From b30ff2fd3734ba788c25559af0e8c63b6e027ccc Mon Sep 17 00:00:00 2001 From: Remco Beckers Date: Fri, 28 Aug 2026 11:22:20 +0200 Subject: [PATCH 1/2] STAC-25360: drop the dead Artifactory env passthrough ARTIFACTORY_PYPI_URL pointed at artifactory.tooling.stackstate.io's pypi-local index, one of the paths the package registry decommission has to come back empty on. Nothing reads it. It cannot be reached in any case: DOCKER_ENV is only used by the dev and omnibus targets, both of which depend on build, and build does `cd Dockerfiles/local_builder` -- a directory that does not exist in this repository. The whole local-builder flow has been broken for some time, so the credentials were being handed to an image that cannot be built. artifactory_user and artifactory_password go with it. They are generic Artifactory credentials in the same dead block, not specific to the Docker registry, so there is nothing left for them to authenticate. Deliberately untouched: .devcontainer/Dockerfile still bases on artifactory.tooling.stackstate.io/docker-virtual. That is the Artifactory Docker registry, a separate migration from GitLab packages to CodeArtifact. Not fixed here, but worth someone's attention: build, dev, omnibus and shell all reference Dockerfiles/local_builder or /local_init.sh and cannot work as written. Refs STAC-25360 --- Makefile | 3 --- 1 file changed, 3 deletions(-) diff --git a/Makefile b/Makefile index 32dda3e4..d9152244 100644 --- a/Makefile +++ b/Makefile @@ -14,9 +14,6 @@ AGENT_SOURCE_MOUNT = /stackstate-process-agent-mount PROJECT_DIR = /go/src/github.com/StackVista/stackstate-process-agent DOCKER_ENV = --env PROJECT_DIR=${PROJECT_DIR} \ - --env artifactory_user=${ARTIFACTORY_USER} \ - --env artifactory_password=${ARTIFACTORY_PASSWORD} \ - --env ARTIFACTORY_PYPI_URL="artifactory.tooling.stackstate.io/artifactory/api/pypi/pypi-local/simple" \ --env PYTHON_RUNTIME=2 From d1c6c5d1f7e9c8142febb460ebd26b329e12224a Mon Sep 17 00:00:00 2001 From: Remco Beckers Date: Fri, 28 Aug 2026 12:41:28 +0200 Subject: [PATCH 2/2] STAC-25360 Switch security scan to inform to not block unrelated PRs on a new CVE --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 65c22048..e0a36db1 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -185,7 +185,7 @@ jobs: uses: StackVista/image-pipeline/.github/actions/scan-image@6284a6fc006a7cc46a7f00d02c50d5f21b117b63 with: image: ${{ env.IMAGE }}:${{ steps.image.outputs.tag }}-${{ matrix.arch }} - mode: gate + mode: inform severity: UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL with-grype: true exceptions-path: exceptions