24239185182
85%

Ran 10 Apr 2026 10:52AM UTC

Jobs 1

Files 253

Run time 1min

Badge

Embed ▾

Committed 10 Apr 2026 10:45AM UTC coverage: 89.162% (-0.009%) from 89.171%

Build # 24239185182

Build Type

push

gh-ci

Committed by

SimoneLazzaris

Commit Message

build(fips): migrate dist build to Go 1.24 native FIPS 140-3

The FIPS build was relying on Go's old BoringCrypto fork, which is
incompatible with the standard golang:1.24 image used in Dockerfile.build.
Migrate to Go 1.24's native FIPS 140-3 support (GOFIPS140=latest).

- Fix dubious ownership error in dist/fips Docker builds by passing host
  UID/GID as build args and dropping --user root from docker run calls;
  the Dockerfile already creates a non-root fipsadmin user for this purpose
- Remove _ "crypto/tls/fipsonly" import from all three fips entry points
  (immudb, immuclient, immuadmin); this package requires GOEXPERIMENT=boringcrypto
  which is not set in the standard Go 1.24 toolchain — TLS restrictions are
  now enforced automatically by GOFIPS140=latest at the runtime level
- Update check-fips.sh to verify crypto/internal/fips140 symbols instead of
  _Cfunc__goboringcrypto_ symbols, which are BoringCrypto-specific and absent
  from binaries built with the native FIPS module

Coverage Stats

38204 of 42848 relevant lines covered (89.16%)

150329.92 hits per line

Coverage Regressions

Lines	Coverage	∆	File
4	83.66	-0.08%	embedded/store/immustore.go
2	76.09	-0.36%	pkg/database/lazy_db.go

Jobs

ID	Job ID	Ran	Files	Coverage
1	24239185182.1	10 Apr 2026 10:52AM UTC	253	89.16

codenotary / immudb / 24239185182
85%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 24239185182

codenotary / immudb / 24239185182 85%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 24239185182

codenotary / immudb / 24239185182
85%

README BADGES
x