feat: default to strict security mode, stop injecting sudo and --enable-host-access #17361
lpcoxcgo.yml
on: pull_request
test
2m 36s
Matrix: cross-platform-build
Matrix: fuzz
Matrix: security-scan
build
2m 42s
build-wasm
1m 11s
validate-yaml
15s
bench
0s
Check validator file sizes
13s
lint-go
3m 51s
actions-build
39s
security
1m 4s
mcp-server-compile-test
42s
Alpine Container Test
1m 17s
safe-outputs-conformance
21s
impacted-go-tests
4m 2s
Notify on CGO Failure
0s
Annotations
30 errors and 13 warnings
|
test
_annotations_exist","Output":"=== RUN TestExtractPreAgentStepErrors/falls_back_to_last_step_when_no_##[error]_annotations_exist\n"}
|
|
test
_annotations_exist"}
|
|
test
_annotations_from_multiple_steps","Output":"=== RUN TestExtractPreAgentStepErrors/returns_##[error]_annotations_from_multiple_steps\n"}
|
|
test
_annotations_from_multiple_steps"}
|
|
test
_annotations_over_last_step_fallback","Output":"=== RUN TestExtractPreAgentStepErrors/prioritizes_##[error]_annotations_over_last_step_fallback\n"}
|
|
test
_annotations_over_last_step_fallback"}
|
|
test
_workflow_annotations_over_agent-stdio_fallback_when_agent_ran","Output":"=== RUN TestExtractPreAgentStepErrors/prefers_##[error]_workflow_annotations_over_agent-stdio_fallback_when_agent_ran\n"}
|
|
test
_workflow_annotations_over_agent-stdio_fallback_when_agent_ran"}
|
|
test
_annotation_exists","Output":"=== RUN TestExtractPreAgentStepErrors/falls_back_to_agent-stdio.log_excerpt_when_agent_ran_and_no_##[error]_annotation_exists\n"}
|
|
test
_annotation_exists"}
|
|
lint-go
2/2 compliant (100%)
|
|
lint-go
1/1 compliant (100%)
|
|
lint-go
6/11 compliant (54%)
|
|
lint-go
12/12 compliant (100%)
|
|
lint-go
3/3 compliant (100%)
|
|
lint-go
2/3 compliant (66%)
|
|
lint-go
19/25 compliant (76%)
|
|
lint-go
13/15 compliant (86%)
|
|
lint-go
10/11 compliant (90%)
|
|
lint-go
2/3 compliant (66%)
|
|
impacted-go-tests
_annotations_over_last_step_fallback (0.00s)
|
|
impacted-go-tests
_workflow_annotations_over_agent-stdio_fallback_when_agent_ran (0.00s)
|
|
impacted-go-tests
_annotation_exists (0.00s)
|
|
impacted-go-tests
_in_flat_files
|
|
impacted-go-tests
_from_flat_job_log_files
|
|
impacted-go-tests
_annotations_exist
|
|
impacted-go-tests
_annotations_from_multiple_steps
|
|
impacted-go-tests
_annotations_over_last_step_fallback
|
|
impacted-go-tests
_workflow_annotations_over_agent-stdio_fallback_when_agent_ran
|
|
impacted-go-tests
_annotation_exists
|
|
safe-outputs-conformance
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
actions-build
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
mcp-server-compile-test
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
security
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
build-wasm
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Alpine Container Test
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Build & Test on macos-latest
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
test
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
build
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Build & Test on windows-latest
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
lint-go
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
impacted-go-tests
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
canary-go
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
coverage-report
|
2.28 MB |
sha256:1943191597abca709a93ad1a3d3e175b8667b4acd52138aef87945b3ab440f02
|
|
|
defender-scan-log-29470556098-2
|
707 Bytes |
sha256:bb274493851ab90d4f96dc4fcfcf38ecd95ef03332e3ec8a77a1e098f4f791e2
|
|
|
gh-aw-linux-amd64
|
11.2 MB |
sha256:5950f794457095c893ceb94fcfed5d2ca2705fc3b549cbb8f4199f1667bbd8a6
|
|
|
safe-outputs-conformance-report
|
3.15 KB |
sha256:4f371ced3f367aaed66bc3a8c1affb821620e8e590a9e3e3097e4314729e8bb3
|
|
|
test-coverage-analysis-cgo
|
142 KB |
sha256:e5c8de3b03b8ec16eb8b5bcf3a235f5301e176ff291f99e4fb4349db57783890
|
|
|
test-result-cgo-unit
|
2.07 MB |
sha256:01ec4e3d90c6dc004d91f98af21c5222e290619f51d0b7e7e8f7667cd95f4a4f
|
|