Skip to content

Conversation

@octo-sts
Copy link
Contributor

@octo-sts octo-sts bot commented Apr 7, 2025

Signed-off-by: wolfi-bot <121097084+wolfi-bot@users.noreply.github.com>
@octo-sts octo-sts bot added request-version-update request for a newer version of a package automated pr labels Apr 7, 2025
@octo-sts
Copy link
Contributor Author

octo-sts bot commented Apr 7, 2025

🔍 Build Failed: Checksum Verification Failed

fetch: Expected sha256 does not match found: 097d40aee4cf4a349187615b796b37db1652fcc84bb0e8d5c0b380ab651d9095

Build Details

Category Details
Build System melange/apko
Failure Point Source tarball verification during fetch step

Root Cause Analysis 🔍

The downloaded source tarball (imlib2-1.12.5.tar.gz) failed checksum verification. The expected SHA256 hash was 35be438261c914e6ce90f06a3985fa7fea1c1e6b25b5607313e850b653015aa2, but the actual hash was 097d40aee4cf4a349187615b796b37db1652fcc84bb0e8d5c0b380ab651d9095. This could be due to a corrupted download, a modified upstream source package, or an outdated hash value in the build configuration.


Was this comment helpful? Please use 👍 or 👎 reactions on this comment.

@octo-sts octo-sts bot added the ai/skip-comment Stop AI from commenting on PR label Apr 7, 2025
@vivian-rook vivian-rook self-assigned this Apr 8, 2025
Signed-off-by: Vivian Rook <vivian.rook@chainguard.dev>
@octo-sts octo-sts bot added bincapz/pass bincapz/pass Bincapz (aka. malcontent) scan didn't detect any CRITICALs on the scanned packages. manual/review-needed labels Apr 8, 2025
@vivian-rook vivian-rook requested a review from a team April 8, 2025 10:10
@AmberArcadia AmberArcadia merged commit 5ee2653 into main Apr 8, 2025
21 checks passed
@AmberArcadia AmberArcadia deleted the wolfictl-80411bbb-a1b6-4e54-9817-91fb591ed341 branch April 8, 2025 13:51
This was referenced Jul 2, 2025
@octo-sts octo-sts bot mentioned this pull request Jul 18, 2025
15 tasks
@octo-sts octo-sts bot mentioned this pull request Nov 27, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ai/skip-comment Stop AI from commenting on PR automated pr bincapz/pass bincapz/pass Bincapz (aka. malcontent) scan didn't detect any CRITICALs on the scanned packages. manual/review-needed request-version-update request for a newer version of a package

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants