312 lines
37 KiB
Plaintext
312 lines
37 KiB
Plaintext
2026-10-29T03:40:11.7202953Z felhom-gates-runner-2(version:v0.6.1) received task 2507 of job watch, be triggered by event: schedule
|
|
2026-10-29T03:40:11.7224939Z workflow prepared
|
|
2026-10-29T03:40:11.7226542Z evaluating expression 'always()'
|
|
2026-10-29T03:40:11.7228169Z expression 'always()' evaluated to 'true'
|
|
2026-10-29T03:40:11.7236004Z evaluating expression ''
|
|
2026-10-29T03:40:11.7236483Z expression '' evaluated to 'true'
|
|
2026-10-29T03:40:11.7236764Z ⭐ Run Main Fetch main (latest, for the memory) and the two sibling repos
|
|
2026-10-29T03:40:11.7241613Z Wrote command \n\necho "WATCH_STARTED_AT=$(date +%s)" >> "$GITHUB_ENV"\nbase=http://gitea.gitea-system.svc.cluster.local:3000/admin\ngit init -q . && git remote add origin $base/felhom.eu.git\ngit fetch -q --depth 1 origin main && git checkout -q -B main FETCH_HEAD\necho "felhom.eu main at $(git rev-parse --short=12 HEAD)"\nfor r in felhom-controller app-catalog-felhom.eu; do\n git init -q ../$r && git -C ../$r remote add origin $base/$r.git\n git -C ../$r fetch -q --depth 1 origin main && git -C ../$r checkout -q FETCH_HEAD\n echo "$r at $(git -C ../$r rev-parse --short=12 HEAD)"\ndone\n\n\n to 'workflow/0.sh'
|
|
2026-10-29T03:40:11.7243226Z ::group::Run echo "WATCH_STARTED_AT=$(date +%s)" >> "$GITHUB_ENV"
|
|
2026-10-29T03:40:11.7243585Z echo "WATCH_STARTED_AT=$(date +%s)" >> "$GITHUB_ENV"
|
|
2026-10-29T03:40:11.7243872Z base=http://gitea.gitea-system.svc.cluster.local:3000/admin
|
|
2026-10-29T03:40:11.7244002Z git init -q . && git remote add origin $base/felhom.eu.git
|
|
2026-10-29T03:40:11.7244140Z git fetch -q --depth 1 origin main && git checkout -q -B main FETCH_HEAD
|
|
2026-10-29T03:40:11.7244266Z echo "felhom.eu main at $(git rev-parse --short=12 HEAD)"
|
|
2026-10-29T03:40:11.7244393Z for r in felhom-controller app-catalog-felhom.eu; do
|
|
2026-10-29T03:40:11.7244682Z git init -q ../$r && git -C ../$r remote add origin $base/$r.git
|
|
2026-10-29T03:40:11.7244812Z git -C ../$r fetch -q --depth 1 origin main && git -C ../$r checkout -q FETCH_HEAD
|
|
2026-10-29T03:40:11.7244944Z echo "$r at $(git -C ../$r rev-parse --short=12 HEAD)"
|
|
2026-10-29T03:40:11.7245095Z done
|
|
2026-10-29T03:40:11.7245210Z shell: bash --noprofile --norc -e -o pipefail {0}
|
|
2026-10-29T03:40:11.7245351Z ::endgroup::
|
|
2026-10-29T03:40:21.1361453Z felhom.eu main at 6a6dd94daca4
|
|
2026-10-29T03:40:23.1908764Z felhom-controller at 20c5877056e2
|
|
2026-10-29T03:40:23.5344863Z app-catalog-felhom.eu at 0baf8f948575
|
|
2026-10-29T03:40:23.5371727Z ::group::Run set -u
|
|
2026-10-29T03:40:23.5371953Z set -u
|
|
2026-10-29T03:40:23.5372078Z mkdir -p documentation/security-watch
|
|
2026-10-29T03:40:23.5372188Z mode="${MODE:-run}"
|
|
2026-10-29T03:40:23.5372319Z [ "${GITHUB_EVENT_NAME:-}" = "schedule" ] && mode=run
|
|
2026-10-29T03:40:23.5372422Z echo "mode: $mode"
|
|
2026-10-29T03:40:23.5372543Z case "$mode" in
|
|
2026-10-29T03:40:23.5372785Z test-mail) python3 scripts/security_watch.py --test-mail; exit $? ;;
|
|
2026-10-29T03:40:23.5372991Z dry) extra="--no-mail" ; state=/tmp/state-dry.json
|
|
2026-10-29T03:40:23.5373172Z cp documentation/security-watch/state.json "$state" 2>/dev/null || true ;;
|
|
2026-10-29T03:40:23.5373366Z seed) extra="--seed" ; state=documentation/security-watch/state.json ;;
|
|
2026-10-29T03:40:23.5373597Z run) extra="" ; state=documentation/security-watch/state.json ;;
|
|
2026-10-29T03:40:23.5373839Z *) echo "unknown mode $mode"; exit 2 ;;
|
|
2026-10-29T03:40:23.5373988Z esac
|
|
2026-10-29T03:40:23.5374364Z python3 scripts/security_watch.py --state="$state" --catalog=../app-catalog-felhom.eu \
|
|
2026-10-29T03:40:23.5374561Z --controller=../felhom-controller --json=/tmp/watch-results.json $extra
|
|
2026-10-29T03:40:23.5374875Z shell: bash --noprofile --norc -e -o pipefail {0}
|
|
2026-10-29T03:40:23.5375145Z env:
|
|
2026-10-29T03:40:23.5376183Z RESEND_API_KEY: ***
|
|
2026-10-29T03:40:23.5376579Z GH_ADVISORY_TOKEN: ***
|
|
2026-10-29T03:40:23.5376762Z MODE:
|
|
2026-10-29T03:40:23.5376997Z FELHOM_WHEEL_FETCH: 1
|
|
2026-10-29T03:40:23.5377245Z ::endgroup::
|
|
2026-10-29T03:40:23.5439598Z mode: run
|
|
2026-10-29T03:40:23.7857825Z /root/.cache/act/2a6440825f6876fa/hostexecutor/scripts/security_watch.py:905: DeprecationWarning: datetime.datetime.utcnow() is deprecated and scheduled for removal in a future version. Use timezone-aware objects to represent datetimes in UTC: datetime.datetime.now(datetime.UTC).
|
|
2026-10-29T03:40:23.7858899Z today = datetime.date.fromisoformat(opts["today"]) if "today" in opts else datetime.datetime.utcnow().date()
|
|
2026-10-29T03:40:23.8364115Z security watch 2026-10-29: 197 pins (11 box/build, 97 app, 89 DooPlex); GitHub key PRESENT — every repo's advisories tonight
|
|
2026-10-29T03:40:48.7656275Z RUNTIME-READ golang:1.27.3-trixie 17 s ok
|
|
2026-10-29T03:40:52.6564202Z RUNTIME-READ debian:13.7-slim 3 s ok
|
|
2026-10-29T03:41:24.9631738Z RUNTIME-READ lscr.io/linuxserver/bookstack:26.09.2 26 s ok
|
|
2026-10-29T03:41:28.4809264Z RUNTIME-READ gitea/gitea:28.2.0 23 s ok
|
|
2026-10-29T03:41:59.4507381Z RUNTIME-READ ghcr.io/gethomepage/homepage:v2.7.0 48 s ok
|
|
2026-10-29T03:42:27.1340174Z RUNTIME-READ ghost:6.73.0-alpine 84 s ok
|
|
2026-10-29T03:42:53.3960683Z RUNTIME-READ ghcr.io/immich-app/immich-machine-learning:v3.3.5 84 s ok
|
|
2026-10-29T03:43:13.5548282Z RUNTIME-READ freikin/dawarich:1.19.0 133 s ok
|
|
2026-10-29T03:43:19.3003941Z RUNTIME-READ ghcr.io/home-assistant/home-assistant:2026.10.4 129 s ok
|
|
2026-10-29T03:43:22.2903090Z RUNTIME-READ ghcr.io/alexta69/metube:2026.10.27 42 s ok
|
|
2026-10-29T03:43:24.5321881Z RUNTIME-READ ghcr.io/immich-app/immich-server:v3.3.5 117 s ok
|
|
2026-10-29T03:43:42.3091577Z RUNTIME-READ ghcr.io/karakeep-app/karakeep:0.34.1 99 s ok
|
|
2026-10-29T03:43:53.5315995Z RUNTIME-READ flomp/wanderer-db:v0.21.2 11 s ok
|
|
2026-10-29T03:44:06.9760762Z RUNTIME-READ ghcr.io/papra-hq/papra:26.7.1-rootless 50 s ok
|
|
2026-10-29T03:44:09.1286025Z RUNTIME-READ rommapp/romm:5.4.1 42 s ok
|
|
2026-10-29T03:44:11.4679858Z RUNTIME-READ flomp/wanderer-web:v0.21.2 33 s ok
|
|
2026-10-29T03:44:15.0633614Z RUNTIME-READ busybox:1.38 2 s ok
|
|
2026-10-29T03:44:18.1985022Z RUNTIME-READ ghcr.io/lukegus/termix:26.10.5 49 s ok
|
|
2026-10-29T03:44:24.7879830Z RUNTIME-READ ghcr.io/tandoorrecipes/recipes:2.7.2 56 s ok
|
|
2026-10-29T03:44:40.5312194Z RUNTIME-READ nginx:1.31-alpine 11 s ok
|
|
2026-10-29T03:44:43.5665910Z RUNTIME-READ redis:8.10-alpine 9 s ok
|
|
2026-10-29T03:44:44.3224490Z RUNTIME-READ redis:8-alpine 10 s ok
|
|
2026-10-29T03:44:56.9107213Z RUNTIME-READ ghcr.io/diced/zipline:4.8.2 46 s ok
|
|
2026-10-29T03:45:05.1986991Z RUNTIME-READ python:3.15-bookworm 32 s ok
|
|
2026-10-29T03:45:10.1228890Z RUNTIME-READ docker.io/library/nextcloud:34.0.5-apache 54 s ok
|
|
2026-10-29T03:45:10.2702229Z ADVISORY doop actualbudget/actual-server 26.10.0 CVE-2026-111497 (fixed 24.22.1)
|
|
2026-10-29T03:45:10.2702993Z ADVISORY doop advplyr/audiobookshelf 2.37.1 CVE-2026-111497 (fixed 24.22.1)
|
|
2026-10-29T03:45:10.2703319Z ADVISORY box cloudflare/cloudflared 2026.10.4 feed:cloudflare-blog:01M5DK5J81T0VC8YTBR2FKD8A3 (fixed read the notice); vulnnotes:cloudflared@2026.10.5:VULN-183456 (fixed 2026.10.5)
|
|
2026-10-29T03:45:10.2703777Z ADVISORY doop codewithcj/sparkyfitness v1.9.0 release:CodeWithCJ/SparkyFitness@v1.10.0 (fixed v1.10.0)
|
|
2026-10-29T03:45:10.2704098Z ADVISORY doop codewithcj/sparkyfitness_server v1.9.0 release:CodeWithCJ/SparkyFitness@v1.10.0 (fixed v1.10.0); CVE-2026-111497 (fixed 24.22.1)
|
|
2026-10-29T03:45:10.2704413Z ADVISORY doop crocodilestick/calibre-web-automated dev CVE-2026-111497 (fixed 1.2.1)
|
|
2026-10-29T03:45:10.2704686Z ADVISORY doop docker.io/calcom/cal.com v6.2.0 CVE-2026-111497 (fixed 22.23.4, 24.22.1, 26.12.1)
|
|
2026-10-29T03:45:10.2704951Z ADVISORY doop flomp/wanderer-db v0.21.0 GHSA-vprp-gr6m-j375 (fixed v0.21.2); GHSA-3xp7-7492-j2q6 (fixed v0.21.2); GHSA-j9m4-8qwf-jvx6 (fixed v0.21.2); GHSA-fprh-3pp9-68m9 (fixed v0.21.2); … 1 more
|
|
2026-10-29T03:45:10.2705278Z ADVISORY doop flomp/wanderer-web v0.21.0 GHSA-vprp-gr6m-j375 (fixed v0.21.2); GHSA-3xp7-7492-j2q6 (fixed v0.21.2); GHSA-j9m4-8qwf-jvx6 (fixed v0.21.2); GHSA-fprh-3pp9-68m9 (fixed v0.21.2); … 2 more
|
|
2026-10-29T03:45:10.2705583Z ADVISORY doop ghcr.io/gethomepage/homepage v1.13.2 GHSA-669x-4pg4-w24r (fixed 2.2.0); CVE-2026-111497 (fixed 22.23.4)
|
|
2026-10-29T03:45:10.2705874Z ADVISORY doop ghcr.io/immich-app/immich-machine-learning v2.7.5 GHSA-q89f-h332-8q2h (fixed v3.2.4); GHSA-h5w4-vjv4-9r5q (fixed a version after 3.1.0 (the notice names none)); GHSA-g4w3-c888-cr93 (fixed v3.2.0); GHSA-72rm-x7xr-v679 (fixed v3.3.0); … 7 more
|
|
2026-10-29T03:45:10.2706238Z ADVISORY doop ghcr.io/immich-app/immich-server v2.7.5 GHSA-q89f-h332-8q2h (fixed v3.2.4); GHSA-h5w4-vjv4-9r5q (fixed a version after 3.1.0 (the notice names none)); GHSA-g4w3-c888-cr93 (fixed v3.2.0); GHSA-72rm-x7xr-v679 (fixed v3.3.0); … 8 more
|
|
2026-10-29T03:45:10.2706551Z ADVISORY doop ghcr.io/lukegus/termix release-2.9.2 CVE-2026-111497 (fixed 26.12.1)
|
|
2026-10-29T03:45:10.2706808Z ADVISORY doop ghcr.io/paperless-ngx/paperless-ngx 3.3.4 CVE-2026-111497 (fixed 1.2.1)
|
|
2026-10-29T03:45:10.2708268Z ADVISORY doop gitea/gitea 1.26.2 GHSA-wx44-9m3m-rjqx (fixed 28.2.0); GHSA-4jmf-h2cm-hg7w (fixed 28.2.0); GHSA-8j56-f865-gqq2 (fixed 28.2.0); GHSA-fxq4-gr55-7x5g (fixed 28.2.0); … 127 more
|
|
2026-10-29T03:45:10.2708623Z ADVISORY doop grafana/grafana 13.2.4 GHSA-8xmm-x63g-f6xv (fixed no fixed version named yet); GHSA-4724-7jwc-3fpw (fixed the range is unreadable — check by hand); GHSA-2x6g-h2hg-rq84 (fixed the range is unreadable — check by hand); GHSA-8wjh-59cw-9xh4 (fixed no fixed version named yet); … 2 more
|
|
2026-10-29T03:45:10.2709027Z ADVISORY box gtstef/filebrowser 1.5.8-stable GHSA-gfgm-886h-6r47 (fixed 2.0.2-stable, 2.1.4-beta); GHSA-wxj5-g3qp-g732 (fixed 2.0.2-stable, 2.1.3-beta); GHSA-3j46-5w28-f8p2 (fixed 2.1.0-stable, 2.1.3-beta); GHSA-4vrc-935w-xxq2 (fixed 2.1.0-stable, 2.1.3-beta); … 31 more
|
|
2026-10-29T03:45:10.2709400Z ADVISORY doop louislam/uptime-kuma 2.5.6 GHSA-qjxc-h5jf-c7rj (fixed the range is unreadable — check by hand); release:louislam/uptime-kuma@2.5.8 (fixed 2.5.8); release:louislam/uptime-kuma@2.5.7 (fixed 2.5.7); CVE-2026-111497 (fixed 22.23.4)
|
|
2026-10-29T03:45:10.2709760Z ADVISORY doop outlinewiki/outline 1.11.0 GHSA-x4w3-9p9j-cprh (fixed 1.12.0); GHSA-rq53-m97j-f2pg (fixed 1.12.0); GHSA-h6ff-rw9x-5mq2 (fixed 1.12.0); GHSA-rvj7-2gww-6xfq (fixed 1.12.0); … 3 more
|
|
2026-10-29T03:45:10.2710060Z ADVISORY doop redis 8.10.2 GHSA-c8h9-259x-jff4 (fixed the range is unreadable — check by hand); GHSA-8ghh-qpmp-7826 (fixed no fixed version named yet); GHSA-93m2-935m-8rj3 (fixed no fixed version named yet); GHSA-m8fj-85cg-7vhp (fixed the range is unreadable — check by hand); … 8 more
|
|
2026-10-29T03:45:10.2710423Z ADVISORY doop rommapp/romm 5.4.0 release:rommapp/romm@5.4.1 (fixed 5.4.1); CVE-2026-111497 (fixed 24.22.1)
|
|
2026-10-29T03:45:10.2710679Z ADVISORY doop vabene1111/recipes 2.6.15 CVE-2026-111497 (fixed 24.22.1)
|
|
2026-10-29T03:45:10.2710914Z ADVISORY app actualbudget/actual-server 26.9.0 CVE-2026-111497 (fixed 24.22.1)
|
|
2026-10-29T03:45:10.2711234Z ADVISORY app calcom/cal.com v6.2.0 GHSA-p3f6-52gv-cj7m (fixed the range is unreadable — check by hand); GHSA-cpf2-q635-xrwx (fixed the range is unreadable — check by hand); CVE-2026-111497 (fixed 22.23.4, 24.22.1, 26.12.1)
|
|
2026-10-29T03:45:10.2711707Z ADVISORY app codewithcj/sparkyfitness v0.17.3 GHSA-v883-jx9h-qf29 (fixed a version after 1.7.2 (the notice names none)); GHSA-cmmf-53wf-r5gv (fixed a version after 1.6.5 (the notice names none)); GHSA-p8cf-g8rv-gvrq (fixed a version after 1.6.5 (the notice names none))
|
|
2026-10-29T03:45:10.2712054Z ADVISORY app codewithcj/sparkyfitness_server v0.17.3 GHSA-v883-jx9h-qf29 (fixed a version after 1.7.2 (the notice names none)); GHSA-cmmf-53wf-r5gv (fixed a version after 1.6.5 (the notice names none)); GHSA-p8cf-g8rv-gvrq (fixed a version after 1.6.5 (the notice names none)); CVE-2026-111497 (fixed 24.22.1)
|
|
2026-10-29T03:45:10.2712500Z ADVISORY app crocodilestick/calibre-web-automated v4.0.8 CVE-2026-111497 (fixed 1.2.1)
|
|
2026-10-29T03:45:10.2712858Z ADVISORY app f0rc3/gokapi v1.9.6 GHSA-45vh-rpc8-hxpp (fixed 2.2.4); GHSA-qwc6-vc2v-2ggj (fixed 2.2.4); GHSA-j6jp-78w8-34x6 (fixed 2.2.4); GHSA-m2hx-wjxc-9fp4 (fixed 2.2.3); … 6 more
|
|
2026-10-29T03:45:10.2713243Z ADVISORY app ghcr.io/immich-app/immich-machine-learning v3.3.5 GHSA-8244-8vpr-vp9c (fixed the range is unreadable — check by hand)
|
|
2026-10-29T03:45:10.2713887Z ADVISORY app ghcr.io/immich-app/immich-server v3.3.5 GHSA-8244-8vpr-vp9c (fixed the range is unreadable — check by hand)
|
|
2026-10-29T03:45:10.2714233Z ADVISORY app ghcr.io/karakeep-app/karakeep 0.34.1 GHSA-pp34-2c9r-mchw (fixed no fixed version named yet)
|
|
2026-10-29T03:45:10.2714676Z ADVISORY app ghcr.io/lukegus/termix 26.10.5 GHSA-r9gw-3w87-mhh7 (fixed no fixed version named yet)
|
|
2026-10-29T03:45:10.2715108Z ADVISORY app ghcr.io/paperless-ngx/paperless-ngx 2.20.15 GHSA-c8f3-pqr2-rr24 (fixed 3.3.2); GHSA-2jhj-xqrq-rmrq (fixed 3.1.2); CVE-2026-111497 (fixed 1.1.1)
|
|
2026-10-29T03:45:10.2715469Z ADVISORY app ghcr.io/tandoorrecipes/recipes 2.7.2 GHSA-c7mc-c9jr-38hf (fixed the range is unreadable — check by hand); GHSA-cqj3-64qw-4w52 (fixed the range is unreadable — check by hand)
|
|
2026-10-29T03:45:10.2715891Z ADVISORY app gitea/gitea 28.2.0 GHSA-rqhx-647v-wx32 (fixed no fixed version named yet)
|
|
2026-10-29T03:45:10.2716198Z ADVISORY app glanceapp/glance v0.8.5 GHSA-r225-jhr6-68cc (fixed >= 0.8.7)
|
|
2026-10-29T03:45:10.2716634Z ADVISORY app grafana/grafana 13.2.4 GHSA-8xmm-x63g-f6xv (fixed no fixed version named yet); GHSA-4724-7jwc-3fpw (fixed the range is unreadable — check by hand); GHSA-2x6g-h2hg-rq84 (fixed the range is unreadable — check by hand); GHSA-8wjh-59cw-9xh4 (fixed no fixed version named yet); … 2 more
|
|
2026-10-29T03:45:10.2717021Z ADVISORY app louislam/uptime-kuma 2.5.7 GHSA-qjxc-h5jf-c7rj (fixed the range is unreadable — check by hand); release:louislam/uptime-kuma@2.5.8 (fixed 2.5.8)
|
|
2026-10-29T03:45:10.2717489Z ADVISORY app n8nio/n8n 2.44.7 GHSA-2x68-96jw-5r6c (fixed >= 3.0.1); GHSA-9p7v-45m2-wxgj (fixed >= 3.0.1); GHSA-mx4r-96jx-v278 (fixed >= 3.0.1); GHSA-4v22-g448-h4rg (fixed >= 2.45.5, >= 2.46.1, >= 3.0.1); … 9 more
|
|
2026-10-29T03:45:10.2717844Z ADVISORY app rommapp/romm 5.4.1 CVE-2026-111497 (fixed 24.22.1)
|
|
2026-10-29T03:45:10.2719539Z NOT CHECKED doop gitea.dooplex.hu/admin/felhom-act-runner 0.1.0 registry gitea.dooplex.hu: no anonymous token route
|
|
2026-10-29T03:45:10.2720137Z NOT CHECKED doop gitea.dooplex.hu/admin/jarr latest registry gitea.dooplex.hu: no anonymous token route
|
|
2026-10-29T03:45:10.2720466Z NOT CHECKED doop gitea.dooplex.hu/admin/recipe-importer latest registry gitea.dooplex.hu: no anonymous token route
|
|
2026-10-29T03:45:10.2721092Z NOT CHECKED doop gitea.dooplex.hu/admin/revfulop-calendar 1.6.2 registry gitea.dooplex.hu: no anonymous token route
|
|
2026-10-29T03:45:10.2721581Z NOT CHECKED doop gitea.dooplex.hu/admin/sparkyfitness-export 0.3.0 registry gitea.dooplex.hu: no anonymous token route
|
|
2026-10-29T03:45:10.2721975Z NOT CHECKED doop gitea.dooplex.hu/admin/wan-probe 0.1.0 registry gitea.dooplex.hu: no anonymous token route
|
|
2026-10-29T03:45:10.2722286Z NOT CHECKED doop minio/minio latest Docker registry tags of minio/minio: HTTP 401; manifest minio/minio:latest: HTTP 401
|
|
2026-10-29T03:45:10.2722903Z NOT CHECKED app nginx 1.30.5-alpine https://github.com/nginx/nginx/releases.atom: The read operation timed out
|
|
2026-10-29T03:45:10.2723332Z BEHIND doop getmeili/meilisearch v1.11.3 newest v1.56.0
|
|
2026-10-29T03:45:10.2723627Z BEHIND doop ghcr.io/diced/zipline 4.8.1 newest 4.8.2
|
|
2026-10-29T03:45:10.2724078Z BEHIND app getmeili/meilisearch v1.41.0 newest v1.56.0
|
|
2026-10-29T03:45:10.2724557Z BEHIND app getmeili/meilisearch v1.36.0 newest v1.56.0
|
|
2026-10-29T03:45:10.2724916Z BEHIND app ghcr.io/hargata/lubelogger v1.7.3 newest v1.7.4
|
|
2026-10-29T03:45:10.2725457Z BEHIND app ghcr.io/kozea/radicale 3.8.1 newest 3.9.0
|
|
2026-10-29T03:45:10.2725874Z BEHIND app gotson/komga 1.28.0 newest 1.29.2
|
|
2026-10-29T03:45:10.2726286Z BEHIND app kimai/kimai2 2.67.0 newest 2.71.0
|
|
2026-10-29T03:45:10.2726511Z BEHIND app lscr.io/linuxserver/bookstack 26.09.2 newest 26.09.20260929
|
|
2026-10-29T03:45:10.2726951Z BEHIND app nextcloud 34.0.4-apache newest 34.0.5-apache
|
|
2026-10-29T03:45:10.2727330Z BEHIND app qbittorrentofficial/qbittorrent-nox 5.2.4-1 newest 5.3.0-2
|
|
2026-10-29T03:45:10.2727572Z GAP buil alpine 3.24.2 newest 3.24.3
|
|
2026-10-29T03:45:10.2727788Z GAP buil alpine 3.24.2 newest 3.24.3
|
|
2026-10-29T03:45:10.2728280Z GAP doop alpine/k8s 1.37.1
|
|
2026-10-29T03:45:10.2728725Z GAP doop arcadiatechnology/crafty-4 4.11.0
|
|
2026-10-29T03:45:10.2729015Z GAP doop bhgedigital/envsubst latest
|
|
2026-10-29T03:45:10.2729311Z GAP doop busybox 1.38
|
|
2026-10-29T03:45:10.2729584Z GAP doop codercom/code-server 4.143.1
|
|
2026-10-29T03:45:10.2729826Z GAP buil debian 13.7-slim
|
|
2026-10-29T03:45:10.2730036Z GAP buil debian 13.7-slim
|
|
2026-10-29T03:45:10.2730253Z GAP doop docker.io/bitnamilegacy/postgresql 17.6.0-debian-12-r3
|
|
2026-10-29T03:45:10.2730550Z GAP doop docker.io/library/nextcloud 34.0.5-apache
|
|
2026-10-29T03:45:10.2731354Z GAP doop docker.io/valkey/valkey 9.2-alpine
|
|
2026-10-29T03:45:10.2731711Z GAP doop filebrowser/filebrowser v2.63.23
|
|
2026-10-29T03:45:10.2731938Z GAP doop ghcr.io/cloudnative-pg/postgresql 17.2 newest 17.11
|
|
2026-10-29T03:45:10.2732170Z GAP doop ghcr.io/headlamp-k8s/headlamp v0.46.0
|
|
2026-10-29T03:45:10.2732386Z GAP doop ghcr.io/immich-app/postgres 16-vectorchord0.3.0
|
|
2026-10-29T03:45:10.2732679Z GAP doop ghcr.io/jimmidyson/configmap-reload v0.15.0
|
|
2026-10-29T03:45:10.2732914Z GAP doop ghcr.io/onedr0p/exportarr v2.3.0
|
|
2026-10-29T03:45:10.2733158Z GAP doop ghcr.io/seriousm4x/upsnap 5
|
|
2026-10-29T03:45:10.2733409Z GAP doop ghcr.io/stakater/reloader v1.4.22 newest v1.4.23
|
|
2026-10-29T03:45:10.2733695Z GAP doop ghcr.io/tautulli/tautulli v2.18.2
|
|
2026-10-29T03:45:10.2733913Z GAP doop griefed/serverpackcreator 8.1.2
|
|
2026-10-29T03:45:10.2734208Z GAP doop gtstef/filebrowser 1.5.8-stable
|
|
2026-10-29T03:45:10.2734553Z GAP doop guacamole/guacamole 1.6.0
|
|
2026-10-29T03:45:10.2734769Z GAP doop guacamole/guacd 1.6.0
|
|
2026-10-29T03:45:10.2734974Z GAP doop index.docker.io/plexinc/pms-docker 1.43.5.11029-6bf8af3f0
|
|
2026-10-29T03:45:10.2735220Z GAP doop itzg/mc-backup 2026.10.1 newest 2026.10.2
|
|
2026-10-29T03:45:10.2735508Z GAP doop itzg/minecraft-server 2026.10.0-java21 newest 2026.10.1-java17
|
|
2026-10-29T03:45:10.2735780Z GAP doop linuxserver/bookstack 26.09.20260929
|
|
2026-10-29T03:45:10.2736002Z GAP doop linuxserver/prowlarr version-2.6.5.5623
|
|
2026-10-29T03:45:10.2736276Z GAP doop linuxserver/qbittorrent 5.3.0
|
|
2026-10-29T03:45:10.2736498Z GAP doop linuxserver/radarr version-6.4.4.10685
|
|
2026-10-29T03:45:10.2736718Z GAP doop linuxserver/sonarr version-4.0.20.3014
|
|
2026-10-29T03:45:10.2736962Z GAP doop mariadb 11
|
|
2026-10-29T03:45:10.2737234Z GAP doop mikefarah/yq 4.54.1
|
|
2026-10-29T03:45:10.2737453Z GAP doop mongodb/mongodb-community-server 8.0.5-ubuntu2204 newest 8.3.13-ubuntu2204
|
|
2026-10-29T03:45:10.2737689Z GAP doop msdeluise/plant-it-server 0.10.0
|
|
2026-10-29T03:45:10.2737908Z GAP doop mysql 8.4
|
|
2026-10-29T03:45:10.2738173Z GAP doop nicolaka/netshoot latest
|
|
2026-10-29T03:45:10.2738388Z GAP doop postgis/postgis 16-3.5
|
|
2026-10-29T03:45:10.2738622Z GAP doop postgres 15-alpine
|
|
2026-10-29T03:45:10.2738924Z GAP doop postgres 16-alpine
|
|
2026-10-29T03:45:10.2739152Z GAP doop privatebin/nginx-fpm-alpine 2.0.6 newest 2.1.0
|
|
2026-10-29T03:45:10.2739500Z GAP doop prom/alertmanager v0.34.1
|
|
2026-10-29T03:45:10.2739720Z GAP doop prom/node-exporter v1.12.1
|
|
2026-10-29T03:45:10.2739962Z GAP doop prom/prometheus v3.15.0 newest v3.15.1
|
|
2026-10-29T03:45:10.2740197Z GAP doop prometheuscommunity/smartctl-exporter v0.15.0
|
|
2026-10-29T03:45:10.2740485Z GAP doop python 3.15-bookworm
|
|
2026-10-29T03:45:10.2740710Z GAP doop quay.io/jetstack/version-checker v0.11.0
|
|
2026-10-29T03:45:10.2741020Z GAP doop quay.io/prometheus/blackbox-exporter v0.29.1
|
|
2026-10-29T03:45:10.2741246Z GAP doop renovate/renovate 44.181.1 newest 44.190.2
|
|
2026-10-29T03:45:10.2741522Z GAP doop tailscale/tailscale v1.104.2
|
|
2026-10-29T03:45:10.2741740Z GAP app emby/embyserver 4.11.0.4 newest 4.11.0.11
|
|
2026-10-29T03:45:10.2741960Z GAP app ghcr.io/immich-app/postgres 16-vectorchord0.4.3-pg
|
|
2026-10-29T03:45:10.2742311Z GAP app ghcr.io/karakeep-app/karakeep-chrome 151.0.7922.47-r1
|
|
2026-10-29T03:45:10.2742544Z GAP app mariadb 12.3
|
|
2026-10-29T03:45:10.2742757Z GAP app mariadb 11.4 newest 11.8
|
|
2026-10-29T03:45:10.2742977Z GAP app mariadb 11.8
|
|
2026-10-29T03:45:10.2743199Z GAP app mariadb 12.3
|
|
2026-10-29T03:45:10.2743422Z GAP app mariadb 11.8
|
|
2026-10-29T03:45:10.2743635Z GAP app msdeluise/plant-it 0.10.0
|
|
2026-10-29T03:45:10.2743857Z GAP app plexinc/pms-docker 1.43.5.11029-6bf8af3f0
|
|
2026-10-29T03:45:10.2744082Z GAP app postgis/postgis 16-3.5-alpine
|
|
2026-10-29T03:45:10.2744286Z GAP app postgis/postgis 17-3.5-alpine
|
|
2026-10-29T03:45:10.2744496Z GAP app postgres 18-alpine
|
|
2026-10-29T03:45:10.2744710Z GAP app postgres 17-alpine
|
|
2026-10-29T03:45:10.2744918Z GAP app postgres 18-alpine
|
|
2026-10-29T03:45:10.2745134Z GAP app postgres 18-alpine
|
|
2026-10-29T03:45:10.2745429Z GAP app postgres 18-alpine
|
|
2026-10-29T03:45:10.2745644Z GAP app postgres 18-alpine
|
|
2026-10-29T03:45:10.2745910Z GAP app postgres 18-alpine
|
|
2026-10-29T03:45:10.2746228Z GAP app postgres 17-alpine
|
|
2026-10-29T03:45:10.2746496Z GAP app postgres 16-alpine
|
|
2026-10-29T03:45:10.2747078Z GAP app registry.gitlab.com/crafty-controller/crafty-4 4.11.0
|
|
2026-10-29T03:45:10.2747317Z FLOATING doop ghcr.io/seanmorley15/adventurelog-backend latest
|
|
2026-10-29T03:45:10.2747607Z FLOATING doop ghcr.io/seanmorley15/adventurelog-frontend latest
|
|
2026-10-29T03:45:10.2747839Z FLOATING doop nginx 1.31-alpine
|
|
2026-10-29T03:45:10.2748058Z FLOATING doop redis 8-alpine
|
|
2026-10-29T03:45:10.2748265Z FLOATING doop redis 8.10-alpine
|
|
2026-10-29T03:45:10.2748532Z FLOATING app ghcr.io/claperco/claper 2.5
|
|
2026-10-29T03:45:10.2748796Z FLOATING app ghcr.io/thomiceli/opengist 1.15
|
|
2026-10-29T03:45:10.2749211Z FLOATING app jellyfin/jellyfin 12.4
|
|
2026-10-29T03:45:10.2749534Z FLOATING app lscr.io/linuxserver/prowlarr version-2.6.5.5623
|
|
2026-10-29T03:45:10.2749761Z FLOATING app lscr.io/linuxserver/sabnzbd version-5.1.3
|
|
2026-10-29T03:45:10.2750107Z FLOATING app lscr.io/linuxserver/transmission version-4.1.3-r0
|
|
2026-10-29T03:45:10.2750317Z FLOATING app nzbgetcom/nzbget v26.3
|
|
2026-10-29T03:45:10.2750537Z FLOATING app redis 7.4-alpine
|
|
2026-10-29T03:45:10.2750745Z FLOATING app redis 7-alpine
|
|
2026-10-29T03:45:10.2750961Z FLOATING app redis 7-alpine
|
|
2026-10-29T03:45:10.2751174Z FLOATING app redis 7-alpine
|
|
2026-10-29T03:45:10.2751381Z FLOATING app redis 7-alpine
|
|
2026-10-29T03:45:10.2751592Z FLOATING app redis 7-alpine
|
|
2026-10-29T03:45:10.2751792Z FLOATING app redis 7-alpine
|
|
2026-10-29T03:45:10.2752051Z FLOATING app wger/server 2.7
|
|
2026-10-29T03:45:10.2752334Z SELF box gitea.dooplex.hu/admin/felhom-samba 1.2.0
|
|
2026-10-29T03:45:10.2752551Z SELF app gitea.dooplex.hu/admin/recipe-importer v0.9.11
|
|
2026-10-29T03:45:10.2752795Z CURRENT doop f0rc3/gokapi v2.2.4
|
|
2026-10-29T03:45:10.2753026Z CURRENT doop ghcr.io/alam00000/bentopdf 2.8.10
|
|
2026-10-29T03:45:10.2753243Z CURRENT doop ghcr.io/seerr-team/seerr v3.5.1
|
|
2026-10-29T03:45:10.2753461Z CURRENT doop ghcr.io/thomiceli/opengist 1.15.3
|
|
2026-10-29T03:45:10.2753671Z CURRENT doop glanceapp/glance v0.8.7
|
|
2026-10-29T03:45:10.2753939Z CURRENT buil golang 1.27.3-trixie
|
|
2026-10-29T03:45:10.2754143Z CURRENT buil golang 1.27.3-alpine3.24
|
|
2026-10-29T03:45:10.2754374Z CURRENT doop onlyoffice/documentserver 9.4.0
|
|
2026-10-29T03:45:10.2754586Z CURRENT buil restic 0.19.1
|
|
2026-10-29T03:45:10.2754799Z CURRENT box traefik v3.7.16
|
|
2026-10-29T03:45:10.2755017Z CURRENT doop vaultwarden/server 1.37.4
|
|
2026-10-29T03:45:10.2755236Z CURRENT app deluan/navidrome 0.64.2
|
|
2026-10-29T03:45:10.2755449Z CURRENT app docmost/docmost 0.97.0
|
|
2026-10-29T03:45:10.2755665Z CURRENT app flomp/wanderer-db v0.21.2
|
|
2026-10-29T03:45:10.2755958Z CURRENT app flomp/wanderer-web v0.21.2
|
|
2026-10-29T03:45:10.2756178Z CURRENT app freikin/dawarich 1.19.0
|
|
2026-10-29T03:45:10.2756394Z CURRENT app ghcr.io/advplyr/audiobookshelf 2.37.2
|
|
2026-10-29T03:45:10.2756605Z CURRENT app ghcr.io/alam00000/bentopdf v2.8.10
|
|
2026-10-29T03:45:10.2756859Z CURRENT app ghcr.io/alexta69/metube 2026.10.27
|
|
2026-10-29T03:45:10.2757075Z CURRENT app ghcr.io/cmintey/wishlist v0.69.0
|
|
2026-10-29T03:45:10.2757281Z CURRENT app ghcr.io/diced/zipline 4.8.2
|
|
2026-10-29T03:45:10.2757551Z CURRENT app ghcr.io/gethomepage/homepage v2.7.0
|
|
2026-10-29T03:45:10.2757984Z CURRENT app ghcr.io/gramps-project/grampsweb v25.6.0
|
|
2026-10-29T03:45:10.2758496Z CURRENT app ghcr.io/grimmory-tools/grimmory v3.5.0
|
|
2026-10-29T03:45:10.2758740Z CURRENT app ghcr.io/home-assistant/home-assistant 2026.10.4
|
|
2026-10-29T03:45:10.2759004Z CURRENT app ghcr.io/mealie-recipes/mealie v3.29.0
|
|
2026-10-29T03:45:10.2759225Z CURRENT app ghcr.io/papra-hq/papra 26.7.1-rootless
|
|
2026-10-29T03:45:10.2759446Z CURRENT app ghcr.io/seanmorley15/adventurelog-backend v0.13.1
|
|
2026-10-29T03:45:10.2759727Z CURRENT app ghcr.io/seanmorley15/adventurelog-frontend v0.13.1
|
|
2026-10-29T03:45:10.2760034Z CURRENT app ghcr.io/seerr-team/seerr v3.5.1
|
|
2026-10-29T03:45:10.2760436Z CURRENT app ghcr.io/sysadminsmedia/homebox 0.27.1
|
|
2026-10-29T03:45:10.2760648Z CURRENT app ghost 6.73.0-alpine
|
|
2026-10-29T03:45:10.2760906Z CURRENT app lscr.io/linuxserver/code-server 4.143.1
|
|
2026-10-29T03:45:10.2761126Z CURRENT app lscr.io/linuxserver/grocy 4.7.1
|
|
2026-10-29T03:45:10.2761339Z CURRENT app lscr.io/linuxserver/radarr 6.4.4
|
|
2026-10-29T03:45:10.2761737Z CURRENT app lscr.io/linuxserver/sonarr 4.0.20
|
|
2026-10-29T03:45:10.2761955Z CURRENT app lukevella/rallly 4.16.3
