-
Notifications
You must be signed in to change notification settings - Fork 37
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
launchpad builder won't clone one of three identical repos #788
Comments
Also fails if you don't specify the tag:
|
Works if I pull the tarball, as you might expect... parts:
grype:
plugin: go
source: https://github.com/anchore/grype/archive/refs/tags/v0.79.3.tar.gz
build-snaps:
- go Log:
|
Thank you for reporting us your feedback! The internal ticket has been created: https://warthogs.atlassian.net/browse/CRAFT-3258.
|
I've reached out to the Launchpad team about this, as I suspect it's something with launchpad's environment. (maybe being firewalled?) Given the nature of the app I could imagine a very zealous scanner picking up what the code does and shutting it down thinking it's trying to sniff out vulnerabilities in Launchpad, but that's just my uninformed hypothesis |
@lengau Thanks Alex. That would be wild, given I am working around this issue by grabbing the binary from the same repo, and can do the same security scans with it. :) |
Can you try changing the submodule URL to be accessible via https://github.com/anchore/grype/blob/fbdab6e1ecefad6d61a0a2819d97c4ce17d3bf20/.gitmodules#L3 |
Thanks @dariuszd21 - I've certainly seen this before, and would agree this is likely going to be the quick fix. Thanks! |
Bug Description
I am making a prototype of three snaps of syft, grype, and grant. They all use the same yaml, and come from the same org on GitHub. Syft and Grant clone and start building fine. Grype is unable to be cloned.
To Reproduce
Use the yaml below, start a remote build. It will fail.
part yaml
Relevant log output
The text was updated successfully, but these errors were encountered: