ADVISORY doop ghcr.io/immich-app/immich-server v2.7.5 GHSA-q89f-h332-8q2h (fixed v3.2.4); GHSA-h5w4-vjv4-9r5q (fixed a version after 3.1.0 (the notice names none)); GHSA-g4w3-c888-cr93 (fixed v3.2.0); GHSA-72rm-x7xr-v679 (fixed v3.3.0); … 8 more
|
||||
2026-10-28T03:42:15.7220186Z ADVISORY doop ghcr.io/lukegus/termix release-2.9.2 CVE-2026-111497 (fixed 26.12.1)
|
||||
2026-10-28T03:42:15.7220446Z ADVISORY doop ghcr.io/paperless-ngx/paperless-ngx 3.3.4 CVE-2026-111497 (fixed 1.2.1)
|
||||
2026-10-28T03:42:15.7220603Z ADVISORY doop gitea/gitea 1.26.2 GHSA-wx44-9m3m-rjqx (fixed 28.2.0); GHSA-4jmf-h2cm-hg7w (fixed 28.2.0); GHSA-8j56-f865-gqq2 (fixed 28.2.0); GHSA-fxq4-gr55-7x5g (fixed 28.2.0); … 127 more
|
||||
2026-10-28T03:42:15.7220779Z ADVISORY doop grafana/grafana 13.2.4 GHSA-8xmm-x63g-f6xv (fixed no fixed version named yet); GHSA-4724-7jwc-3fpw (fixed the range is unreadable — check by hand); GHSA-2x6g-h2hg-rq84 (fixed the range is unreadable — check by hand); GHSA-8wjh-59cw-9xh4 (fixed no fixed version named yet); … 2 more
|
||||
2026-10-28T03:42:15.7221080Z ADVISORY box gtstef/filebrowser 1.5.8-stable GHSA-gfgm-886h-6r47 (fixed 2.0.2-stable, 2.1.4-beta); GHSA-wxj5-g3qp-g732 (fixed 2.0.2-stable, 2.1.3-beta); GHSA-3j46-5w28-f8p2 (fixed 2.1.0-stable, 2.1.3-beta); GHSA-4vrc-935w-xxq2 (fixed 2.1.0-stable, 2.1.3-beta); … 31 more
|
||||
2026-10-28T03:42:15.7221265Z ADVISORY doop louislam/uptime-kuma 2.5.6 GHSA-qjxc-h5jf-c7rj (fixed the range is unreadable — check by hand); release:louislam/uptime-kuma@2.5.8 (fixed 2.5.8); release:louislam/uptime-kuma@2.5.7 (fixed 2.5.7); CVE-2026-111497 (fixed 22.23.4)
|
||||
2026-10-28T03:42:15.7221932Z ADVISORY doop outlinewiki/outline 1.11.0 GHSA-x4w3-9p9j-cprh (fixed 1.12.0); GHSA-rq53-m97j-f2pg (fixed 1.12.0); GHSA-h6ff-rw9x-5mq2 (fixed 1.12.0); GHSA-rvj7-2gww-6xfq (fixed 1.12.0); … 3 more
|
||||
2026-10-28T03:42:15.7222145Z ADVISORY doop redis 8.10.2 GHSA-c8h9-259x-jff4 (fixed the range is unreadable — check by hand); GHSA-8ghh-qpmp-7826 (fixed no fixed version named yet); GHSA-93m2-935m-8rj3 (fixed no fixed version named yet); GHSA-m8fj-85cg-7vhp (fixed the range is unreadable — check by hand); … 8 more
|
||||
2026-10-28T03:42:15.7222496Z ADVISORY doop rommapp/romm 5.4.0 release:rommapp/romm@5.4.1 (fixed 5.4.1); CVE-2026-111497 (fixed 24.22.1)
|
||||
2026-10-28T03:42:15.7222629Z ADVISORY doop vabene1111/recipes 2.6.15 CVE-2026-111497 (fixed 24.22.1)
|
||||
2026-10-28T03:42:15.7222789Z ADVISORY app actualbudget/actual-server 26.9.0 CVE-2026-111497 (fixed 24.22.1)
|
||||
2026-10-28T03:42:15.7222944Z ADVISORY app calcom/cal.com v6.2.0 GHSA-p3f6-52gv-cj7m (fixed the range is unreadable — check by hand); GHSA-cpf2-q635-xrwx (fixed the range is unreadable — check by hand); CVE-2026-111497 (fixed 22.23.4, 24.22.1, 26.12.1)
|
||||
2026-10-28T03:42:15.7223116Z ADVISORY app codewithcj/sparkyfitness v0.17.3 GHSA-v883-jx9h-qf29 (fixed a version after 1.7.2 (the notice names none)); GHSA-cmmf-53wf-r5gv (fixed a version after 1.6.5 (the notice names none)); GHSA-p8cf-g8rv-gvrq (fixed a version after 1.6.5 (the notice names none))
|
||||
2026-10-28T03:42:15.7223287Z ADVISORY app codewithcj/sparkyfitness_server v0.17.3 GHSA-v883-jx9h-qf29 (fixed a version after 1.7.2 (the notice names none)); GHSA-cmmf-53wf-r5gv (fixed a version after 1.6.5 (the notice names none)); GHSA-p8cf-g8rv-gvrq (fixed a version after 1.6.5 (the notice names none)); CVE-2026-111497 (fixed 24.22.1)
|
||||
2026-10-28T03:42:15.7223494Z ADVISORY app crocodilestick/calibre-web-automated v4.0.8 CVE-2026-111497 (fixed 1.2.1)
|
||||
2026-10-28T03:42:15.7223662Z ADVISORY app f0rc3/gokapi v1.9.6 GHSA-45vh-rpc8-hxpp (fixed 2.2.4); GHSA-qwc6-vc2v-2ggj (fixed 2.2.4); GHSA-j6jp-78w8-34x6 (fixed 2.2.4); GHSA-m2hx-wjxc-9fp4 (fixed 2.2.3); … 6 more
|
||||
2026-10-28T03:42:15.7223840Z ADVISORY app fallenbagel/jellyseerr 2.7.3 GHSA-8j73-j6rc-q8xh (fixed 3.5.0); GHSA-xc6j-6p6h-p799 (fixed 3.5.0); GHSA-mc6w-69r3-62h8 (fixed 3.4.0); GHSA-gx3h-3jg5-q65f (fixed 3.1.0); … 3 more
|
||||
2026-10-28T03:42:15.7224007Z ADVISORY app flomp/wanderer-db v0.20.0 GHSA-vprp-gr6m-j375 (fixed v0.21.2); GHSA-3xp7-7492-j2q6 (fixed v0.21.2); GHSA-j9m4-8qwf-jvx6 (fixed v0.21.2); GHSA-fprh-3pp9-68m9 (fixed v0.21.2); … 7 more
|
||||
2026-10-28T03:42:15.7224158Z ADVISORY app flomp/wanderer-web v0.20.0 GHSA-vprp-gr6m-j375 (fixed v0.21.2); GHSA-3xp7-7492-j2q6 (fixed v0.21.2); GHSA-j9m4-8qwf-jvx6 (fixed v0.21.2); GHSA-fprh-3pp9-68m9 (fixed v0.21.2); … 8 more
|
||||
2026-10-28T03:42:15.7224314Z ADVISORY app freikin/dawarich 1.15.3 release:Freika/dawarich@1.17.0 (fixed 1.17.0); CVE-2026-111497 (fixed 22.23.4, 24.22.1, 26.12.1)
|
||||
2026-10-28T03:42:15.7224463Z ADVISORY app ghcr.io/alexta69/metube 2026.09.29 CVE-2026-111497 (fixed 1.2.1)
|
||||
2026-10-28T03:42:15.7224635Z ADVISORY app ghcr.io/diced/zipline 4.8.0 CVE-2026-111497 (fixed 24.22.1)
|
||||
2026-10-28T03:42:15.7224769Z ADVISORY app ghcr.io/gethomepage/homepage v1.13.2 GHSA-669x-4pg4-w24r (fixed 2.2.0); CVE-2026-111497 (fixed 22.23.4)
|
||||
2026-10-28T03:42:15.7224897Z ADVISORY app ghcr.io/home-assistant/home-assistant 2026.9.4 CVE-2026-111497 (fixed 1.2.1)
|
||||
2026-10-28T03:42:15.7225037Z ADVISORY app ghcr.io/immich-app/immich-machine-learning v3.2.4 GHSA-8244-8vpr-vp9c (fixed the range is unreadable — check by hand); release:immich-app/immich@v3.3.5 (fixed v3.3.5)
|
||||
2026-10-28T03:42:15.7225219Z ADVISORY app ghcr.io/immich-app/immich-server v3.2.4 GHSA-8244-8vpr-vp9c (fixed the range is unreadable — check by hand); release:immich-app/immich@v3.3.5 (fixed v3.3.5); CVE-2026-111497 (fixed 24.22.1)
|
||||
2026-10-28T03:42:15.7225412Z ADVISORY app ghcr.io/karakeep-app/karakeep 0.33.2 GHSA-pp34-2c9r-mchw (fixed no fixed version named yet); release:karakeep-app/karakeep@v0.34.1 (fixed v0.34.1); release:karakeep-app/karakeep@v0.34.0 (fixed v0.34.0); CVE-2026-111497 (fixed 24.22.1)
|
||||
2026-10-28T03:42:15.7225576Z ADVISORY app ghcr.io/lukegus/termix 2.8.0 GHSA-6gr3-r7jx-wfmh (fixed >= 26.10.0); GHSA-frx8-qqgg-7j7g (fixed >= 26.10.0); GHSA-3q2m-5r5p-w45r (fixed >= 26.10.0); GHSA-rgf3-2q88-q4wp (fixed >= 26.10.0); … 9 more
|
||||
2026-10-28T03:42:15.7225737Z ADVISORY app ghcr.io/paperless-ngx/paperless-ngx 2.20.15 GHSA-c8f3-pqr2-rr24 (fixed 3.3.2); GHSA-2jhj-xqrq-rmrq (fixed 3.1.2); CVE-2026-111497 (fixed 1.1.1)
|
||||
2026-10-28T03:42:15.7225906Z ADVISORY app ghcr.io/papra-hq/papra 26.6.2-rootless CVE-2026-111497 (fixed 26.12.1)
|
||||
2026-10-28T03:42:15.7226028Z ADVISORY app ghcr.io/seanmorley15/adventurelog-backend v0.13.0 release:seanmorley15/AdventureLog@v0.13.1 (fixed v0.13.1)
|
||||
2026-10-28T03:42:15.7226162Z ADVISORY app ghcr.io/seanmorley15/adventurelog-frontend v0.13.0 release:seanmorley15/AdventureLog@v0.13.1 (fixed v0.13.1); CVE-2026-111497 (fixed 26.12.1)
|
||||
2026-10-28T03:42:15.7226383Z ADVISORY app ghcr.io/tandoorrecipes/recipes 2.6.15 GHSA-5f74-7rgh-pc97 (fixed a version after 2.6.15 (the notice names none)); GHSA-pcq2-64qw-jm4x (fixed no fixed version named yet); GHSA-69q3-5q6x-7hmx (fixed no fixed version named yet); GHSA-xq7g-9q95-vjc6 (fixed a version after 2.6.15 (the notice names none)); … 7 more
