vendel.xi2ix.com/xi2ix.com-website
1
0
Fork 0
Code Issues 9 Pull requests Projects Releases Packages Wiki Activity Actions

CI failure: ci.yaml / gates #6

New issue
Closed
opened 2026-07-15 00:07:52 +00:00 by vendel.xi2ix.com · 7 comments
vendel.xi2ix.com commented 2026-07-15 00:07:52 +00:00
Owner
Copy link

Workflow: ci.yaml
Job: gates
Run: https://forgejo.lab.xi2ix.de/vendel.xi2ix.com/xi2ix.com-website/actions/runs/113
Commit: 0c6c2dd3ca
Branch/ref: main
Triggered by: vendel.xi2ix.com

Captured output (tail, per failing-eligible step)

/tmp/gsd-failhook-ci-gates-go-test.log

go: downloading golang.org/x/text v0.38.0
go: downloading github.com/caarlos0/env/v11 v11.4.1
go: downloading golang.org/x/crypto v0.53.0
go: downloading github.com/joho/godotenv v1.5.1
go: downloading github.com/stretchr/testify v1.11.1
go: downloading github.com/jackc/pgx/v5 v5.10.0
go: downloading github.com/pgvector/pgvector-go/pgx v0.4.0
go: downloading github.com/pressly/goose/v3 v3.27.1
go: downloading github.com/pgvector/pgvector-go v0.4.0
go: downloading github.com/nicksnyder/go-i18n/v2 v2.6.1
go: downloading gopkg.in/yaml.v3 v3.0.1
go: downloading github.com/wneessen/go-mail v0.7.3
go: downloading github.com/BurntSushi/toml v1.6.0
go: downloading github.com/go-playground/validator/v10 v10.30.3
go: downloading github.com/google/uuid v1.6.0
go: downloading github.com/a-h/templ v0.3.1020
go: downloading github.com/microcosm-cc/bluemonday v1.0.27
go: downloading github.com/yuin/goldmark v1.8.2
go: downloading github.com/testcontainers/testcontainers-go v0.42.0
go: downloading github.com/testcontainers/testcontainers-go/modules/postgres v0.42.0
go: downloading github.com/x448/float16 v0.8.4
go: downloading github.com/davecgh/go-spew v1.1.1
go: downloading github.com/pmezard/go-difflib v1.0.0
go: downloading github.com/sethvargo/go-retry v0.3.0
go: downloading go.uber.org/multierr v1.11.0
go: downloading github.com/jackc/puddle/v2 v2.2.2
go: downloading github.com/jackc/pgpassfile v1.0.0
go: downloading github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761
go: downloading github.com/aymerick/douceur v0.2.0
go: downloading golang.org/x/net v0.55.0
go: downloading github.com/gabriel-vasile/mimetype v1.4.13
go: downloading github.com/go-playground/universal-translator v0.18.1
go: downloading github.com/leodido/go-urn v1.4.0
go: downloading github.com/mfridman/interpolate v0.0.2
go: downloading golang.org/x/sync v0.21.0
go: downloading github.com/gorilla/css v1.0.1
go: downloading dario.cat/mergo v1.0.2
go: downloading github.com/cenkalti/backoff/v4 v4.3.0
go: downloading github.com/containerd/errdefs v1.0.0
go: downloading github.com/containerd/platforms v0.2.1
go: downloading github.com/cpuguy83/dockercfg v0.3.2
go: downloading github.com/moby/go-archive v0.2.0
go: downloading github.com/moby/moby/api v1.54.2
go: downloading github.com/moby/moby/client v0.4.1
go: downloading github.com/moby/patternmatcher v0.6.1
go: downloading github.com/opencontainers/image-spec v1.1.1
go: downloading github.com/go-playground/locales v0.14.1
go: downloading golang.org/x/sys v0.46.0
go: downloading github.com/containerd/log v0.1.0
go: downloading github.com/moby/sys/user v0.4.0
go: downloading github.com/moby/sys/userns v0.1.0
go: downloading github.com/moby/sys/sequential v0.6.0
go: downloading github.com/containerd/errdefs/pkg v0.3.0
go: downloading github.com/distribution/reference v0.6.0
go: downloading github.com/docker/go-connections v0.7.0
go: downloading github.com/opencontainers/go-digest v1.0.0
go: downloading go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.68.0
go: downloading go.opentelemetry.io/otel/trace v1.43.0
go: downloading github.com/docker/go-units v0.5.0
go: downloading github.com/moby/term v0.5.2
go: downloading github.com/magiconair/properties v1.8.10
go: downloading github.com/shirou/gopsutil/v4 v4.26.3
go: downloading github.com/moby/docker-image-spec v1.3.1
go: downloading github.com/klauspost/compress v1.18.5
go: downloading github.com/sirupsen/logrus v1.9.4
go: downloading go.opentelemetry.io/otel v1.43.0
go: downloading github.com/felixge/httpsnoop v1.0.4
go: downloading go.opentelemetry.io/otel/metric v1.43.0
go: downloading github.com/go-logr/logr v1.4.3
go: downloading github.com/go-logr/stdr v1.2.2
go: downloading go.opentelemetry.io/auto/sdk v1.2.1
go: downloading github.com/tklauser/go-sysconf v0.3.16
go: downloading github.com/cespare/xxhash/v2 v2.3.0
go: downloading github.com/tklauser/numcpus v0.11.0
?   	xi2ix.com/website	[no test files]
?   	xi2ix.com/website/assets	[no test files]
?   	xi2ix.com/website/cmd/ingest	[no test files]
?   	xi2ix.com/website/cmd/server	[no test files]
ok  	xi2ix.com/website/deploy/chart	0.010s
ok  	xi2ix.com/website/internal/admin	35.060s
ok  	xi2ix.com/website/internal/antispam	27.316s
?   	xi2ix.com/website/internal/brandterms	[no test files]
ok  	xi2ix.com/website/internal/config	0.009s
ok  	xi2ix.com/website/internal/contact	100.727s
ok  	xi2ix.com/website/internal/corpus	0.060s
ok  	xi2ix.com/website/internal/db	42.568s
?   	xi2ix.com/website/internal/db/sqlc	[no test files]
ok  	xi2ix.com/website/internal/email	12.637s
ok  	xi2ix.com/website/internal/i18n	0.308s
ok  	xi2ix.com/website/internal/ix	2.246s
ok  	xi2ix.com/website/internal/ix/eval	0.008s
ok  	xi2ix.com/website/internal/ollama	1.098s
ok  	xi2ix.com/website/internal/pages	0.395s
ok  	xi2ix.com/website/internal/repo	105.358s
ok  	xi2ix.com/website/internal/routes	0.009s
ok  	xi2ix.com/website/internal/server	25.929s
?   	xi2ix.com/website/internal/testsupport	[no test files]
ok  	xi2ix.com/website/internal/views	0.332s

/tmp/gsd-failhook-ci-gates-lhci.log

Runtime error encountered: Unexpected server response: 404

/tmp/gsd-failhook-ci-gates-xss-ssti.log

==> [D-06] XSS/SSTI static scan over internal/views (templ auto-escape contract)
    OK: no templ.Raw / template.HTML / templ.SafeURL on any render path.
==> [D-06] forbidden brand-term scan (reusing internal/brandterms via i18n gate)
ok  	xi2ix.com/website/internal/i18n	0.093s
==> RESULT: PASS — D-06 XSS/SSTI + forbidden-term gate clean.
**Workflow:** ci.yaml **Job:** gates **Run:** https://forgejo.lab.xi2ix.de/vendel.xi2ix.com/xi2ix.com-website/actions/runs/113 **Commit:** 0c6c2dd3caceb9339e1196e80fe5e3b74abdcca0 **Branch/ref:** main **Triggered by:** vendel.xi2ix.com ### Captured output (tail, per failing-eligible step) **/tmp/gsd-failhook-ci-gates-go-test.log** ``` go: downloading golang.org/x/text v0.38.0 go: downloading github.com/caarlos0/env/v11 v11.4.1 go: downloading golang.org/x/crypto v0.53.0 go: downloading github.com/joho/godotenv v1.5.1 go: downloading github.com/stretchr/testify v1.11.1 go: downloading github.com/jackc/pgx/v5 v5.10.0 go: downloading github.com/pgvector/pgvector-go/pgx v0.4.0 go: downloading github.com/pressly/goose/v3 v3.27.1 go: downloading github.com/pgvector/pgvector-go v0.4.0 go: downloading github.com/nicksnyder/go-i18n/v2 v2.6.1 go: downloading gopkg.in/yaml.v3 v3.0.1 go: downloading github.com/wneessen/go-mail v0.7.3 go: downloading github.com/BurntSushi/toml v1.6.0 go: downloading github.com/go-playground/validator/v10 v10.30.3 go: downloading github.com/google/uuid v1.6.0 go: downloading github.com/a-h/templ v0.3.1020 go: downloading github.com/microcosm-cc/bluemonday v1.0.27 go: downloading github.com/yuin/goldmark v1.8.2 go: downloading github.com/testcontainers/testcontainers-go v0.42.0 go: downloading github.com/testcontainers/testcontainers-go/modules/postgres v0.42.0 go: downloading github.com/x448/float16 v0.8.4 go: downloading github.com/davecgh/go-spew v1.1.1 go: downloading github.com/pmezard/go-difflib v1.0.0 go: downloading github.com/sethvargo/go-retry v0.3.0 go: downloading go.uber.org/multierr v1.11.0 go: downloading github.com/jackc/puddle/v2 v2.2.2 go: downloading github.com/jackc/pgpassfile v1.0.0 go: downloading github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761 go: downloading github.com/aymerick/douceur v0.2.0 go: downloading golang.org/x/net v0.55.0 go: downloading github.com/gabriel-vasile/mimetype v1.4.13 go: downloading github.com/go-playground/universal-translator v0.18.1 go: downloading github.com/leodido/go-urn v1.4.0 go: downloading github.com/mfridman/interpolate v0.0.2 go: downloading golang.org/x/sync v0.21.0 go: downloading github.com/gorilla/css v1.0.1 go: downloading dario.cat/mergo v1.0.2 go: downloading github.com/cenkalti/backoff/v4 v4.3.0 go: downloading github.com/containerd/errdefs v1.0.0 go: downloading github.com/containerd/platforms v0.2.1 go: downloading github.com/cpuguy83/dockercfg v0.3.2 go: downloading github.com/moby/go-archive v0.2.0 go: downloading github.com/moby/moby/api v1.54.2 go: downloading github.com/moby/moby/client v0.4.1 go: downloading github.com/moby/patternmatcher v0.6.1 go: downloading github.com/opencontainers/image-spec v1.1.1 go: downloading github.com/go-playground/locales v0.14.1 go: downloading golang.org/x/sys v0.46.0 go: downloading github.com/containerd/log v0.1.0 go: downloading github.com/moby/sys/user v0.4.0 go: downloading github.com/moby/sys/userns v0.1.0 go: downloading github.com/moby/sys/sequential v0.6.0 go: downloading github.com/containerd/errdefs/pkg v0.3.0 go: downloading github.com/distribution/reference v0.6.0 go: downloading github.com/docker/go-connections v0.7.0 go: downloading github.com/opencontainers/go-digest v1.0.0 go: downloading go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.68.0 go: downloading go.opentelemetry.io/otel/trace v1.43.0 go: downloading github.com/docker/go-units v0.5.0 go: downloading github.com/moby/term v0.5.2 go: downloading github.com/magiconair/properties v1.8.10 go: downloading github.com/shirou/gopsutil/v4 v4.26.3 go: downloading github.com/moby/docker-image-spec v1.3.1 go: downloading github.com/klauspost/compress v1.18.5 go: downloading github.com/sirupsen/logrus v1.9.4 go: downloading go.opentelemetry.io/otel v1.43.0 go: downloading github.com/felixge/httpsnoop v1.0.4 go: downloading go.opentelemetry.io/otel/metric v1.43.0 go: downloading github.com/go-logr/logr v1.4.3 go: downloading github.com/go-logr/stdr v1.2.2 go: downloading go.opentelemetry.io/auto/sdk v1.2.1 go: downloading github.com/tklauser/go-sysconf v0.3.16 go: downloading github.com/cespare/xxhash/v2 v2.3.0 go: downloading github.com/tklauser/numcpus v0.11.0 ? xi2ix.com/website [no test files] ? xi2ix.com/website/assets [no test files] ? xi2ix.com/website/cmd/ingest [no test files] ? xi2ix.com/website/cmd/server [no test files] ok xi2ix.com/website/deploy/chart 0.010s ok xi2ix.com/website/internal/admin 35.060s ok xi2ix.com/website/internal/antispam 27.316s ? xi2ix.com/website/internal/brandterms [no test files] ok xi2ix.com/website/internal/config 0.009s ok xi2ix.com/website/internal/contact 100.727s ok xi2ix.com/website/internal/corpus 0.060s ok xi2ix.com/website/internal/db 42.568s ? xi2ix.com/website/internal/db/sqlc [no test files] ok xi2ix.com/website/internal/email 12.637s ok xi2ix.com/website/internal/i18n 0.308s ok xi2ix.com/website/internal/ix 2.246s ok xi2ix.com/website/internal/ix/eval 0.008s ok xi2ix.com/website/internal/ollama 1.098s ok xi2ix.com/website/internal/pages 0.395s ok xi2ix.com/website/internal/repo 105.358s ok xi2ix.com/website/internal/routes 0.009s ok xi2ix.com/website/internal/server 25.929s ? xi2ix.com/website/internal/testsupport [no test files] ok xi2ix.com/website/internal/views 0.332s ``` **/tmp/gsd-failhook-ci-gates-lhci.log** ``` Runtime error encountered: Unexpected server response: 404 ``` **/tmp/gsd-failhook-ci-gates-xss-ssti.log** ``` ==> [D-06] XSS/SSTI static scan over internal/views (templ auto-escape contract) OK: no templ.Raw / template.HTML / templ.SafeURL on any render path. ==> [D-06] forbidden brand-term scan (reusing internal/brandterms via i18n gate) ok xi2ix.com/website/internal/i18n 0.093s ==> RESULT: PASS — D-06 XSS/SSTI + forbidden-term gate clean. ```
forgeadmin commented 2026-07-15 00:20:28 +00:00
Contributor
Copy link

Das ist vermutlich kein neuer Bug, sondern die bekannte, bewusst zurückgestellte LHCI/Chrome-Lücke aus Phase 45 (12.07.).

Kurzer Blick in den Log: go test ./... läuft komplett grün durch (alle Pakete ok), XSS/SSTI-Scan auch grün — nur der letzte Schritt, Lighthouse CI, scheitert mit Runtime error encountered: Unexpected server response: 404.

Bei der Runner-Migration (Phase 45, unser Repo) hatten wir das bereits gefunden: LHCI braucht einen Chrome/Chromium-Binary, den der CI-Job-Container nicht hat — der Operator hat sich damals bewusst gegen einen schnellen apt-get install chromium-Fix entschieden und stattdessen eine eigene Playwright-Farm-Phase für den Chrome-Zugriff eingeplant (noch nicht umgesetzt, offenes Todo in beiden Repos: 2026-07-12-playwright-farm-lhci-chrome-endpoint.md bei uns, 2026-07-12-lhci-chrome-via-playwright-farm.md bei euch).

Falls das jetzt dringlicher wird als "nächste Phase irgendwann", sagt Bescheid — dann ziehen wir das vor. Ansonsten: kein neues Problem, kein Handlungsbedarf gerade.

**Das ist vermutlich kein neuer Bug, sondern die bekannte, bewusst zurückgestellte LHCI/Chrome-Lücke aus Phase 45 (12.07.).** Kurzer Blick in den Log: `go test ./...` läuft komplett grün durch (alle Pakete `ok`), XSS/SSTI-Scan auch grün — nur der letzte Schritt, Lighthouse CI, scheitert mit `Runtime error encountered: Unexpected server response: 404`. Bei der Runner-Migration (Phase 45, unser Repo) hatten wir das bereits gefunden: LHCI braucht einen Chrome/Chromium-Binary, den der CI-Job-Container nicht hat — der Operator hat sich damals bewusst gegen einen schnellen `apt-get install chromium`-Fix entschieden und stattdessen eine eigene Playwright-Farm-Phase für den Chrome-Zugriff eingeplant (noch nicht umgesetzt, offenes Todo in beiden Repos: `2026-07-12-playwright-farm-lhci-chrome-endpoint.md` bei uns, `2026-07-12-lhci-chrome-via-playwright-farm.md` bei euch). Falls das jetzt dringlicher wird als "nächste Phase irgendwann", sagt Bescheid — dann ziehen wir das vor. Ansonsten: kein neues Problem, kein Handlungsbedarf gerade.
vendel.xi2ix.com commented 2026-07-15 00:30:19 +00:00
Author
Owner
Copy link

Workflow: ci.yaml
Job: gates
Run: https://forgejo.lab.xi2ix.de/vendel.xi2ix.com/xi2ix.com-website/actions/runs/116
Commit: 346a5b147b
Branch/ref: main
Triggered by: vendel.xi2ix.com

Captured output (tail, per failing-eligible step)

/tmp/gsd-failhook-ci-gates-go-test.log

go: downloading github.com/jackc/pgx/v5 v5.10.0
go: downloading golang.org/x/text v0.38.0
go: downloading github.com/nicksnyder/go-i18n/v2 v2.6.1
go: downloading golang.org/x/crypto v0.53.0
go: downloading github.com/stretchr/testify v1.11.1
go: downloading github.com/caarlos0/env/v11 v11.4.1
go: downloading github.com/joho/godotenv v1.5.1
go: downloading github.com/pgvector/pgvector-go/pgx v0.4.0
go: downloading github.com/pressly/goose/v3 v3.27.1
go: downloading github.com/pgvector/pgvector-go v0.4.0
go: downloading github.com/wneessen/go-mail v0.7.3
go: downloading gopkg.in/yaml.v3 v3.0.1
go: downloading github.com/BurntSushi/toml v1.6.0
go: downloading github.com/go-playground/validator/v10 v10.30.3
go: downloading github.com/google/uuid v1.6.0
go: downloading github.com/a-h/templ v0.3.1020
go: downloading github.com/microcosm-cc/bluemonday v1.0.27
go: downloading github.com/yuin/goldmark v1.8.2
go: downloading github.com/testcontainers/testcontainers-go v0.42.0
go: downloading github.com/testcontainers/testcontainers-go/modules/postgres v0.42.0
go: downloading github.com/davecgh/go-spew v1.1.1
go: downloading github.com/pmezard/go-difflib v1.0.0
go: downloading github.com/x448/float16 v0.8.4
go: downloading github.com/jackc/puddle/v2 v2.2.2
go: downloading github.com/jackc/pgpassfile v1.0.0
go: downloading github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761
go: downloading github.com/sethvargo/go-retry v0.3.0
go: downloading go.uber.org/multierr v1.11.0
go: downloading github.com/aymerick/douceur v0.2.0
go: downloading golang.org/x/net v0.55.0
go: downloading github.com/gabriel-vasile/mimetype v1.4.13
go: downloading github.com/go-playground/universal-translator v0.18.1
go: downloading github.com/leodido/go-urn v1.4.0
go: downloading golang.org/x/sync v0.21.0
go: downloading github.com/mfridman/interpolate v0.0.2
go: downloading github.com/gorilla/css v1.0.1
go: downloading dario.cat/mergo v1.0.2
go: downloading github.com/cenkalti/backoff/v4 v4.3.0
go: downloading github.com/containerd/errdefs v1.0.0
go: downloading github.com/containerd/platforms v0.2.1
go: downloading github.com/cpuguy83/dockercfg v0.3.2
go: downloading github.com/moby/go-archive v0.2.0
go: downloading github.com/moby/moby/api v1.54.2
go: downloading github.com/moby/moby/client v0.4.1
go: downloading github.com/moby/patternmatcher v0.6.1
go: downloading github.com/opencontainers/image-spec v1.1.1
go: downloading github.com/go-playground/locales v0.14.1
go: downloading golang.org/x/sys v0.46.0
go: downloading github.com/containerd/log v0.1.0
go: downloading github.com/moby/sys/sequential v0.6.0
go: downloading github.com/moby/sys/user v0.4.0
go: downloading github.com/moby/sys/userns v0.1.0
go: downloading github.com/containerd/errdefs/pkg v0.3.0
go: downloading github.com/distribution/reference v0.6.0
go: downloading github.com/docker/go-connections v0.7.0
go: downloading github.com/opencontainers/go-digest v1.0.0
go: downloading go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.68.0
go: downloading go.opentelemetry.io/otel/trace v1.43.0
go: downloading github.com/docker/go-units v0.5.0
go: downloading github.com/moby/term v0.5.2
go: downloading github.com/magiconair/properties v1.8.10
go: downloading github.com/shirou/gopsutil/v4 v4.26.3
go: downloading github.com/moby/docker-image-spec v1.3.1
go: downloading go.opentelemetry.io/otel v1.43.0
go: downloading github.com/klauspost/compress v1.18.5
go: downloading github.com/sirupsen/logrus v1.9.4
go: downloading github.com/felixge/httpsnoop v1.0.4
go: downloading go.opentelemetry.io/otel/metric v1.43.0
go: downloading github.com/tklauser/go-sysconf v0.3.16
go: downloading github.com/go-logr/logr v1.4.3
go: downloading github.com/go-logr/stdr v1.2.2
go: downloading go.opentelemetry.io/auto/sdk v1.2.1
go: downloading github.com/cespare/xxhash/v2 v2.3.0
go: downloading github.com/tklauser/numcpus v0.11.0
?   	xi2ix.com/website	[no test files]
?   	xi2ix.com/website/assets	[no test files]
?   	xi2ix.com/website/cmd/ingest	[no test files]
?   	xi2ix.com/website/cmd/server	[no test files]
ok  	xi2ix.com/website/deploy/chart	0.006s
ok  	xi2ix.com/website/internal/admin	33.503s
ok  	xi2ix.com/website/internal/antispam	26.192s
?   	xi2ix.com/website/internal/brandterms	[no test files]
ok  	xi2ix.com/website/internal/config	0.010s
ok  	xi2ix.com/website/internal/contact	99.074s
ok  	xi2ix.com/website/internal/corpus	0.051s
ok  	xi2ix.com/website/internal/db	41.448s
?   	xi2ix.com/website/internal/db/sqlc	[no test files]
ok  	xi2ix.com/website/internal/email	11.607s
ok  	xi2ix.com/website/internal/i18n	0.226s
ok  	xi2ix.com/website/internal/ix	1.681s
ok  	xi2ix.com/website/internal/ix/eval	0.030s
ok  	xi2ix.com/website/internal/ollama	1.046s
ok  	xi2ix.com/website/internal/pages	0.327s
ok  	xi2ix.com/website/internal/repo	104.517s
ok  	xi2ix.com/website/internal/routes	0.004s
ok  	xi2ix.com/website/internal/server	23.921s
?   	xi2ix.com/website/internal/testsupport	[no test files]
ok  	xi2ix.com/website/internal/views	0.302s

/tmp/gsd-failhook-ci-gates-lhci.log

Runtime error encountered: Unexpected server response: 404

/tmp/gsd-failhook-ci-gates-xss-ssti.log

==> [D-06] XSS/SSTI static scan over internal/views (templ auto-escape contract)
    OK: no templ.Raw / template.HTML / templ.SafeURL on any render path.
==> [D-06] forbidden brand-term scan (reusing internal/brandterms via i18n gate)
ok  	xi2ix.com/website/internal/i18n	0.089s
==> RESULT: PASS — D-06 XSS/SSTI + forbidden-term gate clean.
**Workflow:** ci.yaml **Job:** gates **Run:** https://forgejo.lab.xi2ix.de/vendel.xi2ix.com/xi2ix.com-website/actions/runs/116 **Commit:** 346a5b147b82dabdf649aed03bb45df23a16f242 **Branch/ref:** main **Triggered by:** vendel.xi2ix.com ### Captured output (tail, per failing-eligible step) **/tmp/gsd-failhook-ci-gates-go-test.log** ``` go: downloading github.com/jackc/pgx/v5 v5.10.0 go: downloading golang.org/x/text v0.38.0 go: downloading github.com/nicksnyder/go-i18n/v2 v2.6.1 go: downloading golang.org/x/crypto v0.53.0 go: downloading github.com/stretchr/testify v1.11.1 go: downloading github.com/caarlos0/env/v11 v11.4.1 go: downloading github.com/joho/godotenv v1.5.1 go: downloading github.com/pgvector/pgvector-go/pgx v0.4.0 go: downloading github.com/pressly/goose/v3 v3.27.1 go: downloading github.com/pgvector/pgvector-go v0.4.0 go: downloading github.com/wneessen/go-mail v0.7.3 go: downloading gopkg.in/yaml.v3 v3.0.1 go: downloading github.com/BurntSushi/toml v1.6.0 go: downloading github.com/go-playground/validator/v10 v10.30.3 go: downloading github.com/google/uuid v1.6.0 go: downloading github.com/a-h/templ v0.3.1020 go: downloading github.com/microcosm-cc/bluemonday v1.0.27 go: downloading github.com/yuin/goldmark v1.8.2 go: downloading github.com/testcontainers/testcontainers-go v0.42.0 go: downloading github.com/testcontainers/testcontainers-go/modules/postgres v0.42.0 go: downloading github.com/davecgh/go-spew v1.1.1 go: downloading github.com/pmezard/go-difflib v1.0.0 go: downloading github.com/x448/float16 v0.8.4 go: downloading github.com/jackc/puddle/v2 v2.2.2 go: downloading github.com/jackc/pgpassfile v1.0.0 go: downloading github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761 go: downloading github.com/sethvargo/go-retry v0.3.0 go: downloading go.uber.org/multierr v1.11.0 go: downloading github.com/aymerick/douceur v0.2.0 go: downloading golang.org/x/net v0.55.0 go: downloading github.com/gabriel-vasile/mimetype v1.4.13 go: downloading github.com/go-playground/universal-translator v0.18.1 go: downloading github.com/leodido/go-urn v1.4.0 go: downloading golang.org/x/sync v0.21.0 go: downloading github.com/mfridman/interpolate v0.0.2 go: downloading github.com/gorilla/css v1.0.1 go: downloading dario.cat/mergo v1.0.2 go: downloading github.com/cenkalti/backoff/v4 v4.3.0 go: downloading github.com/containerd/errdefs v1.0.0 go: downloading github.com/containerd/platforms v0.2.1 go: downloading github.com/cpuguy83/dockercfg v0.3.2 go: downloading github.com/moby/go-archive v0.2.0 go: downloading github.com/moby/moby/api v1.54.2 go: downloading github.com/moby/moby/client v0.4.1 go: downloading github.com/moby/patternmatcher v0.6.1 go: downloading github.com/opencontainers/image-spec v1.1.1 go: downloading github.com/go-playground/locales v0.14.1 go: downloading golang.org/x/sys v0.46.0 go: downloading github.com/containerd/log v0.1.0 go: downloading github.com/moby/sys/sequential v0.6.0 go: downloading github.com/moby/sys/user v0.4.0 go: downloading github.com/moby/sys/userns v0.1.0 go: downloading github.com/containerd/errdefs/pkg v0.3.0 go: downloading github.com/distribution/reference v0.6.0 go: downloading github.com/docker/go-connections v0.7.0 go: downloading github.com/opencontainers/go-digest v1.0.0 go: downloading go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.68.0 go: downloading go.opentelemetry.io/otel/trace v1.43.0 go: downloading github.com/docker/go-units v0.5.0 go: downloading github.com/moby/term v0.5.2 go: downloading github.com/magiconair/properties v1.8.10 go: downloading github.com/shirou/gopsutil/v4 v4.26.3 go: downloading github.com/moby/docker-image-spec v1.3.1 go: downloading go.opentelemetry.io/otel v1.43.0 go: downloading github.com/klauspost/compress v1.18.5 go: downloading github.com/sirupsen/logrus v1.9.4 go: downloading github.com/felixge/httpsnoop v1.0.4 go: downloading go.opentelemetry.io/otel/metric v1.43.0 go: downloading github.com/tklauser/go-sysconf v0.3.16 go: downloading github.com/go-logr/logr v1.4.3 go: downloading github.com/go-logr/stdr v1.2.2 go: downloading go.opentelemetry.io/auto/sdk v1.2.1 go: downloading github.com/cespare/xxhash/v2 v2.3.0 go: downloading github.com/tklauser/numcpus v0.11.0 ? xi2ix.com/website [no test files] ? xi2ix.com/website/assets [no test files] ? xi2ix.com/website/cmd/ingest [no test files] ? xi2ix.com/website/cmd/server [no test files] ok xi2ix.com/website/deploy/chart 0.006s ok xi2ix.com/website/internal/admin 33.503s ok xi2ix.com/website/internal/antispam 26.192s ? xi2ix.com/website/internal/brandterms [no test files] ok xi2ix.com/website/internal/config 0.010s ok xi2ix.com/website/internal/contact 99.074s ok xi2ix.com/website/internal/corpus 0.051s ok xi2ix.com/website/internal/db 41.448s ? xi2ix.com/website/internal/db/sqlc [no test files] ok xi2ix.com/website/internal/email 11.607s ok xi2ix.com/website/internal/i18n 0.226s ok xi2ix.com/website/internal/ix 1.681s ok xi2ix.com/website/internal/ix/eval 0.030s ok xi2ix.com/website/internal/ollama 1.046s ok xi2ix.com/website/internal/pages 0.327s ok xi2ix.com/website/internal/repo 104.517s ok xi2ix.com/website/internal/routes 0.004s ok xi2ix.com/website/internal/server 23.921s ? xi2ix.com/website/internal/testsupport [no test files] ok xi2ix.com/website/internal/views 0.302s ``` **/tmp/gsd-failhook-ci-gates-lhci.log** ``` Runtime error encountered: Unexpected server response: 404 ``` **/tmp/gsd-failhook-ci-gates-xss-ssti.log** ``` ==> [D-06] XSS/SSTI static scan over internal/views (templ auto-escape contract) OK: no templ.Raw / template.HTML / templ.SafeURL on any render path. ==> [D-06] forbidden brand-term scan (reusing internal/brandterms via i18n gate) ok xi2ix.com/website/internal/i18n 0.089s ==> RESULT: PASS — D-06 XSS/SSTI + forbidden-term gate clean. ```
vendel.xi2ix.com commented 2026-07-15 00:39:59 +00:00
Author
Owner
Copy link

Workflow: ci.yaml
Job: gates
Run: https://forgejo.lab.xi2ix.de/vendel.xi2ix.com/xi2ix.com-website/actions/runs/119
Commit: dfd64f3e4a
Branch/ref: main
Triggered by: vendel.xi2ix.com

Captured output (tail, per failing-eligible step)

/tmp/gsd-failhook-ci-gates-go-test.log

go: downloading golang.org/x/text v0.38.0
go: downloading github.com/caarlos0/env/v11 v11.4.1
go: downloading github.com/joho/godotenv v1.5.1
go: downloading golang.org/x/crypto v0.53.0
go: downloading github.com/stretchr/testify v1.11.1
go: downloading github.com/jackc/pgx/v5 v5.10.0
go: downloading github.com/nicksnyder/go-i18n/v2 v2.6.1
go: downloading gopkg.in/yaml.v3 v3.0.1
go: downloading github.com/pgvector/pgvector-go/pgx v0.4.0
go: downloading github.com/pgvector/pgvector-go v0.4.0
go: downloading github.com/pressly/goose/v3 v3.27.1
go: downloading github.com/BurntSushi/toml v1.6.0
go: downloading github.com/wneessen/go-mail v0.7.3
go: downloading github.com/go-playground/validator/v10 v10.30.3
go: downloading github.com/google/uuid v1.6.0
go: downloading github.com/a-h/templ v0.3.1020
go: downloading github.com/microcosm-cc/bluemonday v1.0.27
go: downloading github.com/yuin/goldmark v1.8.2
go: downloading github.com/testcontainers/testcontainers-go v0.42.0
go: downloading github.com/testcontainers/testcontainers-go/modules/postgres v0.42.0
go: downloading github.com/davecgh/go-spew v1.1.1
go: downloading github.com/pmezard/go-difflib v1.0.0
go: downloading github.com/x448/float16 v0.8.4
go: downloading github.com/jackc/puddle/v2 v2.2.2
go: downloading github.com/jackc/pgpassfile v1.0.0
go: downloading github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761
go: downloading github.com/sethvargo/go-retry v0.3.0
go: downloading go.uber.org/multierr v1.11.0
go: downloading github.com/aymerick/douceur v0.2.0
go: downloading golang.org/x/net v0.55.0
go: downloading github.com/gabriel-vasile/mimetype v1.4.13
go: downloading github.com/go-playground/universal-translator v0.18.1
go: downloading github.com/leodido/go-urn v1.4.0
go: downloading golang.org/x/sync v0.21.0
go: downloading github.com/mfridman/interpolate v0.0.2
go: downloading github.com/gorilla/css v1.0.1
go: downloading dario.cat/mergo v1.0.2
go: downloading github.com/cenkalti/backoff/v4 v4.3.0
go: downloading github.com/containerd/errdefs v1.0.0
go: downloading github.com/containerd/platforms v0.2.1
go: downloading github.com/cpuguy83/dockercfg v0.3.2
go: downloading github.com/moby/go-archive v0.2.0
go: downloading github.com/moby/moby/api v1.54.2
go: downloading github.com/moby/moby/client v0.4.1
go: downloading github.com/moby/patternmatcher v0.6.1
go: downloading github.com/opencontainers/image-spec v1.1.1
go: downloading golang.org/x/sys v0.46.0
go: downloading github.com/go-playground/locales v0.14.1
go: downloading github.com/containerd/log v0.1.0
go: downloading github.com/moby/sys/sequential v0.6.0
go: downloading github.com/moby/sys/userns v0.1.0
go: downloading github.com/moby/sys/user v0.4.0
go: downloading github.com/containerd/errdefs/pkg v0.3.0
go: downloading github.com/distribution/reference v0.6.0
go: downloading github.com/docker/go-connections v0.7.0
go: downloading github.com/opencontainers/go-digest v1.0.0
go: downloading go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.68.0
go: downloading go.opentelemetry.io/otel/trace v1.43.0
go: downloading github.com/docker/go-units v0.5.0
go: downloading github.com/magiconair/properties v1.8.10
go: downloading github.com/moby/term v0.5.2
go: downloading github.com/shirou/gopsutil/v4 v4.26.3
go: downloading go.opentelemetry.io/otel v1.43.0
go: downloading github.com/moby/docker-image-spec v1.3.1
go: downloading github.com/klauspost/compress v1.18.5
go: downloading github.com/sirupsen/logrus v1.9.4
go: downloading github.com/felixge/httpsnoop v1.0.4
go: downloading go.opentelemetry.io/otel/metric v1.43.0
go: downloading github.com/tklauser/go-sysconf v0.3.16
go: downloading github.com/go-logr/logr v1.4.3
go: downloading github.com/cespare/xxhash/v2 v2.3.0
go: downloading github.com/go-logr/stdr v1.2.2
go: downloading go.opentelemetry.io/auto/sdk v1.2.1
go: downloading github.com/tklauser/numcpus v0.11.0
?   	xi2ix.com/website	[no test files]
?   	xi2ix.com/website/assets	[no test files]
?   	xi2ix.com/website/cmd/ingest	[no test files]
?   	xi2ix.com/website/cmd/server	[no test files]
ok  	xi2ix.com/website/deploy/chart	0.005s
ok  	xi2ix.com/website/internal/admin	39.828s
ok  	xi2ix.com/website/internal/antispam	25.079s
?   	xi2ix.com/website/internal/brandterms	[no test files]
ok  	xi2ix.com/website/internal/config	0.018s
ok  	xi2ix.com/website/internal/contact	102.436s
ok  	xi2ix.com/website/internal/corpus	0.059s
ok  	xi2ix.com/website/internal/db	42.584s
?   	xi2ix.com/website/internal/db/sqlc	[no test files]
ok  	xi2ix.com/website/internal/email	9.311s
ok  	xi2ix.com/website/internal/i18n	0.307s
ok  	xi2ix.com/website/internal/ix	2.021s
ok  	xi2ix.com/website/internal/ix/eval	0.017s
ok  	xi2ix.com/website/internal/ollama	1.068s
ok  	xi2ix.com/website/internal/pages	0.351s
ok  	xi2ix.com/website/internal/repo	106.952s
ok  	xi2ix.com/website/internal/routes	0.004s
ok  	xi2ix.com/website/internal/server	24.478s
?   	xi2ix.com/website/internal/testsupport	[no test files]
ok  	xi2ix.com/website/internal/views	0.306s

/tmp/gsd-failhook-ci-gates-lhci.log

Runtime error encountered: Unexpected server response: 404

/tmp/gsd-failhook-ci-gates-xss-ssti.log

==> [D-06] XSS/SSTI static scan over internal/views (templ auto-escape contract)
    OK: no templ.Raw / template.HTML / templ.SafeURL on any render path.
==> [D-06] forbidden brand-term scan (reusing internal/brandterms via i18n gate)
ok  	xi2ix.com/website/internal/i18n	0.086s
==> RESULT: PASS — D-06 XSS/SSTI + forbidden-term gate clean.
**Workflow:** ci.yaml **Job:** gates **Run:** https://forgejo.lab.xi2ix.de/vendel.xi2ix.com/xi2ix.com-website/actions/runs/119 **Commit:** dfd64f3e4a27e6f1184dd8430b1aea2f4fa8674f **Branch/ref:** main **Triggered by:** vendel.xi2ix.com ### Captured output (tail, per failing-eligible step) **/tmp/gsd-failhook-ci-gates-go-test.log** ``` go: downloading golang.org/x/text v0.38.0 go: downloading github.com/caarlos0/env/v11 v11.4.1 go: downloading github.com/joho/godotenv v1.5.1 go: downloading golang.org/x/crypto v0.53.0 go: downloading github.com/stretchr/testify v1.11.1 go: downloading github.com/jackc/pgx/v5 v5.10.0 go: downloading github.com/nicksnyder/go-i18n/v2 v2.6.1 go: downloading gopkg.in/yaml.v3 v3.0.1 go: downloading github.com/pgvector/pgvector-go/pgx v0.4.0 go: downloading github.com/pgvector/pgvector-go v0.4.0 go: downloading github.com/pressly/goose/v3 v3.27.1 go: downloading github.com/BurntSushi/toml v1.6.0 go: downloading github.com/wneessen/go-mail v0.7.3 go: downloading github.com/go-playground/validator/v10 v10.30.3 go: downloading github.com/google/uuid v1.6.0 go: downloading github.com/a-h/templ v0.3.1020 go: downloading github.com/microcosm-cc/bluemonday v1.0.27 go: downloading github.com/yuin/goldmark v1.8.2 go: downloading github.com/testcontainers/testcontainers-go v0.42.0 go: downloading github.com/testcontainers/testcontainers-go/modules/postgres v0.42.0 go: downloading github.com/davecgh/go-spew v1.1.1 go: downloading github.com/pmezard/go-difflib v1.0.0 go: downloading github.com/x448/float16 v0.8.4 go: downloading github.com/jackc/puddle/v2 v2.2.2 go: downloading github.com/jackc/pgpassfile v1.0.0 go: downloading github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761 go: downloading github.com/sethvargo/go-retry v0.3.0 go: downloading go.uber.org/multierr v1.11.0 go: downloading github.com/aymerick/douceur v0.2.0 go: downloading golang.org/x/net v0.55.0 go: downloading github.com/gabriel-vasile/mimetype v1.4.13 go: downloading github.com/go-playground/universal-translator v0.18.1 go: downloading github.com/leodido/go-urn v1.4.0 go: downloading golang.org/x/sync v0.21.0 go: downloading github.com/mfridman/interpolate v0.0.2 go: downloading github.com/gorilla/css v1.0.1 go: downloading dario.cat/mergo v1.0.2 go: downloading github.com/cenkalti/backoff/v4 v4.3.0 go: downloading github.com/containerd/errdefs v1.0.0 go: downloading github.com/containerd/platforms v0.2.1 go: downloading github.com/cpuguy83/dockercfg v0.3.2 go: downloading github.com/moby/go-archive v0.2.0 go: downloading github.com/moby/moby/api v1.54.2 go: downloading github.com/moby/moby/client v0.4.1 go: downloading github.com/moby/patternmatcher v0.6.1 go: downloading github.com/opencontainers/image-spec v1.1.1 go: downloading golang.org/x/sys v0.46.0 go: downloading github.com/go-playground/locales v0.14.1 go: downloading github.com/containerd/log v0.1.0 go: downloading github.com/moby/sys/sequential v0.6.0 go: downloading github.com/moby/sys/userns v0.1.0 go: downloading github.com/moby/sys/user v0.4.0 go: downloading github.com/containerd/errdefs/pkg v0.3.0 go: downloading github.com/distribution/reference v0.6.0 go: downloading github.com/docker/go-connections v0.7.0 go: downloading github.com/opencontainers/go-digest v1.0.0 go: downloading go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.68.0 go: downloading go.opentelemetry.io/otel/trace v1.43.0 go: downloading github.com/docker/go-units v0.5.0 go: downloading github.com/magiconair/properties v1.8.10 go: downloading github.com/moby/term v0.5.2 go: downloading github.com/shirou/gopsutil/v4 v4.26.3 go: downloading go.opentelemetry.io/otel v1.43.0 go: downloading github.com/moby/docker-image-spec v1.3.1 go: downloading github.com/klauspost/compress v1.18.5 go: downloading github.com/sirupsen/logrus v1.9.4 go: downloading github.com/felixge/httpsnoop v1.0.4 go: downloading go.opentelemetry.io/otel/metric v1.43.0 go: downloading github.com/tklauser/go-sysconf v0.3.16 go: downloading github.com/go-logr/logr v1.4.3 go: downloading github.com/cespare/xxhash/v2 v2.3.0 go: downloading github.com/go-logr/stdr v1.2.2 go: downloading go.opentelemetry.io/auto/sdk v1.2.1 go: downloading github.com/tklauser/numcpus v0.11.0 ? xi2ix.com/website [no test files] ? xi2ix.com/website/assets [no test files] ? xi2ix.com/website/cmd/ingest [no test files] ? xi2ix.com/website/cmd/server [no test files] ok xi2ix.com/website/deploy/chart 0.005s ok xi2ix.com/website/internal/admin 39.828s ok xi2ix.com/website/internal/antispam 25.079s ? xi2ix.com/website/internal/brandterms [no test files] ok xi2ix.com/website/internal/config 0.018s ok xi2ix.com/website/internal/contact 102.436s ok xi2ix.com/website/internal/corpus 0.059s ok xi2ix.com/website/internal/db 42.584s ? xi2ix.com/website/internal/db/sqlc [no test files] ok xi2ix.com/website/internal/email 9.311s ok xi2ix.com/website/internal/i18n 0.307s ok xi2ix.com/website/internal/ix 2.021s ok xi2ix.com/website/internal/ix/eval 0.017s ok xi2ix.com/website/internal/ollama 1.068s ok xi2ix.com/website/internal/pages 0.351s ok xi2ix.com/website/internal/repo 106.952s ok xi2ix.com/website/internal/routes 0.004s ok xi2ix.com/website/internal/server 24.478s ? xi2ix.com/website/internal/testsupport [no test files] ok xi2ix.com/website/internal/views 0.306s ``` **/tmp/gsd-failhook-ci-gates-lhci.log** ``` Runtime error encountered: Unexpected server response: 404 ``` **/tmp/gsd-failhook-ci-gates-xss-ssti.log** ``` ==> [D-06] XSS/SSTI static scan over internal/views (templ auto-escape contract) OK: no templ.Raw / template.HTML / templ.SafeURL on any render path. ==> [D-06] forbidden brand-term scan (reusing internal/brandterms via i18n gate) ok xi2ix.com/website/internal/i18n 0.086s ==> RESULT: PASS — D-06 XSS/SSTI + forbidden-term gate clean. ```
vendel.xi2ix.com commented 2026-07-15 07:14:52 +00:00
Author
Owner
Copy link

Workflow: ci.yaml
Job: gates
Run: https://forgejo.lab.xi2ix.de/vendel.xi2ix.com/xi2ix.com-website/actions/runs/124
Commit: 9b114a003c
Branch/ref: main
Triggered by: vendel.xi2ix.com

Captured output (tail, per failing-eligible step)