|
|
2026-10-29T03:45:10.2762164Z CURRENT app onlyoffice/documentserver 9.4.0
|
|
2026-10-29T03:45:10.2762381Z CURRENT app outlinewiki/outline 1.12.0
|
|
2026-10-29T03:45:10.2762630Z CURRENT app privatebin/pdo 2.1.0
|
|
2026-10-29T03:45:10.2762853Z CURRENT app vaultwarden/server 1.37.4-alpine
|
|
2026-10-29T03:45:10.2763063Z CURRENT app vikunja/vikunja 2.7.1
|
|
2026-10-29T03:45:10.2763339Z COUNTS ADVISORY=40 BEHIND=11 CURRENT=42 FLOATING=20 GAP=74 NOT_CHECKED=8 SELF=2
|
|
2026-10-29T03:45:10.2763565Z RUNTIME read=25 (1211 s) from-cache=160 not-checked=0 zstd-decoder=zstandard 0.25.0 (pinned wheel, sha256 checked)
|
|
2026-10-29T03:45:10.2763804Z TAGS fetched=0 from-cache=116 retried-429=0 (cache /root/.cache/felhom-watch-tags.json)
|
|
2026-10-29T03:45:10.2764147Z REQUESTS api.github.com=69 api.osv.dev=1 auth.docker.io=1 blog.cloudflare.com=1 github.com=62 hub.docker.com=1 raw.githubusercontent.com=1 registry-1.docker.io=1
|
|
2026-10-29T03:45:10.5832730Z MAIL RESEND-ACCEPTED id=01a185c2-fb55-75ab-829d-c93568d9e150 kind=advisory subject=[Felhom security] n8n, sparkyfitness, sparkyfitness_server — 14 new advisories
|
|
2026-10-29T03:45:10.8162255Z MAIL RESEND-ACCEPTED id=01a185c2-fc34-7900-9a73-4f827a391139 kind=not_checked subject=[Felhom security] the watch could not check runtime
|
|
2026-10-29T03:45:10.8307889Z STATE written: documentation/security-watch/state.json (307 known advisories)
|
|
2026-10-29T03:45:10.9541884Z ::group::Run set -u
|
|
2026-10-29T03:45:10.9542180Z set -u
|
|
2026-10-29T03:45:10.9542296Z f=documentation/security-watch/state.json
|
|
2026-10-29T03:45:10.9542408Z if [ ! -f "$f" ]; then
|
|
2026-10-29T03:45:10.9542566Z echo "no memory file was written - nothing to commit"; exit 0
|
|
2026-10-29T03:45:10.9542688Z fi
|
|
2026-10-29T03:45:10.9542787Z if git ls-files --error-unmatch "$f" >/dev/null 2>&1 && git diff --quiet -- "$f"; then
|
|
2026-10-29T03:45:10.9542919Z echo "memory unchanged - nothing to commit"; exit 0
|
|
2026-10-29T03:45:10.9543057Z fi
|
|
2026-10-29T03:45:10.9543148Z cp "$f" /tmp/state.json
|
|
2026-10-29T03:45:10.9543259Z auth=$(python3 -c 'import base64,os;print(base64.b64encode(("x:"+os.environ["PUSH_TOKEN"]).encode()).decode())')
|
|
2026-10-29T03:45:10.9543433Z for attempt in 1 2 3; do
|
|
2026-10-29T03:45:10.9543536Z git fetch -q --depth 1 origin main && git checkout -q -B main FETCH_HEAD
|
|
2026-10-29T03:45:10.9543648Z mkdir -p "$(dirname "$f")" && cp /tmp/state.json "$f"
|
|
2026-10-29T03:45:10.9543758Z git add "$f"
|
|
2026-10-29T03:45:10.9543885Z git -c user.name="felhom security watch" -c user.email=monitoring@felhom.eu \
|
|
2026-10-29T03:45:10.9544007Z commit -q -m "security-watch: memory of $(date -u +%F) (R-1303). Docs only." || { echo "nothing to commit"; exit 0; }
|
|
2026-10-29T03:45:10.9544136Z if git -c http.extraHeader="Authorization: Basic $auth" push -q origin HEAD:main; then
|
|
2026-10-29T03:45:10.9544294Z echo "memory pushed: $(git rev-parse --short=12 HEAD)"; exit 0
|
|
2026-10-29T03:45:10.9544412Z fi
|
|
2026-10-29T03:45:10.9544507Z echo "push refused (attempt $attempt) - re-fetching main"
|
|
2026-10-29T03:45:10.9544625Z sleep 5
|
|
2026-10-29T03:45:10.9544754Z done
|
|
2026-10-29T03:45:10.9544906Z echo "MEMORY NOT SAVED after 3 attempts"; exit 1
|
|
2026-10-29T03:45:10.9545013Z shell: bash --noprofile --norc -e -o pipefail {0}
|
|
2026-10-29T03:45:10.9545182Z env:
|
|
2026-10-29T03:45:10.9545758Z PUSH_TOKEN: ***
|
|
2026-10-29T03:45:10.9545875Z ::endgroup::
|
|
2026-10-29T03:45:12.3598427Z memory pushed: ecae56559c5a
|
|
2026-10-29T03:45:12.3608136Z Cleaning up container for job watch
|
|
2026-10-29T03:45:12.9441522Z 🏁 Job succeeded
|