|
||||
2026-10-28T03:42:15.7226613Z ADVISORY app ghost 6.67.0-alpine CVE-2026-111497 (fixed 22.23.4)
|
||||
2026-10-28T03:42:15.7226803Z ADVISORY app gitea/gitea 1.27.3 GHSA-wx44-9m3m-rjqx (fixed 28.2.0); GHSA-4jmf-h2cm-hg7w (fixed 28.2.0); GHSA-8j56-f865-gqq2 (fixed 28.2.0); GHSA-fxq4-gr55-7x5g (fixed 28.2.0); … 37 more
|
||||
2026-10-28T03:42:15.7226959Z ADVISORY app glanceapp/glance v0.8.5 GHSA-r225-jhr6-68cc (fixed >= 0.8.7)
|
||||
2026-10-28T03:42:15.7227132Z ADVISORY app grafana/grafana 13.2.4 GHSA-8xmm-x63g-f6xv (fixed no fixed version named yet); GHSA-4724-7jwc-3fpw (fixed the range is unreadable — check by hand); GHSA-2x6g-h2hg-rq84 (fixed the range is unreadable — check by hand); GHSA-8wjh-59cw-9xh4 (fixed no fixed version named yet); … 2 more
|
||||
2026-10-28T03:42:15.7227311Z ADVISORY app louislam/uptime-kuma 2.5.7 GHSA-qjxc-h5jf-c7rj (fixed the range is unreadable — check by hand); release:louislam/uptime-kuma@2.5.8 (fixed 2.5.8)
|
||||
2026-10-28T03:42:15.7227461Z ADVISORY app n8nio/n8n 2.44.7 GHSA-365g-vjw2-grx8 (fixed no fixed version named yet)
|
||||
2026-10-28T03:42:15.7227594Z ADVISORY app rommapp/romm 5.4.1 CVE-2026-111497 (fixed 24.22.1)
|
||||
2026-10-28T03:42:15.7227725Z NOT CHECKED doop gitea.dooplex.hu/admin/felhom-act-runner 0.1.0 registry gitea.dooplex.hu: no anonymous token route
|
||||
2026-10-28T03:42:15.7228028Z NOT CHECKED doop gitea.dooplex.hu/admin/jarr latest registry gitea.dooplex.hu: no anonymous token route
|
||||
2026-10-28T03:42:15.7228163Z NOT CHECKED doop gitea.dooplex.hu/admin/recipe-importer latest registry gitea.dooplex.hu: no anonymous token route
|
||||
2026-10-28T03:42:15.7228306Z NOT CHECKED doop gitea.dooplex.hu/admin/revfulop-calendar 1.6.2 registry gitea.dooplex.hu: no anonymous token route
|
||||
2026-10-28T03:42:15.7228430Z NOT CHECKED doop gitea.dooplex.hu/admin/sparkyfitness-export 0.3.0 registry gitea.dooplex.hu: no anonymous token route
|
||||
2026-10-28T03:42:15.7228564Z NOT CHECKED doop gitea.dooplex.hu/admin/wan-probe 0.1.0 registry gitea.dooplex.hu: no anonymous token route
|
||||
2026-10-28T03:42:15.7228704Z NOT CHECKED doop linuxserver/sonarr version-4.0.20.3014 Docker Hub tags of linuxserver/sonarr: HTTP 429
|
||||
2026-10-28T03:42:15.7228830Z NOT CHECKED doop mikefarah/yq 4.54.1 Docker Hub tags of mikefarah/yq: HTTP 429
|
||||
2026-10-28T03:42:15.7229054Z NOT CHECKED doop minio/minio latest Docker Hub tags of minio/minio: HTTP 429; manifest minio/minio:latest: HTTP 401
|
||||
2026-10-28T03:42:15.7229183Z NOT CHECKED doop mongodb/mongodb-community-server 8.0.5-ubuntu2204 Docker Hub tags of mongodb/mongodb-community-server: HTTP 429
|
||||
2026-10-28T03:42:15.7229390Z NOT CHECKED doop msdeluise/plant-it-server 0.10.0 Docker Hub tags of msdeluise/plant-it-server: HTTP 429
|
||||
2026-10-28T03:42:15.7229544Z NOT CHECKED doop mysql 8.4 Docker Hub tags of library/mysql: HTTP 429
|
||||
2026-10-28T03:42:15.7229682Z NOT CHECKED doop nicolaka/netshoot latest Docker Hub tags of nicolaka/netshoot: HTTP 429
|
||||
2026-10-28T03:42:15.7230430Z NOT CHECKED doop privatebin/nginx-fpm-alpine 2.0.6 Docker Hub tags of privatebin/nginx-fpm-alpine: HTTP 429
|
||||
2026-10-28T03:42:15.7230619Z NOT CHECKED doop prom/alertmanager v0.34.1 Docker Hub tags of prom/alertmanager: HTTP 429
|
||||
2026-10-28T03:42:15.7230824Z NOT CHECKED doop prom/node-exporter v1.12.1 Docker Hub tags of prom/node-exporter: HTTP 429
|
||||
2026-10-28T03:42:15.7230961Z NOT CHECKED doop prom/prometheus v3.15.0 Docker Hub tags of prom/prometheus: HTTP 429
|