/tmp/gsd-failhook-ci-gates-go-test.log

go: downloading golang.org/x/text v0.38.0
go: downloading github.com/caarlos0/env/v11 v11.4.1
go: downloading github.com/joho/godotenv v1.5.1
go: downloading github.com/jackc/pgx/v5 v5.10.0
go: downloading golang.org/x/crypto v0.53.0
go: downloading github.com/stretchr/testify v1.11.1
go: downloading gopkg.in/yaml.v3 v3.0.1
go: downloading github.com/nicksnyder/go-i18n/v2 v2.6.1
go: downloading github.com/wneessen/go-mail v0.7.3
go: downloading github.com/pgvector/pgvector-go/pgx v0.4.0
go: downloading github.com/BurntSushi/toml v1.6.0
go: downloading github.com/pressly/goose/v3 v3.27.1
go: downloading github.com/go-playground/validator/v10 v10.30.3
go: downloading github.com/pgvector/pgvector-go v0.4.0
go: downloading github.com/google/uuid v1.6.0
go: downloading github.com/microcosm-cc/bluemonday v1.0.27
go: downloading github.com/a-h/templ v0.3.1020
go: downloading github.com/yuin/goldmark v1.8.2
go: downloading github.com/testcontainers/testcontainers-go v0.42.0
go: downloading github.com/testcontainers/testcontainers-go/modules/postgres v0.42.0
go: downloading github.com/jackc/puddle/v2 v2.2.2
go: downloading github.com/jackc/pgpassfile v1.0.0
go: downloading github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761
go: downloading github.com/davecgh/go-spew v1.1.1
go: downloading github.com/pmezard/go-difflib v1.0.0
go: downloading github.com/x448/float16 v0.8.4
go: downloading github.com/aymerick/douceur v0.2.0
go: downloading golang.org/x/net v0.55.0
go: downloading github.com/sethvargo/go-retry v0.3.0
go: downloading go.uber.org/multierr v1.11.0
go: downloading github.com/gabriel-vasile/mimetype v1.4.13
go: downloading github.com/go-playground/universal-translator v0.18.1
go: downloading github.com/leodido/go-urn v1.4.0
go: downloading golang.org/x/sync v0.21.0
go: downloading github.com/gorilla/css v1.0.1
go: downloading dario.cat/mergo v1.0.2
go: downloading github.com/cenkalti/backoff/v4 v4.3.0
go: downloading github.com/containerd/errdefs v1.0.0
go: downloading github.com/containerd/platforms v0.2.1
go: downloading github.com/cpuguy83/dockercfg v0.3.2
go: downloading github.com/moby/moby/api v1.54.2
go: downloading github.com/moby/go-archive v0.2.0
go: downloading github.com/moby/moby/client v0.4.1
go: downloading github.com/moby/patternmatcher v0.6.1
go: downloading github.com/opencontainers/image-spec v1.1.1
go: downloading github.com/mfridman/interpolate v0.0.2
go: downloading github.com/go-playground/locales v0.14.1
go: downloading golang.org/x/sys v0.46.0
go: downloading github.com/containerd/log v0.1.0
go: downloading github.com/moby/sys/user v0.4.0
go: downloading github.com/moby/sys/sequential v0.6.0
go: downloading github.com/moby/sys/userns v0.1.0
go: downloading github.com/containerd/errdefs/pkg v0.3.0
go: downloading github.com/distribution/reference v0.6.0
go: downloading github.com/docker/go-connections v0.7.0
go: downloading github.com/opencontainers/go-digest v1.0.0
go: downloading go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.68.0
go: downloading go.opentelemetry.io/otel/trace v1.43.0
go: downloading github.com/docker/go-units v0.5.0
go: downloading github.com/moby/term v0.5.2
go: downloading github.com/magiconair/properties v1.8.10
go: downloading github.com/shirou/gopsutil/v4 v4.26.3
go: downloading github.com/moby/docker-image-spec v1.3.1
go: downloading github.com/klauspost/compress v1.18.5
go: downloading go.opentelemetry.io/otel v1.43.0
go: downloading github.com/sirupsen/logrus v1.9.4
go: downloading github.com/felixge/httpsnoop v1.0.4
go: downloading go.opentelemetry.io/otel/metric v1.43.0
go: downloading github.com/tklauser/go-sysconf v0.3.16
go: downloading github.com/go-logr/logr v1.4.3
go: downloading github.com/cespare/xxhash/v2 v2.3.0
go: downloading github.com/go-logr/stdr v1.2.2
go: downloading go.opentelemetry.io/auto/sdk v1.2.1
go: downloading github.com/tklauser/numcpus v0.11.0
?   	xi2ix.com/website	[no test files]
?   	xi2ix.com/website/assets	[no test files]
?   	xi2ix.com/website/cmd/ingest	[no test files]
?   	xi2ix.com/website/cmd/server	[no test files]
ok  	xi2ix.com/website/deploy/chart	0.009s
ok  	xi2ix.com/website/internal/admin	36.620s
ok  	xi2ix.com/website/internal/antispam	28.257s
?   	xi2ix.com/website/internal/brandterms	[no test files]
ok  	xi2ix.com/website/internal/config	0.009s
ok  	xi2ix.com/website/internal/contact	104.133s
ok  	xi2ix.com/website/internal/corpus	0.046s
ok  	xi2ix.com/website/internal/db	43.327s
?   	xi2ix.com/website/internal/db/sqlc	[no test files]
ok  	xi2ix.com/website/internal/email	13.892s
ok  	xi2ix.com/website/internal/i18n	0.273s
ok  	xi2ix.com/website/internal/ix	2.232s
ok  	xi2ix.com/website/internal/ix/eval	0.010s
ok  	xi2ix.com/website/internal/ollama	1.059s
ok  	xi2ix.com/website/internal/pages	0.310s
ok  	xi2ix.com/website/internal/repo	109.984s
ok  	xi2ix.com/website/internal/routes	0.010s
ok  	xi2ix.com/website/internal/server	26.629s
?   	xi2ix.com/website/internal/testsupport	[no test files]
ok  	xi2ix.com/website/internal/views	0.509s

/tmp/gsd-failhook-ci-gates-lhci.log

Runtime error encountered: Unexpected server response: 404

/tmp/gsd-failhook-ci-gates-xss-ssti.log

==> [D-06] XSS/SSTI static scan over internal/views (templ auto-escape contract)
    OK: no templ.Raw / template.HTML / templ.SafeURL on any render path.
==> [D-06] forbidden brand-term scan (reusing internal/brandterms via i18n gate)
ok  	xi2ix.com/website/internal/i18n	0.048s
==> RESULT: PASS — D-06 XSS/SSTI + forbidden-term gate clean.
**Workflow:** ci.yaml **Job:** gates **Run:** https://forgejo.lab.xi2ix.de/vendel.xi2ix.com/xi2ix.com-website/actions/runs/124 **Commit:** 9b114a003c83e31ec4a3e8317253ab399bc44ad8 **Branch/ref:** main **Triggered by:** vendel.xi2ix.com ### Captured output (tail, per failing-eligible step) **/tmp/gsd-failhook-ci-gates-go-test.log** ``` go: downloading golang.org/x/text v0.38.0 go: downloading github.com/caarlos0/env/v11 v11.4.1 go: downloading github.com/joho/godotenv v1.5.1 go: downloading github.com/jackc/pgx/v5 v5.10.0 go: downloading golang.org/x/crypto v0.53.0 go: downloading github.com/stretchr/testify v1.11.1 go: downloading gopkg.in/yaml.v3 v3.0.1 go: downloading github.com/nicksnyder/go-i18n/v2 v2.6.1 go: downloading github.com/wneessen/go-mail v0.7.3 go: downloading github.com/pgvector/pgvector-go/pgx v0.4.0 go: downloading github.com/BurntSushi/toml v1.6.0 go: downloading github.com/pressly/goose/v3 v3.27.1 go: downloading github.com/go-playground/validator/v10 v10.30.3 go: downloading github.com/pgvector/pgvector-go v0.4.0 go: downloading github.com/google/uuid v1.6.0 go: downloading github.com/microcosm-cc/bluemonday v1.0.27 go: downloading github.com/a-h/templ v0.3.1020 go: downloading github.com/yuin/goldmark v1.8.2 go: downloading github.com/testcontainers/testcontainers-go v0.42.0 go: downloading github.com/testcontainers/testcontainers-go/modules/postgres v0.42.0 go: downloading github.com/jackc/puddle/v2 v2.2.2 go: downloading github.com/jackc/pgpassfile v1.0.0 go: downloading github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761 go: downloading github.com/davecgh/go-spew v1.1.1 go: downloading github.com/pmezard/go-difflib v1.0.0 go: downloading github.com/x448/float16 v0.8.4 go: downloading github.com/aymerick/douceur v0.2.0 go: downloading golang.org/x/net v0.55.0 go: downloading github.com/sethvargo/go-retry v0.3.0 go: downloading go.uber.org/multierr v1.11.0 go: downloading github.com/gabriel-vasile/mimetype v1.4.13 go: downloading github.com/go-playground/universal-translator v0.18.1 go: downloading github.com/leodido/go-urn v1.4.0 go: downloading golang.org/x/sync v0.21.0 go: downloading github.com/gorilla/css v1.0.1 go: downloading dario.cat/mergo v1.0.2 go: downloading github.com/cenkalti/backoff/v4 v4.3.0 go: downloading github.com/containerd/errdefs v1.0.0 go: downloading github.com/containerd/platforms v0.2.1 go: downloading github.com/cpuguy83/dockercfg v0.3.2 go: downloading github.com/moby/moby/api v1.54.2 go: downloading github.com/moby/go-archive v0.2.0 go: downloading github.com/moby/moby/client v0.4.1 go: downloading github.com/moby/patternmatcher v0.6.1 go: downloading github.com/opencontainers/image-spec v1.1.1 go: downloading github.com/mfridman/interpolate v0.0.2 go: downloading github.com/go-playground/locales v0.14.1 go: downloading golang.org/x/sys v0.46.0 go: downloading github.com/containerd/log v0.1.0 go: downloading github.com/moby/sys/user v0.4.0 go: downloading github.com/moby/sys/sequential v0.6.0 go: downloading github.com/moby/sys/userns v0.1.0 go: downloading github.com/containerd/errdefs/pkg v0.3.0 go: downloading github.com/distribution/reference v0.6.0 go: downloading github.com/docker/go-connections v0.7.0 go: downloading github.com/opencontainers/go-digest v1.0.0 go: downloading go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.68.0 go: downloading go.opentelemetry.io/otel/trace v1.43.0 go: downloading github.com/docker/go-units v0.5.0 go: downloading github.com/moby/term v0.5.2 go: downloading github.com/magiconair/properties v1.8.10 go: downloading github.com/shirou/gopsutil/v4 v4.26.3 go: downloading github.com/moby/docker-image-spec v1.3.1 go: downloading github.com/klauspost/compress v1.18.5 go: downloading go.opentelemetry.io/otel v1.43.0 go: downloading github.com/sirupsen/logrus v1.9.4 go: downloading github.com/felixge/httpsnoop v1.0.4 go: downloading go.opentelemetry.io/otel/metric v1.43.0 go: downloading github.com/tklauser/go-sysconf v0.3.16 go: downloading github.com/go-logr/logr v1.4.3 go: downloading github.com/cespare/xxhash/v2 v2.3.0 go: downloading github.com/go-logr/stdr v1.2.2 go: downloading go.opentelemetry.io/auto/sdk v1.2.1 go: downloading github.com/tklauser/numcpus v0.11.0 ? xi2ix.com/website [no test files] ? xi2ix.com/website/assets [no test files] ? xi2ix.com/website/cmd/ingest [no test files] ? xi2ix.com/website/cmd/server [no test files] ok xi2ix.com/website/deploy/chart 0.009s ok xi2ix.com/website/internal/admin 36.620s ok xi2ix.com/website/internal/antispam 28.257s ? xi2ix.com/website/internal/brandterms [no test files] ok xi2ix.com/website/internal/config 0.009s ok xi2ix.com/website/internal/contact 104.133s ok xi2ix.com/website/internal/corpus 0.046s ok xi2ix.com/website/internal/db 43.327s ? xi2ix.com/website/internal/db/sqlc [no test files] ok xi2ix.com/website/internal/email 13.892s ok xi2ix.com/website/internal/i18n 0.273s ok xi2ix.com/website/internal/ix 2.232s ok xi2ix.com/website/internal/ix/eval 0.010s ok xi2ix.com/website/internal/ollama 1.059s ok xi2ix.com/website/internal/pages 0.310s ok xi2ix.com/website/internal/repo 109.984s ok xi2ix.com/website/internal/routes 0.010s ok xi2ix.com/website/internal/server 26.629s ? xi2ix.com/website/internal/testsupport [no test files] ok xi2ix.com/website/internal/views 0.509s ``` **/tmp/gsd-failhook-ci-gates-lhci.log** ``` Runtime error encountered: Unexpected server response: 404 ``` **/tmp/gsd-failhook-ci-gates-xss-ssti.log** ``` ==> [D-06] XSS/SSTI static scan over internal/views (templ auto-escape contract) OK: no templ.Raw / template.HTML / templ.SafeURL on any render path. ==> [D-06] forbidden brand-term scan (reusing internal/brandterms via i18n gate) ok xi2ix.com/website/internal/i18n 0.048s ==> RESULT: PASS — D-06 XSS/SSTI + forbidden-term gate clean. ```
vendel.xi2ix.com commented 2026-07-15 20:32:02 +00:00
Author
Owner
Copy link

Workflow: ci.yaml
Job: gates
Run: https://forgejo.lab.xi2ix.de/vendel.xi2ix.com/xi2ix.com-website/actions/runs/130
Commit: 7108af37b1
Branch/ref: main
Triggered by: vendel.xi2ix.com

Captured output (tail, per failing-eligible step)

/tmp/gsd-failhook-ci-gates-go-test.log

go: downloading golang.org/x/text v0.38.0
go: downloading github.com/caarlos0/env/v11 v11.4.1
go: downloading github.com/joho/godotenv v1.5.1
go: downloading golang.org/x/crypto v0.53.0
go: downloading github.com/stretchr/testify v1.11.1
go: downloading github.com/jackc/pgx/v5 v5.10.0
go: downloading github.com/nicksnyder/go-i18n/v2 v2.6.1
go: downloading github.com/pgvector/pgvector-go/pgx v0.4.0
go: downloading github.com/pressly/goose/v3 v3.27.1
go: downloading github.com/pgvector/pgvector-go v0.4.0
go: downloading github.com/wneessen/go-mail v0.7.3
go: downloading github.com/BurntSushi/toml v1.6.0
go: downloading gopkg.in/yaml.v3 v3.0.1
go: downloading github.com/go-playground/validator/v10 v10.30.3
go: downloading github.com/a-h/templ v0.3.1020
go: downloading github.com/google/uuid v1.6.0
go: downloading github.com/microcosm-cc/bluemonday v1.0.27
go: downloading github.com/yuin/goldmark v1.8.2
go: downloading github.com/testcontainers/testcontainers-go v0.42.0
go: downloading github.com/testcontainers/testcontainers-go/modules/postgres v0.42.0
go: downloading github.com/davecgh/go-spew v1.1.1
go: downloading github.com/pmezard/go-difflib v1.0.0
go: downloading github.com/x448/float16 v0.8.4
go: downloading github.com/jackc/puddle/v2 v2.2.2
go: downloading github.com/jackc/pgpassfile v1.0.0
go: downloading github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761
go: downloading github.com/sethvargo/go-retry v0.3.0
go: downloading go.uber.org/multierr v1.11.0
go: downloading github.com/gabriel-vasile/mimetype v1.4.13
go: downloading github.com/go-playground/universal-translator v0.18.1
go: downloading github.com/leodido/go-urn v1.4.0
go: downloading github.com/aymerick/douceur v0.2.0
go: downloading golang.org/x/net v0.55.0
go: downloading golang.org/x/sync v0.21.0
go: downloading github.com/mfridman/interpolate v0.0.2
go: downloading dario.cat/mergo v1.0.2
go: downloading github.com/cenkalti/backoff/v4 v4.3.0
go: downloading github.com/containerd/errdefs v1.0.0
go: downloading github.com/containerd/platforms v0.2.1
go: downloading github.com/cpuguy83/dockercfg v0.3.2
go: downloading github.com/moby/go-archive v0.2.0
go: downloading github.com/moby/moby/api v1.54.2
go: downloading github.com/moby/moby/client v0.4.1
go: downloading github.com/moby/patternmatcher v0.6.1
go: downloading github.com/opencontainers/image-spec v1.1.1
go: downloading golang.org/x/sys v0.46.0
go: downloading github.com/gorilla/css v1.0.1
go: downloading github.com/go-playground/locales v0.14.1
go: downloading github.com/containerd/log v0.1.0
go: downloading github.com/moby/sys/sequential v0.6.0
go: downloading github.com/moby/sys/user v0.4.0
go: downloading github.com/moby/sys/userns v0.1.0
go: downloading github.com/containerd/errdefs/pkg v0.3.0
go: downloading github.com/distribution/reference v0.6.0
go: downloading github.com/docker/go-connections v0.7.0
go: downloading github.com/opencontainers/go-digest v1.0.0
go: downloading go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.68.0
go: downloading go.opentelemetry.io/otel/trace v1.43.0
go: downloading github.com/docker/go-units v0.5.0
go: downloading github.com/moby/term v0.5.2
go: downloading github.com/magiconair/properties v1.8.10
go: downloading go.opentelemetry.io/otel v1.43.0
go: downloading github.com/shirou/gopsutil/v4 v4.26.3
go: downloading github.com/moby/docker-image-spec v1.3.1
go: downloading github.com/klauspost/compress v1.18.5
go: downloading github.com/sirupsen/logrus v1.9.4
go: downloading github.com/felixge/httpsnoop v1.0.4
go: downloading go.opentelemetry.io/otel/metric v1.43.0
go: downloading github.com/tklauser/go-sysconf v0.3.16
go: downloading github.com/go-logr/stdr v1.2.2
go: downloading go.opentelemetry.io/auto/sdk v1.2.1
go: downloading github.com/go-logr/logr v1.4.3
go: downloading github.com/cespare/xxhash/v2 v2.3.0
go: downloading github.com/tklauser/numcpus v0.11.0
?   	xi2ix.com/website	[no test files]
?   	xi2ix.com/website/assets	[no test files]
?   	xi2ix.com/website/cmd/ingest	[no test files]
?   	xi2ix.com/website/cmd/server	[no test files]
ok  	xi2ix.com/website/deploy/chart	0.008s
ok  	xi2ix.com/website/internal/admin	34.507s
ok  	xi2ix.com/website/internal/antispam	27.375s
?   	xi2ix.com/website/internal/brandterms	[no test files]
ok  	xi2ix.com/website/internal/config	0.011s
ok  	xi2ix.com/website/internal/contact	102.538s
ok  	xi2ix.com/website/internal/corpus	0.054s
ok  	xi2ix.com/website/internal/db	42.197s
?   	xi2ix.com/website/internal/db/sqlc	[no test files]
ok  	xi2ix.com/website/internal/email	12.303s
ok  	xi2ix.com/website/internal/i18n	0.311s
ok  	xi2ix.com/website/internal/ix	2.622s
ok  	xi2ix.com/website/internal/ix/eval	0.010s
ok  	xi2ix.com/website/internal/ollama	1.078s
ok  	xi2ix.com/website/internal/pages	0.561s
ok  	xi2ix.com/website/internal/repo	107.379s
ok  	xi2ix.com/website/internal/routes	0.006s
ok  	xi2ix.com/website/internal/server	25.642s
?   	xi2ix.com/website/internal/testsupport	[no test files]
ok  	xi2ix.com/website/internal/views	0.513s

/tmp/gsd-failhook-ci-gates-xss-ssti.log

==> [D-06] XSS/SSTI static scan over internal/views (templ auto-escape contract)
    OK: no templ.Raw / template.HTML / templ.SafeURL on any render path.
==> [D-06] forbidden brand-term scan (reusing internal/brandterms via i18n gate)
ok  	xi2ix.com/website/internal/i18n	0.070s
==> RESULT: PASS — D-06 XSS/SSTI + forbidden-term gate clean.
**Workflow:** ci.yaml **Job:** gates **Run:** https://forgejo.lab.xi2ix.de/vendel.xi2ix.com/xi2ix.com-website/actions/runs/130 **Commit:** 7108af37b134738f8e33f924f687759247931b75 **Branch/ref:** main **Triggered by:** vendel.xi2ix.com ### Captured output (tail, per failing-eligible step) **/tmp/gsd-failhook-ci-gates-go-test.log** ``` go: downloading golang.org/x/text v0.38.0 go: downloading github.com/caarlos0/env/v11 v11.4.1 go: downloading github.com/joho/godotenv v1.5.1 go: downloading golang.org/x/crypto v0.53.0 go: downloading github.com/stretchr/testify v1.11.1 go: downloading github.com/jackc/pgx/v5 v5.10.0 go: downloading github.com/nicksnyder/go-i18n/v2 v2.6.1 go: downloading github.com/pgvector/pgvector-go/pgx v0.4.0 go: downloading github.com/pressly/goose/v3 v3.27.1 go: downloading github.com/pgvector/pgvector-go v0.4.0 go: downloading github.com/wneessen/go-mail v0.7.3 go: downloading github.com/BurntSushi/toml v1.6.0 go: downloading gopkg.in/yaml.v3 v3.0.1 go: downloading github.com/go-playground/validator/v10 v10.30.3 go: downloading github.com/a-h/templ v0.3.1020 go: downloading github.com/google/uuid v1.6.0 go: downloading github.com/microcosm-cc/bluemonday v1.0.27 go: downloading github.com/yuin/goldmark v1.8.2 go: downloading github.com/testcontainers/testcontainers-go v0.42.0 go: downloading github.com/testcontainers/testcontainers-go/modules/postgres v0.42.0 go: downloading github.com/davecgh/go-spew v1.1.1 go: downloading github.com/pmezard/go-difflib v1.0.0 go: downloading github.com/x448/float16 v0.8.4 go: downloading github.com/jackc/puddle/v2 v2.2.2 go: downloading github.com/jackc/pgpassfile v1.0.0 go: downloading github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761 go: downloading github.com/sethvargo/go-retry v0.3.0 go: downloading go.uber.org/multierr v1.11.0 go: downloading github.com/gabriel-vasile/mimetype v1.4.13 go: downloading github.com/go-playground/universal-translator v0.18.1 go: downloading github.com/leodido/go-urn v1.4.0 go: downloading github.com/aymerick/douceur v0.2.0 go: downloading golang.org/x/net v0.55.0 go: downloading golang.org/x/sync v0.21.0 go: downloading github.com/mfridman/interpolate v0.0.2 go: downloading dario.cat/mergo v1.0.2 go: downloading github.com/cenkalti/backoff/v4 v4.3.0 go: downloading github.com/containerd/errdefs v1.0.0 go: downloading github.com/containerd/platforms v0.2.1 go: downloading github.com/cpuguy83/dockercfg v0.3.2 go: downloading github.com/moby/go-archive v0.2.0 go: downloading github.com/moby/moby/api v1.54.2 go: downloading github.com/moby/moby/client v0.4.1 go: downloading github.com/moby/patternmatcher v0.6.1 go: downloading github.com/opencontainers/image-spec v1.1.1 go: downloading golang.org/x/sys v0.46.0 go: downloading github.com/gorilla/css v1.0.1 go: downloading github.com/go-playground/locales v0.14.1 go: downloading github.com/containerd/log v0.1.0 go: downloading github.com/moby/sys/sequential v0.6.0 go: downloading github.com/moby/sys/user v0.4.0 go: downloading github.com/moby/sys/userns v0.1.0 go: downloading github.com/containerd/errdefs/pkg v0.3.0 go: downloading github.com/distribution/reference v0.6.0 go: downloading github.com/docker/go-connections v0.7.0 go: downloading github.com/opencontainers/go-digest v1.0.0 go: downloading go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.68.0 go: downloading go.opentelemetry.io/otel/trace v1.43.0 go: downloading github.com/docker/go-units v0.5.0 go: downloading github.com/moby/term v0.5.2 go: downloading github.com/magiconair/properties v1.8.10 go: downloading go.opentelemetry.io/otel v1.43.0 go: downloading github.com/shirou/gopsutil/v4 v4.26.3 go: downloading github.com/moby/docker-image-spec v1.3.1 go: downloading github.com/klauspost/compress v1.18.5 go: downloading github.com/sirupsen/logrus v1.9.4 go: downloading github.com/felixge/httpsnoop v1.0.4 go: downloading go.opentelemetry.io/otel/metric v1.43.0 go: downloading github.com/tklauser/go-sysconf v0.3.16 go: downloading github.com/go-logr/stdr v1.2.2 go: downloading go.opentelemetry.io/auto/sdk v1.2.1 go: downloading github.com/go-logr/logr v1.4.3 go: downloading github.com/cespare/xxhash/v2 v2.3.0 go: downloading github.com/tklauser/numcpus v0.11.0 ? xi2ix.com/website [no test files] ? xi2ix.com/website/assets [no test files] ? xi2ix.com/website/cmd/ingest [no test files] ? xi2ix.com/website/cmd/server [no test files] ok xi2ix.com/website/deploy/chart 0.008s ok xi2ix.com/website/internal/admin 34.507s ok xi2ix.com/website/internal/antispam 27.375s ? xi2ix.com/website/internal/brandterms [no test files] ok xi2ix.com/website/internal/config 0.011s ok xi2ix.com/website/internal/contact 102.538s ok xi2ix.com/website/internal/corpus 0.054s ok xi2ix.com/website/internal/db 42.197s ? xi2ix.com/website/internal/db/sqlc [no test files] ok xi2ix.com/website/internal/email 12.303s ok xi2ix.com/website/internal/i18n 0.311s ok xi2ix.com/website/internal/ix 2.622s ok xi2ix.com/website/internal/ix/eval 0.010s ok xi2ix.com/website/internal/ollama 1.078s ok xi2ix.com/website/internal/pages 0.561s ok xi2ix.com/website/internal/repo 107.379s ok xi2ix.com/website/internal/routes 0.006s ok xi2ix.com/website/internal/server 25.642s ? xi2ix.com/website/internal/testsupport [no test files] ok xi2ix.com/website/internal/views 0.513s ``` **/tmp/gsd-failhook-ci-gates-xss-ssti.log** ``` ==> [D-06] XSS/SSTI static scan over internal/views (templ auto-escape contract) OK: no templ.Raw / template.HTML / templ.SafeURL on any render path. ==> [D-06] forbidden brand-term scan (reusing internal/brandterms via i18n gate) ok xi2ix.com/website/internal/i18n 0.070s ==> RESULT: PASS — D-06 XSS/SSTI + forbidden-term gate clean. ```
vendel.xi2ix.com commented 2026-07-15 21:39:16 +00:00
Author
Owner
Copy link

