19874630399
80%
main: 80%

Ran 02 Dec 2025 10:01PM UTC

Jobs 1

Files 154

Run time 1min

Badge

Embed ▾

Committed 02 Dec 2025 09:47PM UTC coverage: 80.341%. First build

Build # 19874630399

Build Type

Pull #2681

github

Committed by

ellistarn

Commit Message

feat: add grace period for newly published vulnerabilities

## Description

Adds a configurable grace period (default 48h) to vulncheck that allows
recently published vulnerabilities to pass without blocking CI. This
addresses the gap between when a vulnerability is published and when
a fixed Go version becomes available in GitHub Actions.

Set VULN_GRACE_PERIOD_HOURS to customize (default: 48).

## Prompts

| Prompt | Action |
|--------|--------|
| Run make vulncheck | Identified GO-2025-4155 vulnerability |
| make the fix and follow the submission process | Attempted Go version bump |
| is there a way to put a grace period into our github action rules | Added grace period script |

## Testing

- make vulncheck passes with grace period warning for GO-2025-4155
- Vulnerabilities older than grace period will still block

Pull Request Pull Request #2681: chore: migrate from govulncheck to osv-scanner

Run Details

11872 of 14777 relevant lines covered (80.34%)

70675.27 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	19874630399.1	02 Dec 2025 10:01PM UTC	154	80.34	GitHub Action Run

kubernetes-sigs / karpenter / 19874630399
80%
main: 80%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 19874630399

kubernetes-sigs / karpenter / 19874630399 80% main: 80%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 19874630399

kubernetes-sigs / karpenter / 19874630399
80%
main: 80%

README BADGES
x