||||
2026-10-28T03:42:15.7231106Z NOT CHECKED doop prometheuscommunity/smartctl-exporter v0.15.0 Docker Hub tags of prometheuscommunity/smartctl-exporter: HTTP 429
|
||||
2026-10-28T03:42:15.7231240Z NOT CHECKED doop python 3.15-bookworm Docker Hub tags of library/python: HTTP 429
|
||||
2026-10-28T03:42:15.7231394Z NOT CHECKED doop renovate/renovate 44.181.1 Docker Hub tags of renovate/renovate: HTTP 429
|
||||
2026-10-28T03:42:15.7231559Z NOT CHECKED doop tailscale/tailscale v1.104.2 Docker Hub tags of tailscale/tailscale: HTTP 429
|
||||
2026-10-28T03:42:15.7231701Z NOT CHECKED app lscr.io/linuxserver/sonarr 4.0.20 https://hub.docker.com/v2/repositories/linuxserver/sonarr/tags: The read operation timed out
|
||||
2026-10-28T03:42:15.7231846Z BEHIND doop getmeili/meilisearch v1.11.3 newest v1.56.0
|
||||
2026-10-28T03:42:15.7231966Z BEHIND doop ghcr.io/diced/zipline 4.8.1 newest 4.8.2
|
||||
2026-10-28T03:42:15.7232100Z BEHIND app getmeili/meilisearch v1.41.0 newest v1.56.0
|
||||
2026-10-28T03:42:15.7232262Z BEHIND app getmeili/meilisearch v1.36.0 newest v1.56.0
|
||||
2026-10-28T03:42:15.7232393Z BEHIND app ghcr.io/hargata/lubelogger v1.7.3 newest v1.7.4
|
||||
2026-10-28T03:42:15.7232538Z BEHIND app ghcr.io/kozea/radicale 3.8.1 newest 3.9.0
|
||||
2026-10-28T03:42:15.7232666Z BEHIND app gotson/komga 1.28.0 newest 1.29.2
|
||||
2026-10-28T03:42:15.7232788Z BEHIND app kimai/kimai2 2.67.0 newest 2.71.0
|
||||
2026-10-28T03:42:15.7232902Z BEHIND app lscr.io/linuxserver/bookstack 26.09.2 newest 26.09.20260929
|
||||
2026-10-28T03:42:15.7233054Z BEHIND app nextcloud 34.0.4-apache newest 34.0.5-apache
|
||||
2026-10-28T03:42:15.7233178Z BEHIND app nginx 1.30.5-alpine newest 1.31.8-alpine
|
||||
2026-10-28T03:42:15.7233298Z BEHIND app qbittorrentofficial/qbittorrent-nox 5.2.4-1 newest 5.3.0-2
|
||||
2026-10-28T03:42:15.7233424Z GAP buil alpine 3.24.2 newest 3.24.3
|
||||
2026-10-28T03:42:15.7233548Z GAP buil alpine 3.24.2 newest 3.24.3
|
||||
2026-10-28T03:42:15.7233664Z GAP doop alpine/k8s 1.37.1
|
||||
2026-10-28T03:42:15.7233814Z GAP doop arcadiatechnology/crafty-4 4.11.0
|
||||
2026-10-28T03:42:15.7233939Z GAP doop bhgedigital/envsubst latest
|
||||
2026-10-28T03:42:15.7234057Z GAP doop busybox 1.38
|
||||
2026-10-28T03:42:15.7234173Z GAP doop codercom/code-server 4.143.1
|
||||
2026-10-28T03:42:15.7234329Z GAP buil debian 13.7-slim
|
||||
2026-10-28T03:42:15.7234566Z GAP buil debian 13.7-slim
|
||||
2026-10-28T03:42:15.7234808Z GAP doop docker.io/bitnamilegacy/postgresql 17.6.0-debian-12-r3
|
||||
2026-10-28T03:42:15.7235046Z GAP doop docker.io/library/nextcloud 34.0.5-apache
|
||||
2026-10-28T03:42:15.7235268Z GAP doop docker.io/valkey/valkey 9.2-alpine
|
||||
2026-10-28T03:42:15.7235388Z GAP doop filebrowser/filebrowser v2.63.23
|
||||
2026-10-28T03:42:15.7235507Z GAP doop ghcr.io/cloudnative-pg/postgresql 17.2 newest 17.11
|
||||
2026-10-28T03:42:15.7235668Z GAP doop ghcr.io/headlamp-k8s/headlamp v0.46.0
|
||||
2026-10-28T03:42:15.7235787Z GAP doop ghcr.io/immich-app/postgres 16-vectorchord0.3.0
|
||||
2026-10-28T03:42:15.7235926Z GAP doop ghcr.io/jimmidyson/configmap-reload v0.15.0
|
||||
2026-10-28T03:42:15.7236042Z GAP doop ghcr.io/onedr0p/exportarr v2.3.0
|
||||
2026-10-28T03:42:15.7236206Z GAP doop ghcr.io/seerr-team/seerr v3.5.1
|
||||
2026-10-28T03:42:15.7236329Z GAP doop ghcr.io/seriousm4x/upsnap 5
|
||||
2026-10-28T03:42:15.7236443Z GAP doop ghcr.io/stakater/reloader v1.4.22 newest v1.4.23
|
||||
2026-10-28T03:42:15.7236591Z GAP doop ghcr.io/tautulli/tautulli v2.18.2
|
||||
2026-10-28T03:42:15.7236800Z GAP doop griefed/serverpackcreator 8.1.2
|
||||
2026-10-28T03:42:15.7237002Z GAP doop gtstef/filebrowser 1.5.8-stable
|
||||
2026-10-28T03:42:15.7237126Z GAP doop guacamole/guacamole 1.6.0
|
||||
2026-10-28T03:42:15.7237300Z GAP doop guacamole/guacd 1.6.0
|
||||
2026-10-28T03:42:15.7237434Z GAP doop index.docker.io/plexinc/pms-docker 1.43.5.11029-6bf8af3f0
|
||||
2026-10-28T03:42:15.7237638Z GAP doop itzg/mc-backup 2026.10.1 newest 2026.10.2
|
||||
2026-10-28T03:42:15.7237758Z GAP doop itzg/minecraft-server 2026.10.0-java21 newest 2026.10.1-java17
|
||||
2026-10-28T03:42:15.7237883Z GAP doop linuxserver/bookstack 26.09.20260929
|
||||
2026-10-28T03:42:15.7238012Z GAP doop linuxserver/prowlarr version-2.6.5.5623
|
||||
2026-10-28T03:42:15.7238130Z GAP doop linuxserver/qbittorrent 5.3.0
|
||||
2026-10-28T03:42:15.7238255Z GAP doop linuxserver/radarr version-6.4.4.10685
|
||||
2026-10-28T03:42:15.7238369Z GAP doop mariadb 11
|
||||
2026-10-28T03:42:15.7238484Z GAP doop postgis/postgis 16-3.5
|
||||
2026-10-28T03:42:15.7238592Z GAP doop postgres 15-alpine
|
||||
2026-10-28T03:42:15.7238705Z GAP doop postgres 16-alpine
|
||||
2026-10-28T03:42:15.7238815Z GAP doop quay.io/jetstack/version-checker v0.11.0
|
||||
2026-10-28T03:42:15.7238925Z GAP doop quay.io/prometheus/blackbox-exporter v0.29.1
|
||||
2026-10-28T03:42:15.7239181Z GAP app emby/embyserver 4.11.0.4 newest 4.11.0.11
|
||||
2026-10-28T03:42:15.7239348Z GAP app ghcr.io/immich-app/postgres 16-vectorchord0.4.3-pg
|
||||
2026-10-28T03:42:15.7239472Z GAP app ghcr.io/karakeep-app/karakeep-chrome 151.0.7922.47-r1
|
||||
2026-10-28T03:42:15.7239647Z GAP app mariadb 12.3
|
||||
2026-10-28T03:42:15.7239779Z GAP app mariadb 11.4 newest 11.8
|
||||
2026-10-28T03:42:15.7239902Z GAP app mariadb 11.8
|
||||
2026-10-28T03:42:15.7240014Z GAP app mariadb 12.3
|
||||
2026-10-28T03:42:15.7240135Z GAP app mariadb 11.8
|
||||
2026-10-28T03:42:15.7240246Z GAP app msdeluise/plant-it 0.10.0
|
||||
2026-10-28T03:42:15.7240358Z GAP app plexinc/pms-docker 1.43.5.11029-6bf8af3f0
|
||||
2026-10-28T03:42:15.7240468Z GAP app postgis/postgis 16-3.5-alpine
|
||||
2026-10-28T03:42:15.7240576Z GAP app postgis/postgis 17-3.5-alpine
|
||||
2026-10-28T03:42:15.7240690Z GAP app postgres 18-alpine
|
||||
2026-10-28T03:42:15.7240798Z GAP app postgres 17-alpine
|
||||
2026-10-28T03:42:15.7240962Z GAP app postgres 18-alpine
|
||||
2026-10-28T03:42:15.7241074Z GAP app postgres 18-alpine
|
||||
2026-10-28T03:42:15.7241185Z GAP app postgres 18-alpine
|
||||
2026-10-28T03:42:15.7241294Z GAP app postgres 18-alpine
|
||||
2026-10-28T03:42:15.7241403Z GAP app postgres 18-alpine
|
||||
2026-10-28T03:42:15.7241514Z GAP app postgres 17-alpine
|
||||
2026-10-28T03:42:15.7241620Z GAP app postgres 16-alpine
|
||||
2026-10-28T03:42:15.7241939Z GAP app registry.gitlab.com/crafty-controller/crafty-4 4.11.0
|
||||
2026-10-28T03:42:15.7242058Z FLOATING doop ghcr.io/seanmorley15/adventurelog-backend latest
|
||||
2026-10-28T03:42:15.7242176Z FLOATING doop ghcr.io/seanmorley15/adventurelog-frontend latest
|
||||
2026-10-28T03:42:15.7242386Z FLOATING doop nginx 1.31-alpine
|
||||
2026-10-28T03:42:15.7242496Z FLOATING doop redis 8-alpine
|
||||
2026-10-28T03:42:15.7242674Z FLOATING doop redis 8.10-alpine
|
||||
2026-10-28T03:42:15.7242787Z FLOATING app ghcr.io/claperco/claper 2.5
|
||||
2026-10-28T03:42:15.7242935Z FLOATING app ghcr.io/thomiceli/opengist 1.15
|
||||
2026-10-28T03:42:15.7243042Z FLOATING app jellyfin/jellyfin 12.4
|
||||
2026-10-28T03:42:15.7243153Z FLOATING app lscr.io/linuxserver/prowlarr version-2.6.5.5623
|
||||
2026-10-28T03:42:15.7243293Z FLOATING app lscr.io/linuxserver/sabnzbd version-5.1.3
|
||||
2026-10-28T03:42:15.7243399Z FLOATING app lscr.io/linuxserver/transmission version-4.1.3-r0
|
||||
2026-10-28T03:42:15.7243507Z FLOATING app nzbgetcom/nzbget v26.3
|
||||
2026-10-28T03:42:15.7243614Z FLOATING app redis 7.4-alpine
|
||||
2026-10-28T03:42:15.7243803Z FLOATING app redis 7-alpine
|
||||
2026-10-28T03:42:15.7243996Z FLOATING app redis 7-alpine
|
||||
2026-10-28T03:42:15.7244149Z FLOATING app redis 7-alpine
|
||||
2026-10-28T03:42:15.7244417Z FLOATING app redis 7-alpine
|
||||
2026-10-28T03:42:15.7244528Z FLOATING app redis 7-alpine
|
||||
2026-10-28T03:42:15.7244741Z FLOATING app redis 7-alpine
|
||||
2026-10-28T03:42:15.7244913Z FLOATING app wger/server 2.7
|
||||
2026-10-28T03:42:15.7245044Z SELF box gitea.dooplex.hu/admin/felhom-samba 1.2.0
|
||||
2026-10-28T03:42:15.7245151Z SELF app gitea.dooplex.hu/admin/recipe-importer v0.9.11
|
||||
2026-10-28T03:42:15.7245266Z CURRENT doop codewithcj/sparkyfitness v1.9.0
|
||||
2026-10-28T03:42:15.7245378Z CURRENT doop f0rc3/gokapi v2.2.4
|
||||
2026-10-28T03:42:15.7245493Z CURRENT doop ghcr.io/alam00000/bentopdf 2.8.10
|
||||
2026-10-28T03:42:15.7245605Z CURRENT doop ghcr.io/thomiceli/opengist 1.15.3
|
||||
2026-10-28T03:42:15.7245712Z CURRENT doop glanceapp/glance v0.8.7
|
||||
2026-10-28T03:42:15.7245830Z CURRENT buil golang 1.27.3-trixie
|
||||
2026-10-28T03:42:15.7246008Z CURRENT buil golang 1.27.3-alpine3.24
|
||||
2026-10-28T03:42:15.7246128Z CURRENT doop onlyoffice/documentserver 9.4.0
|
||||
2026-10-28T03:42:15.7246244Z CURRENT buil restic 0.19.1
|
||||
2026-10-28T03:42:15.7246359Z CURRENT box traefik v3.7.16
|
||||
2026-10-28T03:42:15.7246469Z CURRENT doop vaultwarden/server 1.37.4
|
||||
2026-10-28T03:42:15.7246576Z CURRENT app deluan/navidrome 0.64.2
|
||||
2026-10-28T03:42:15.7246692Z CURRENT app docmost/docmost 0.97.0
|
||||
2026-10-28T03:42:15.7246802Z CURRENT app ghcr.io/advplyr/audiobookshelf 2.37.2
|
||||
2026-10-28T03:42:15.7246978Z CURRENT app ghcr.io/alam00000/bentopdf v2.8.10
|
||||
2026-10-28T03:42:15.7247177Z CURRENT app ghcr.io/cmintey/wishlist v0.69.0
|
||||
2026-10-28T03:42:15.7247296Z CURRENT app ghcr.io/gramps-project/grampsweb v25.6.0
|
||||
2026-10-28T03:42:15.7247418Z CURRENT app ghcr.io/grimmory-tools/grimmory v3.5.0
|
||||
2026-10-28T03:42:15.7247594Z CURRENT app ghcr.io/mealie-recipes/mealie v3.29.0
|
||||
2026-10-28T03:42:15.7247746Z CURRENT app ghcr.io/sysadminsmedia/homebox 0.27.1
|
||||
2026-10-28T03:42:15.7247858Z CURRENT app lscr.io/linuxserver/code-server 4.143.1
|
||||
2026-10-28T03:42:15.7247966Z CURRENT app lscr.io/linuxserver/grocy 4.7.1
|
||||
2026-10-28T03:42:15.7248220Z CURRENT app lscr.io/linuxserver/radarr 6.4.4
|
||||
2026-10-28T03:42:15.7248424Z CURRENT app lukevella/rallly 4.16.3
|
||||
2026-10-28T03:42:15.7248536Z CURRENT app onlyoffice/documentserver 9.4.0
|
||||
2026-10-28T03:42:15.7248649Z CURRENT app outlinewiki/outline 1.12.0
|
||||
2026-10-28T03:42:15.7248802Z CURRENT app privatebin/pdo 2.1.0
|
||||
2026-10-28T03:42:15.7248915Z CURRENT app vaultwarden/server 1.37.4-alpine
|
||||
2026-10-28T03:42:15.7249085Z CURRENT app vikunja/vikunja 2.7.1
|
||||
2026-10-28T03:42:15.7249229Z COUNTS ADVISORY=51 BEHIND=12 CURRENT=29 FLOATING=20 GAP=61 NOT_CHECKED=22 SELF=2
|
||||
2026-10-28T03:42:15.7249414Z REQUESTS api.github.com=71 api.osv.dev=1 blog.cloudflare.com=1 ghcr.io=174 github.com=64 hub.docker.com=211 raw.githubusercontent.com=1
|
||||