Workflow: ci.yaml
Job: gates
Run: https://forgejo.lab.xi2ix.de/vendel.xi2ix.com/xi2ix.com-website/actions/runs/135
Commit: 09bfa0ddb4
Branch/ref: plan/phase-06-grounded-ai-conversation
Triggered by: vendel.xi2ix.com

Captured output (tail, per failing-eligible step)

/tmp/gsd-failhook-ci-gates-go-test.log

go: downloading golang.org/x/text v0.38.0
go: downloading github.com/caarlos0/env/v11 v11.4.1
go: downloading github.com/joho/godotenv v1.5.1
go: downloading golang.org/x/crypto v0.53.0
go: downloading github.com/stretchr/testify v1.11.1
go: downloading github.com/jackc/pgx/v5 v5.10.0
go: downloading github.com/nicksnyder/go-i18n/v2 v2.6.1
go: downloading github.com/pgvector/pgvector-go/pgx v0.4.0
go: downloading github.com/pressly/goose/v3 v3.27.1
go: downloading github.com/pgvector/pgvector-go v0.4.0
go: downloading github.com/wneessen/go-mail v0.7.3
go: downloading github.com/BurntSushi/toml v1.6.0
go: downloading gopkg.in/yaml.v3 v3.0.1
go: downloading github.com/go-playground/validator/v10 v10.30.3
go: downloading github.com/a-h/templ v0.3.1020
go: downloading github.com/google/uuid v1.6.0
go: downloading github.com/microcosm-cc/bluemonday v1.0.27
go: downloading github.com/yuin/goldmark v1.8.2
go: downloading github.com/testcontainers/testcontainers-go v0.42.0
go: downloading github.com/testcontainers/testcontainers-go/modules/postgres v0.42.0
go: downloading github.com/davecgh/go-spew v1.1.1
go: downloading github.com/pmezard/go-difflib v1.0.0
go: downloading github.com/x448/float16 v0.8.4
go: downloading github.com/sethvargo/go-retry v0.3.0
go: downloading go.uber.org/multierr v1.11.0
go: downloading github.com/jackc/puddle/v2 v2.2.2
go: downloading github.com/jackc/pgpassfile v1.0.0
go: downloading github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761
go: downloading github.com/gabriel-vasile/mimetype v1.4.13
go: downloading github.com/go-playground/universal-translator v0.18.1
go: downloading github.com/leodido/go-urn v1.4.0
go: downloading github.com/aymerick/douceur v0.2.0
go: downloading golang.org/x/net v0.55.0
go: downloading github.com/mfridman/interpolate v0.0.2
go: downloading golang.org/x/sync v0.21.0
go: downloading github.com/go-playground/locales v0.14.1
go: downloading golang.org/x/sys v0.46.0
go: downloading dario.cat/mergo v1.0.2
go: downloading github.com/cenkalti/backoff/v4 v4.3.0
go: downloading github.com/containerd/errdefs v1.0.0
go: downloading github.com/containerd/platforms v0.2.1
go: downloading github.com/cpuguy83/dockercfg v0.3.2
go: downloading github.com/moby/go-archive v0.2.0
go: downloading github.com/moby/moby/api v1.54.2
go: downloading github.com/moby/moby/client v0.4.1
go: downloading github.com/moby/patternmatcher v0.6.1
go: downloading github.com/opencontainers/image-spec v1.1.1
go: downloading github.com/gorilla/css v1.0.1
go: downloading github.com/containerd/log v0.1.0
go: downloading github.com/moby/sys/sequential v0.6.0
go: downloading github.com/moby/sys/user v0.4.0
go: downloading github.com/moby/sys/userns v0.1.0
go: downloading github.com/docker/go-units v0.5.0
go: downloading github.com/moby/docker-image-spec v1.3.1
go: downloading github.com/magiconair/properties v1.8.10
go: downloading github.com/shirou/gopsutil/v4 v4.26.3
go: downloading github.com/klauspost/compress v1.18.5
go: downloading github.com/sirupsen/logrus v1.9.4
go: downloading github.com/moby/term v0.5.2
go: downloading github.com/opencontainers/go-digest v1.0.0
go: downloading github.com/containerd/errdefs/pkg v0.3.0
go: downloading github.com/distribution/reference v0.6.0
go: downloading github.com/docker/go-connections v0.7.0
go: downloading go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.68.0
go: downloading go.opentelemetry.io/otel/trace v1.43.0
go: downloading go.opentelemetry.io/otel v1.43.0
go: downloading github.com/felixge/httpsnoop v1.0.4
go: downloading go.opentelemetry.io/otel/metric v1.43.0
go: downloading github.com/tklauser/go-sysconf v0.3.16
go: downloading github.com/go-logr/logr v1.4.3
go: downloading github.com/go-logr/stdr v1.2.2
go: downloading go.opentelemetry.io/auto/sdk v1.2.1
go: downloading github.com/cespare/xxhash/v2 v2.3.0
go: downloading github.com/tklauser/numcpus v0.11.0
?   	xi2ix.com/website	[no test files]
?   	xi2ix.com/website/assets	[no test files]
?   	xi2ix.com/website/cmd/ingest	[no test files]
?   	xi2ix.com/website/cmd/server	[no test files]
ok  	xi2ix.com/website/deploy/chart	0.005s
ok  	xi2ix.com/website/internal/admin	37.590s
ok  	xi2ix.com/website/internal/antispam	24.298s
?   	xi2ix.com/website/internal/brandterms	[no test files]
ok  	xi2ix.com/website/internal/config	0.012s
ok  	xi2ix.com/website/internal/contact	100.462s
ok  	xi2ix.com/website/internal/corpus	0.064s
ok  	xi2ix.com/website/internal/db	39.916s
?   	xi2ix.com/website/internal/db/sqlc	[no test files]
ok  	xi2ix.com/website/internal/email	9.125s
ok  	xi2ix.com/website/internal/i18n	0.283s
ok  	xi2ix.com/website/internal/ix	2.514s
ok  	xi2ix.com/website/internal/ix/eval	0.009s
ok  	xi2ix.com/website/internal/ollama	1.079s
ok  	xi2ix.com/website/internal/pages	0.659s
ok  	xi2ix.com/website/internal/repo	105.439s
ok  	xi2ix.com/website/internal/routes	0.004s
ok  	xi2ix.com/website/internal/server	22.376s
?   	xi2ix.com/website/internal/testsupport	[no test files]
ok  	xi2ix.com/website/internal/views	0.645s

