Skip to content

Conversation

@octo-sts
Copy link
Contributor

@octo-sts octo-sts bot commented Apr 11, 2025

filebrowser/2.32.0-r4: fix CVE-2025-22871

Advisory data: https://github.com/wolfi-dev/advisories/blob/main/filebrowser.advisories.yaml


"Breadcrumbs" for this automated service

@octo-sts octo-sts bot added P1 This label indicates our scanning found High, Medium or Low CVEs for these packages. automated pr CVE-2025-22871 go/bump request-cve-remediation labels Apr 11, 2025
@octo-sts
Copy link
Contributor Author

octo-sts bot commented Apr 11, 2025

🔄 Build Failed: Git Checkout Error

fatal: Remote branch v2.32.0 not found in upstream origin

Build Details

Category Details
Build System go
Failure Point git clone --quiet --origin=origin --config=user.name=Melange Build --config=user.email=melange-build@cgr.dev --config=advice.detachedHead=false --branch=v2.32.0 --depth=1 https://github.com/filebrowser/filebrowser.git /tmp/tmp.sO9gaT

Root Cause Analysis 🔍

The git checkout step failed because it's trying to clone a specific branch 'v2.32.0', but this appears to be a tag, not a branch. The build system is trying to use the '--branch' flag with a tag value instead of using the '--tag' or appropriate flag for tags.


Was this comment helpful? Please use 👍 or 👎 reactions on this comment.

@octo-sts octo-sts bot added the ai/skip-comment Stop AI from commenting on PR label Apr 11, 2025
@kbsteere kbsteere self-assigned this Apr 11, 2025
kbsteere and others added 3 commits April 11, 2025 21:46
Signed-off-by: Kyle Steere <kyle.steere@chainguard.dev>
…thub.com:wolfi-dev/os into cve-filebrowser-2f8af8a27b9bb564ea4e68a25af13388
@octo-sts octo-sts bot added bincapz/pass bincapz/pass Bincapz (aka. malcontent) scan didn't detect any CRITICALs on the scanned packages. manual/review-needed labels Apr 11, 2025
@kbsteere kbsteere enabled auto-merge (squash) April 14, 2025 12:15
@kbsteere kbsteere requested a review from a team April 14, 2025 12:16
@kbsteere kbsteere merged commit 6f18fe6 into main Apr 14, 2025
21 checks passed
@kbsteere kbsteere deleted the cve-filebrowser-2f8af8a27b9bb564ea4e68a25af13388 branch April 14, 2025 12:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ai/skip-comment Stop AI from commenting on PR automated pr bincapz/pass bincapz/pass Bincapz (aka. malcontent) scan didn't detect any CRITICALs on the scanned packages. CVE-2025-22871 go/bump manual/review-needed P1 This label indicates our scanning found High, Medium or Low CVEs for these packages. request-cve-remediation

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants