Skip to content

fix(server): restrict SQLite database file permissions to 0o600 (#1359) #452

fix(server): restrict SQLite database file permissions to 0o600 (#1359)

fix(server): restrict SQLite database file permissions to 0o600 (#1359) #452

Triggered via push May 13, 2026 16:49
Status Success
Total duration 22m 35s
Artifacts 25

release-dev.yml

on: push
Compute Versions
1m 16s
Compute Versions
build-gateway  /  Resolve build plan
5s
build-gateway / Resolve build plan
build-supervisor  /  Resolve build plan
3s
build-supervisor / Resolve build plan
Matrix: build-cli-linux
Matrix: build-gateway-binary-linux
Matrix: build-python-wheels-linux
Matrix: Build RPM Packages / build-rpm-linux
Matrix: build-supervisor-binary-linux
Build Driver VM Linux  /  Download Kernel Runtime
1m 5s
Build Driver VM Linux / Download Kernel Runtime
Build Driver VM macOS  /  Download Kernel Runtime
1m 9s
Build Driver VM macOS / Download Kernel Runtime
Build Driver VM macOS  /  Build Supervisor Bundle (arm64)
2m 17s
Build Driver VM macOS / Build Supervisor Bundle (arm64)
Build Python Wheel (macOS)
12m 51s
Build Python Wheel (macOS)
Build CLI (macOS)
12m 49s
Build CLI (macOS)
Build Gateway Binary (macOS)
7m 3s
Build Gateway Binary (macOS)
Matrix: build-gateway / rust-binary
Matrix: build-supervisor / rust-binary
Matrix: Build Driver VM Linux / build-driver-vm-linux
Build Driver VM macOS  /  Build Driver VM (macOS)
5m 34s
Build Driver VM macOS / Build Driver VM (macOS)
Matrix: build-gateway / build
Matrix: build-supervisor / build
Matrix: Build Debian Packages / build-deb-linux
build-gateway  /  Merge gateway manifest
1m 2s
build-gateway / Merge gateway manifest
build-supervisor  /  Merge supervisor manifest
1m 17s
build-supervisor / Merge supervisor manifest
Release Dev
47s
Release Dev
Tag GHCR Images as Dev
10s
Tag GHCR Images as Dev
Matrix: e2e / e2e
Trigger Wheel Publish
5s
Trigger Wheel Publish
Release Helm Chart (OCI, dev)
11s
Release Helm Chart (OCI, dev)
Fit to window
Zoom out
Zoom in

Annotations

14 warnings and 4 notices
Build Driver VM Linux / Build Driver VM (Linux arm64)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/download-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build Driver VM Linux / Build Driver VM (Linux amd64)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/download-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
build-supervisor / Build supervisor (arm64)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/download-artifact@v4, docker/setup-buildx-action@v3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
build-supervisor / Build supervisor (amd64)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/download-artifact@v4, docker/setup-buildx-action@v3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build Gateway Binary (macOS)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: docker/setup-buildx-action@v3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build Debian Packages / Build Debian Package (Linux amd64)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/download-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
build-gateway / Build gateway (arm64)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/download-artifact@v4, docker/setup-buildx-action@v3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
build-gateway / Build gateway (amd64)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/download-artifact@v4, docker/setup-buildx-action@v3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build Debian Packages / Build Debian Package (Linux arm64)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/download-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build Driver VM macOS / Build Driver VM (macOS)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/download-artifact@v4, docker/setup-buildx-action@v3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Release Helm Chart (OCI, dev)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: azure/setup-helm@v4, docker/login-action@v3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build CLI (macOS)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: docker/setup-buildx-action@v3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build Python Wheel (macOS)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: docker/setup-buildx-action@v3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Release Dev
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/download-artifact@v4, softprops/action-gh-release@v2. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
sccache stats - rust-native-build
0% - 0 hits, 5 misses, 0 errors
sccache stats - rust-native-build
0% - 0 hits, 5 misses, 0 errors
sccache stats - rust-native-build
0% - 0 hits, 10 misses, 0 errors
sccache stats - rust-native-build
0% - 0 hits, 10 misses, 0 errors

Artifacts

Produced during runtime
Name Size Digest
cli-linux-amd64 Expired
15.4 MB
sha256:3d15cfdf440b1f56ae058e6feb2f386834d544c2fdd7bdee85c4b95de04a8627
cli-linux-arm64 Expired
14.3 MB
sha256:a55fd89336c47820ab430b391905b9618e9c5c5dfd8b7faaaa81ebf573bf5a9e
cli-macos Expired
13.9 MB
sha256:aa74840d7aa9124934ef664aac054f529fab2ce596023ff9c32ae19c476f1437
deb-linux-amd64 Expired
40.1 MB
sha256:cf25422370bea3230f8bd1debdfdcc571975337088a780a8f3e83d48b59b2e01
deb-linux-arm64 Expired
38.1 MB
sha256:3de1ba87f1aa5aac3544c286cdec1ea42cd7d4a2665ab7674be95a0961701684
driver-vm-linux-amd64 Expired
22.4 MB
sha256:eb56ef00769ce93b5dcc113766eb6e9979fbec7ffb58e1e658d64fa28692d0a7
driver-vm-linux-arm64 Expired
21.5 MB
sha256:a68fa88faa9da69e0f978529514f25503e04910f4c69933b5e9d45aba3dfd116
driver-vm-macos Expired
25.7 MB
sha256:5fa34b21dbe4670962f7f9714ef7bc2b6bbca0e0128a4c9a78b52098cc664bb9
driver-vm-supervisor-arm64 Expired
4.76 MB
sha256:d90aa70616454d6313c64948264a920ee5c233a0ba30b264a619847548ee2ff6
gateway-binary-linux-amd64 Expired
12.2 MB
sha256:3b631a89d034121ac6784c08032e70fbf925660f226a859959b5e4442738814a
gateway-binary-linux-arm64 Expired
11.4 MB
sha256:230a323a495ec74224921d8616e201c695b3ae5c4a9d689c3ed40a909d1fce61
gateway-binary-macos Expired
11.3 MB
sha256:c924523ab72f40810cc082a24fdcefd5ffb91473a0f1465cc939e66524be78d5
python-wheels-linux-amd64 Expired
18.6 MB
sha256:151be51c4608543943e954083c35f434619e5171b498699ab0d8026776c323f4
python-wheels-linux-arm64 Expired
17.9 MB
sha256:8054ae77f361b82fa1ff9da9e16842ec553017c8dc5206c485394d4c88a37b8a
python-wheels-macos Expired
14.6 MB
sha256:ae06a09f340fe3da5b9d28fc1f130bb658c443b008a1ebd4fbe4fd19ac28fed8
rpm-linux-aarch64 Expired
13.9 MB
sha256:784dfc7e845eb7715dcf00d855cf86b6a0f5960822b612a93a79b1bda5590ec5
rpm-linux-x86_64 Expired
14.3 MB
sha256:81bcf8cdbb07a4dfcf3ddc739653116f9a04de6997f4b8759201752c68c312ea
rust-binary-gateway-gateway-linux-amd64 Expired
10.7 MB
sha256:73f3ae635762a4bd61c07c3462c42c88db31d1287126badc85d1515aab172404
rust-binary-gateway-gateway-linux-arm64 Expired
10.2 MB
sha256:b31604e2f6ec5f5d4dd4ad468c0b0b8758339f5c84efe3ddf60972e811f5610b
rust-binary-supervisor-sandbox-linux-amd64 Expired
6.13 MB
sha256:0473c97177ea64dc0e1e19651965807d9878e23a7f9ef086e959ea3a431022fa
rust-binary-supervisor-sandbox-linux-arm64 Expired
5.79 MB
sha256:6bcfc3100b28d9063077ab4222735fd6da2228864d08131164df6107fcf0bda8
supervisor-binary-linux-amd64 Expired
6.92 MB
sha256:4cbc596232a22564e10f42459f8a20c9a40d1937c7ddaa232f0aa2fc558b83a0
supervisor-binary-linux-arm64 Expired
6.34 MB
sha256:028a04a8885a6fbc658e84c90b0f2ae96af262d50ccacca731195cdeaf0121b7
vm-driver-kernel-runtime-tarballs Expired
36.6 MB
sha256:69b6673279883b748af5b3ac79752f5d2ba0e0f7a53531a2b2fe317a7d281bcb
vm-driver-macos-kernel-runtime-tarball Expired
22.8 MB
sha256:ddcf65277face8694415997c87c33726cd0027d3343db2ac47f0116919463ac8