/tmp/gsd-failhook-ci-gates-xss-ssti.log

==> [D-06] XSS/SSTI static scan over internal/views (templ auto-escape contract)
    OK: no templ.Raw / template.HTML / templ.SafeURL on any render path.
==> [D-06] forbidden brand-term scan (reusing internal/brandterms via i18n gate)
ok  	xi2ix.com/website/internal/i18n	0.089s
==> RESULT: PASS — D-06 XSS/SSTI + forbidden-term gate clean.
**Workflow:** ci.yaml **Job:** gates **Run:** https://forgejo.lab.xi2ix.de/vendel.xi2ix.com/xi2ix.com-website/actions/runs/135 **Commit:** 09bfa0ddb47fb21c9ddb3ccd127e4520244aed97 **Branch/ref:** plan/phase-06-grounded-ai-conversation **Triggered by:** vendel.xi2ix.com ### Captured output (tail, per failing-eligible step) **/tmp/gsd-failhook-ci-gates-go-test.log** ``` go: downloading golang.org/x/text v0.38.0 go: downloading github.com/caarlos0/env/v11 v11.4.1 go: downloading github.com/joho/godotenv v1.5.1 go: downloading golang.org/x/crypto v0.53.0 go: downloading github.com/stretchr/testify v1.11.1 go: downloading github.com/jackc/pgx/v5 v5.10.0 go: downloading github.com/nicksnyder/go-i18n/v2 v2.6.1 go: downloading github.com/pgvector/pgvector-go/pgx v0.4.0 go: downloading github.com/pressly/goose/v3 v3.27.1 go: downloading github.com/pgvector/pgvector-go v0.4.0 go: downloading github.com/wneessen/go-mail v0.7.3 go: downloading github.com/BurntSushi/toml v1.6.0 go: downloading gopkg.in/yaml.v3 v3.0.1 go: downloading github.com/go-playground/validator/v10 v10.30.3 go: downloading github.com/a-h/templ v0.3.1020 go: downloading github.com/google/uuid v1.6.0 go: downloading github.com/microcosm-cc/bluemonday v1.0.27 go: downloading github.com/yuin/goldmark v1.8.2 go: downloading github.com/testcontainers/testcontainers-go v0.42.0 go: downloading github.com/testcontainers/testcontainers-go/modules/postgres v0.42.0 go: downloading github.com/davecgh/go-spew v1.1.1 go: downloading github.com/pmezard/go-difflib v1.0.0 go: downloading github.com/x448/float16 v0.8.4 go: downloading github.com/sethvargo/go-retry v0.3.0 go: downloading go.uber.org/multierr v1.11.0 go: downloading github.com/jackc/puddle/v2 v2.2.2 go: downloading github.com/jackc/pgpassfile v1.0.0 go: downloading github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761 go: downloading github.com/gabriel-vasile/mimetype v1.4.13 go: downloading github.com/go-playground/universal-translator v0.18.1 go: downloading github.com/leodido/go-urn v1.4.0 go: downloading github.com/aymerick/douceur v0.2.0 go: downloading golang.org/x/net v0.55.0 go: downloading github.com/mfridman/interpolate v0.0.2 go: downloading golang.org/x/sync v0.21.0 go: downloading github.com/go-playground/locales v0.14.1 go: downloading golang.org/x/sys v0.46.0 go: downloading dario.cat/mergo v1.0.2 go: downloading github.com/cenkalti/backoff/v4 v4.3.0 go: downloading github.com/containerd/errdefs v1.0.0 go: downloading github.com/containerd/platforms v0.2.1 go: downloading github.com/cpuguy83/dockercfg v0.3.2 go: downloading github.com/moby/go-archive v0.2.0 go: downloading github.com/moby/moby/api v1.54.2 go: downloading github.com/moby/moby/client v0.4.1 go: downloading github.com/moby/patternmatcher v0.6.1 go: downloading github.com/opencontainers/image-spec v1.1.1 go: downloading github.com/gorilla/css v1.0.1 go: downloading github.com/containerd/log v0.1.0 go: downloading github.com/moby/sys/sequential v0.6.0 go: downloading github.com/moby/sys/user v0.4.0 go: downloading github.com/moby/sys/userns v0.1.0 go: downloading github.com/docker/go-units v0.5.0 go: downloading github.com/moby/docker-image-spec v1.3.1 go: downloading github.com/magiconair/properties v1.8.10 go: downloading github.com/shirou/gopsutil/v4 v4.26.3 go: downloading github.com/klauspost/compress v1.18.5 go: downloading github.com/sirupsen/logrus v1.9.4 go: downloading github.com/moby/term v0.5.2 go: downloading github.com/opencontainers/go-digest v1.0.0 go: downloading github.com/containerd/errdefs/pkg v0.3.0 go: downloading github.com/distribution/reference v0.6.0 go: downloading github.com/docker/go-connections v0.7.0 go: downloading go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.68.0 go: downloading go.opentelemetry.io/otel/trace v1.43.0 go: downloading go.opentelemetry.io/otel v1.43.0 go: downloading github.com/felixge/httpsnoop v1.0.4 go: downloading go.opentelemetry.io/otel/metric v1.43.0 go: downloading github.com/tklauser/go-sysconf v0.3.16 go: downloading github.com/go-logr/logr v1.4.3 go: downloading github.com/go-logr/stdr v1.2.2 go: downloading go.opentelemetry.io/auto/sdk v1.2.1 go: downloading github.com/cespare/xxhash/v2 v2.3.0 go: downloading github.com/tklauser/numcpus v0.11.0 ? xi2ix.com/website [no test files] ? xi2ix.com/website/assets [no test files] ? xi2ix.com/website/cmd/ingest [no test files] ? xi2ix.com/website/cmd/server [no test files] ok xi2ix.com/website/deploy/chart 0.005s ok xi2ix.com/website/internal/admin 37.590s ok xi2ix.com/website/internal/antispam 24.298s ? xi2ix.com/website/internal/brandterms [no test files] ok xi2ix.com/website/internal/config 0.012s ok xi2ix.com/website/internal/contact 100.462s ok xi2ix.com/website/internal/corpus 0.064s ok xi2ix.com/website/internal/db 39.916s ? xi2ix.com/website/internal/db/sqlc [no test files] ok xi2ix.com/website/internal/email 9.125s ok xi2ix.com/website/internal/i18n 0.283s ok xi2ix.com/website/internal/ix 2.514s ok xi2ix.com/website/internal/ix/eval 0.009s ok xi2ix.com/website/internal/ollama 1.079s ok xi2ix.com/website/internal/pages 0.659s ok xi2ix.com/website/internal/repo 105.439s ok xi2ix.com/website/internal/routes 0.004s ok xi2ix.com/website/internal/server 22.376s ? xi2ix.com/website/internal/testsupport [no test files] ok xi2ix.com/website/internal/views 0.645s ``` **/tmp/gsd-failhook-ci-gates-xss-ssti.log** ``` ==> [D-06] XSS/SSTI static scan over internal/views (templ auto-escape contract) OK: no templ.Raw / template.HTML / templ.SafeURL on any render path. ==> [D-06] forbidden brand-term scan (reusing internal/brandterms via i18n gate) ok xi2ix.com/website/internal/i18n 0.089s ==> RESULT: PASS — D-06 XSS/SSTI + forbidden-term gate clean. ```
forgeadmin commented 2026-07-16 09:22:36 +00:00
Contributor
Copy link

Vollständige Analyse von unserer Seite — Empfehlung: Issue schließen.

Wir haben die komplette Historie dieses Issues durchgearbeitet (Forgejo-Kommentare + euer Repo direkt geklont + .planning/debug/ci-gates-lhci-silent-fail.md gelesen) und den kompletten CDP-Pfad live gegen den echten xi2ix-website-runner getestet:

  1. Chrome/CDP-Endpoint (der ursprüngliche Phase-45-Gap): Live verifiziert — playwright-cdp.playwright.svc.cluster.local:9222 liefert sauberes /json/version, korrekten webSocketDebuggerUrl, echten WS-Upgrade-Handshake (HTTP 101). Getestet aus drei Positionen: nativer k8s-Pod, 3× sequentielle Lighthouse-Läufe gegen denselben Browser, und — am wichtigsten — aus einem Sibling-Docker-Container über euren DinD-Socket (docker run im dind-Container eures Runners), was exakt die Netzwerkposition eures echten CI-Jobs nachbildet. Alle drei liefen sauber durch, kein 404, keine Verbindungsprobleme. Auch keine Restarts/OOM/Crash-Loops im playwright-cdp-Pod (Restart Count 0, 2+ Tage stabil).
  2. Euer ci.yaml-Wiring (--hostname/--port, POD_IP, DinD-Netzwerk-Discovery) ist bereits korrekt und mehrfach live-verifiziert (Run 84 u.a.) — kein Änderungsbedarf.
  3. Die zwei jüngsten Fehlschläge (Run 130/135): Wart ihr selbst schon dran — genau die richtige Diagnose (Beobachtbarkeits-Bug, nicht der alte 404). Wir haben von unserer Seite zusätzlich geprüft: keine Node-Resource-Pressure/Eviction-Events auf k3s-worker-gp-2 (eurem Runner-Node) im fraglichen Zeitfenster (20:28–21:39 UTC) — die eigentliche Ursache bleibt also vermutlich ein echter Timing-Flake in der Pre-Tee-Setup-Phase (Postgres-Start//livez/npm ci), nicht etwas, das wir clusterseitig sehen.
  4. Euer Fix (79e2851, vollständiges Tee-Wrapping) ist bereits live und der unmittelbar folgende gates-Run auf main (#1847) ist grün — also sowohl "Fix bricht nichts" als auch "LHCI läuft aktuell sauber durch" bestätigt.

Fazit: Keine offene Infra-Lücke mehr. Playwright-Farm-CDP-Endpoint ist voll funktionsfähig und bewährt, euer Wiring korrekt. Der verbleibende Rest ist ein möglicher seltener Timing-Flake, der ab jetzt dank eures Fixes selbst-diagnostizierend ist, falls er wiederkommt. Von unserer Seite bereit zum Schließen — wir schließen es gleich, meldet euch einfach wieder, falls der Flake erneut auftritt und mehr Log-Detail zeigt, dann schauen wir sofort mit.

**Vollständige Analyse von unserer Seite — Empfehlung: Issue schließen.** Wir haben die komplette Historie dieses Issues durchgearbeitet (Forgejo-Kommentare + euer Repo direkt geklont + `.planning/debug/ci-gates-lhci-silent-fail.md` gelesen) und den kompletten CDP-Pfad live gegen den echten `xi2ix-website-runner` getestet: 1. **Chrome/CDP-Endpoint (der ursprüngliche Phase-45-Gap):** Live verifiziert — `playwright-cdp.playwright.svc.cluster.local:9222` liefert sauberes `/json/version`, korrekten `webSocketDebuggerUrl`, echten WS-Upgrade-Handshake (HTTP 101). Getestet aus drei Positionen: nativer k8s-Pod, 3× sequentielle Lighthouse-Läufe gegen denselben Browser, und — am wichtigsten — aus einem Sibling-Docker-Container über euren DinD-Socket (`docker run` im `dind`-Container eures Runners), was exakt die Netzwerkposition eures echten CI-Jobs nachbildet. Alle drei liefen sauber durch, kein 404, keine Verbindungsprobleme. Auch keine Restarts/OOM/Crash-Loops im `playwright-cdp`-Pod (Restart Count 0, 2+ Tage stabil). 2. **Euer `ci.yaml`-Wiring** (`--hostname`/`--port`, POD_IP, DinD-Netzwerk-Discovery) ist bereits korrekt und mehrfach live-verifiziert (Run 84 u.a.) — kein Änderungsbedarf. 3. **Die zwei jüngsten Fehlschläge (Run 130/135):** Wart ihr selbst schon dran — genau die richtige Diagnose (Beobachtbarkeits-Bug, nicht der alte 404). Wir haben von unserer Seite zusätzlich geprüft: keine Node-Resource-Pressure/Eviction-Events auf `k3s-worker-gp-2` (eurem Runner-Node) im fraglichen Zeitfenster (20:28–21:39 UTC) — die eigentliche Ursache bleibt also vermutlich ein echter Timing-Flake in der Pre-Tee-Setup-Phase (Postgres-Start/`/livez`/`npm ci`), nicht etwas, das wir clusterseitig sehen. 4. Euer Fix (`79e2851`, vollständiges Tee-Wrapping) ist bereits live und der unmittelbar folgende `gates`-Run auf `main` (#1847) ist grün — also sowohl "Fix bricht nichts" als auch "LHCI läuft aktuell sauber durch" bestätigt. **Fazit:** Keine offene Infra-Lücke mehr. Playwright-Farm-CDP-Endpoint ist voll funktionsfähig und bewährt, euer Wiring korrekt. Der verbleibende Rest ist ein möglicher seltener Timing-Flake, der ab jetzt dank eures Fixes selbst-diagnostizierend ist, falls er wiederkommt. Von unserer Seite bereit zum Schließen — wir schließen es gleich, meldet euch einfach wieder, falls der Flake erneut auftritt und mehr Log-Detail zeigt, dann schauen wir sofort mit.
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
plan/phase-06-grounded-ai-conversation
fix/ci-runner-dedicated-dind
No results found.
Labels
Clear labels   
ci-failure:ci.yaml-gates

Automated CI/CD failure-dedup label (gsd 260708-g89)

  
ci-failure:deploy.yaml-build-push-deploy

Automated CI/CD failure-dedup label (gsd 260708-g89)

  
rollback-drill

Scheduled/manual rollback-drill result -- NEVER a real production incident report (gsd 260721-gwo)

  
rollback-fired:drill

A helm rollback fired at the prod-smoke failure threshold — emitted by scripts/rollback-streak.sh (gsd 260727-nvm)

  
rollback-fired:production

A REAL 3-strike production rollback fired (NOT a drill) — emitted by scripts/rollback-streak.sh at the moment of firing

No labels
ci-failure:ci.yaml-gates
ci-failure:deploy.yaml-build-push-deploy
rollback-drill
rollback-fired:drill
rollback-fired:production
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
vendel.xi2ix.com/xi2ix.com-website#6
No description provided.