2026-10-28T03:42:16.5211202Z MAIL RESEND-ACCEPTED id=01a18099-f665-75b7-9940-1fa0a1a7a500 kind=advisory subject=[Felhom security] cloudflared, filebrowser, cal.com, sparkyfitness … — 198 new advisories
|
||||
2026-10-28T03:42:16.7734211Z MAIL RESEND-ACCEPTED id=01a18099-f846-7018-b995-78e039a7c71b kind=not_checked subject=[Felhom security] the watch could not check registry:docker.io
|
||||
2026-10-28T03:42:16.7971703Z STATE written: documentation/security-watch/state.json (325 known advisories)
|
||||
2026-10-28T03:42:16.8539518Z ::group::Run set -u
|
||||
2026-10-28T03:42:16.8539956Z set -u
|
||||
2026-10-28T03:42:16.8540303Z f=documentation/security-watch/state.json
|
||||
2026-10-28T03:42:16.8540529Z if [ ! -f "$f" ]; then
|
||||
2026-10-28T03:42:16.8540732Z echo "no memory file was written - nothing to commit"; exit 0
|
||||
2026-10-28T03:42:16.8541128Z fi
|
||||
2026-10-28T03:42:16.8541460Z if git ls-files --error-unmatch "$f" >/dev/null 2>&1 && git diff --quiet -- "$f"; then
|
||||
2026-10-28T03:42:16.8541717Z echo "memory unchanged - nothing to commit"; exit 0
|
||||
2026-10-28T03:42:16.8541934Z fi
|
||||
2026-10-28T03:42:16.8542185Z cp "$f" /tmp/state.json
|
||||
2026-10-28T03:42:16.8542385Z auth=$(python3 -c 'import base64,os;print(base64.b64encode(("x:"+os.environ["PUSH_TOKEN"]).encode()).decode())')
|
||||
2026-10-28T03:42:16.8542639Z for attempt in 1 2 3; do
|
||||
2026-10-28T03:42:16.8543110Z git fetch -q --depth 1 origin main && git checkout -q -B main FETCH_HEAD
|
||||
2026-10-28T03:42:16.8543362Z mkdir -p "$(dirname "$f")" && cp /tmp/state.json "$f"
|
||||
2026-10-28T03:42:16.8543581Z git add "$f"
|
||||
2026-10-28T03:42:16.8543778Z git -c user.name="felhom security watch" -c user.email=monitoring@felhom.eu \
|
||||
2026-10-28T03:42:16.8544074Z commit -q -m "security-watch: memory of $(date -u +%F) (R-1303). Docs only." || { echo "nothing to commit"; exit 0; }
|
||||
2026-10-28T03:42:16.8544358Z if git -c http.extraHeader="Authorization: Basic $auth" push -q origin HEAD:main; then
|
||||
2026-10-28T03:42:16.8544587Z echo "memory pushed: $(git rev-parse --short=12 HEAD)"; exit 0
|
||||
2026-10-28T03:42:16.8544860Z fi
|
||||
2026-10-28T03:42:16.8545057Z echo "push refused (attempt $attempt) - re-fetching main"
|
||||
2026-10-28T03:42:16.8545451Z sleep 5
|
||||
2026-10-28T03:42:16.8545659Z done
|
||||
2026-10-28T03:42:16.8545898Z echo "MEMORY NOT SAVED after 3 attempts"; exit 1
|
||||
2026-10-28T03:42:16.8546111Z shell: bash --noprofile --norc -e -o pipefail {0}
|
||||
2026-10-28T03:42:16.8546355Z env:
|
||||
2026-10-28T03:42:16.8546835Z PUSH_TOKEN: ***
|
||||
2026-10-28T03:42:16.8547181Z ::endgroup::
|
||||
2026-10-28T03:42:18.2521180Z remote: . Processing 1 references
|
||||
2026-10-28T03:42:18.2522785Z remote: Processed 1 references in total
|
||||
2026-10-28T03:42:18.2588253Z memory pushed: 9b4b5fe5e7f7
|
||||
2026-10-28T03:42:18.2608654Z Cleaning up container for job watch
|
||||
2026-10-28T03:42:18.8472537Z 🏁 Job succeeded
|
||||
@@ -7,6 +7,10 @@
|
||||
wheel cache (`--tag-cache=` overrides). The log gains `TAGS fetched=… from-cache=… retried-429=…`.
|
||||
- Measured before: night job 2446, 211 Docker Hub requests in ~2 min, 15 refused; dry job 2450, 224 in ~3.5 min, 0 refused.
|
||||
- Tests: W14 (7 checks; the 429 retry seen failing on the old code — the first 429 ended the image) — 71 checks.
|
||||
- Measured after: dry runs 2458 and 2459 (`fe677bae`): 0 Docker Hub 429, 0 retries; 210 requests over ~7 min. The two runs
|
||||
ran on the two different CI runners, so the second found no tag cache (each runner keeps its own).
|
||||
- **`image_runtime.py`:** `_get` waits out a 429 (`Retry-After`, else 10/30 s) and tries again, `RETRY_TRIES` = 3 — run 2459
|
||||
had two ghcr.io blob reads refused. `test_image_runtime.py` retry checks (red on the old `_get`: one call, no wait) — 21 checks.
|
||||
|
||||
## 2026-10-28 — the watch remembers a notice per GROUP: a catalog pin and a DooPlex pin of one image are two entries
|
||||
|
||||
|
||||
@@ -176,15 +176,25 @@ def split_ref(ref):
|
||||
return reg, path, tag
|
||||
|
||||
|
||||
RETRY_TRIES = 3 # a registry 429 is waited out (its Retry-After, capped, else 10/30 s) and tried again; only the
|
||||
RETRY_BACKOFF_S = (10, 30) # last try's 429 is an answer (ghcr.io refused blob reads in back-to-back dry runs, 2026-10-28)
|
||||
|
||||
|
||||
def _get(url, headers=None, stream=False):
|
||||
req = urllib.request.Request(url, headers=dict({"User-Agent": UA}, **(headers or {})))
|
||||
try:
|
||||
r = urllib.request.urlopen(req, timeout=60)
|
||||
except urllib.error.HTTPError as e:
|
||||
return e.code, e.headers, b""
|
||||
if stream:
|
||||
return r.status, r.headers, r
|
||||
return r.status, r.headers, r.read()
|
||||
import time
|
||||
for i in range(RETRY_TRIES):
|
||||
req = urllib.request.Request(url, headers=dict({"User-Agent": UA}, **(headers or {})))
|
||||
try:
|
||||
r = urllib.request.urlopen(req, timeout=60)
|
||||
except urllib.error.HTTPError as e:
|
||||
if e.code == 429 and i < RETRY_TRIES - 1:
|
||||
ra = str((e.headers or {}).get("Retry-After", ""))
|
||||
time.sleep(min(int(ra), 120) if ra.isdigit() else RETRY_BACKOFF_S[min(i, len(RETRY_BACKOFF_S) - 1)])
|
||||
continue
|
||||
return e.code, e.headers, b""
|
||||
if stream:
|
||||
return r.status, r.headers, r
|
||||
return r.status, r.headers, r.read()
|
||||
|
||||
|
||||
class Registry:
|
||||
|
||||
@@ -134,6 +134,40 @@ def wheel_checks():
|
||||
sys.modules.pop("zstandard", None)
|
||||
|
||||
|
||||
def retry_checks():
|
||||
"""A registry 429 (ghcr.io refused blob reads in two back-to-back CI dry runs, 2026-10-28) is waited out and tried
|
||||
again; the answer is a refusal only after the last try."""
|
||||
import io, time, urllib.error, urllib.request
|
||||
calls, slept = [], []
|
||||
real_open, real_sleep = urllib.request.urlopen, time.sleep
|
||||
|
||||
class Resp(io.BytesIO):
|
||||
status = 200
|
||||
headers = {}
|
||||
|
||||
def fake(answers):
|
||||
def op(req, timeout=60):
|
||||
calls.append(req.full_url)
|
||||
a = answers.pop(0) if len(answers) > 1 else answers[0]
|
||||
if a == 429:
|
||||
raise urllib.error.HTTPError(req.full_url, 429, "Too Many Requests", {"Retry-After": "3"}, io.BytesIO(b""))
|
||||
return Resp(b"ok")
|
||||
return op
|
||||
try:
|
||||
time.sleep = lambda s: slept.append(s)
|
||||
urllib.request.urlopen = fake([429, 200])
|
||||
st, _h, body = ir._get("https://ghcr.io/v2/x/blobs/sha256:a")
|
||||
check("retry: a 429 then 200 -> the 200, after waiting its Retry-After", st == 200 and body == b"ok" and
|
||||
len(calls) == 2 and 3 in slept, (st, calls, slept))
|
||||
calls.clear()
|
||||
urllib.request.urlopen = fake([429])
|
||||
st, _h, body = ir._get("https://ghcr.io/v2/x/blobs/sha256:a")
|
||||
check("retry: a 429 on every try -> 429 after %d tries, never a pass" % ir.RETRY_TRIES, st == 429 and
|
||||
len(calls) == ir.RETRY_TRIES, (st, len(calls)))
|
||||
finally:
|
||||
urllib.request.urlopen, time.sleep = real_open, real_sleep
|
||||
|
||||
|
||||
def main():
|
||||
apk = ir.parse_apk("P:musl\nV:1.2.5-r10\n\nP:nodejs\nV:24.18.1-r0\n\nP:brotli-libs\nV:1.2.0-r1\n")
|
||||
check("apk database -> nodejs and brotli-libs", apk.get("nodejs") == "24.18.1-r0" and apk.get("brotli-libs") == "1.2.0-r1", apk)
|
||||
@@ -163,6 +197,7 @@ def main():
|
||||
"size": 10}], budget=0)
|
||||
check("a layer over the byte budget is a NOTE, never a silent pass", notes and ("budget" in notes[0] or "zstd" in notes[0]), notes)
|
||||
zstd_checks()
|
||||
retry_checks()
|
||||
wheel_checks()
|
||||
d = tempfile.mkdtemp()
|
||||
open(os.path.join(d, "a.yaml"), "w").write("spec:\n containers:\n - image: rommapp/romm:5.4.0\n name: x\n"
|
||||
|
||||
Reference in new issue
Block a user