mozillazg / ptcpdump

72%

LAST BUILD ON BRANCH master

branch: SELECT

CHANGE BRANCH

x

• No branch selected
• add-change-log
• add-docs-site
• add-more-tests
• add-prefix
• backend-tp-btf
• copilot/fix-339
• coverage
• dependabot/go_modules/golang.org/x/net-0.38.0
• disable-reverse-match
• dynamic-link
• enable-PIE
• expression-file
• file-size
• fix-tcp-parse
• fix-timestamp-drift
• fix-warn
• fix/case-insensitive-testdata-collision
• ignore-optinal-hooks-error
• improve-ifname
• improve-rotate
• improve-tests
• master
• more-socket-cookie
• mozillazg-patch-1
• output-http
• output-tls
• prepare-v0.36.0
• read-stdin
• renovate/all-github-action
• renovate/all-go-deps-master
• renovate/busybox-latest
• renovate/go-github.com-containerd-containerd-vulnerability
• renovate/go-github.com-docker-docker-vulnerability
• renovate/go-github.com-opencontainers-selinux-vulnerability
• renovate/go-go.opentelemetry.io-otel-vulnerability
• renovate/go-golang.org-x-net-vulnerability
• renovate/go-google.golang.org-grpc-vulnerability
• renovate/golang-1.23.7-bookworm
• renovate/golang-1.23.x
• renovate/golang-1.24.4-bookworm
• renovate/golang-1.24.5-bookworm
• renovate/golang-1.24.6-bookworm
• renovate/golang-1.24.x
• renovate/golang-1.25.4-bookworm
• renovate/golang-1.25.5-bookworm
• renovate/golang-1.25.x
• renovate/golang-1.26.2-bookworm
• renovate/golang-1.26.3-bookworm
• renovate/golang-1.26.x
• renovate/golang-1.27.1-bookworm
• renovate/golang-1.x
• renovate/major-5-all-github-action
• renovate/major-6-all-github-action
• renovate/major-7-all-github-action
• renovate/major-8-all-github-action
• renovate/migrate-config
• renovate/patch-all-github-action
• renovate/patch-all-go-deps-master
• renovate/patch-all-lvh-images-main
• renovate/quay.io-ptcpdump-develop-20250411.x
• renovate/quay.io-ptcpdump-develop-20250614.x
• renovate/quay.io-ptcpdump-develop-20250809.x
• renovate/quay.io-ptcpdump-develop-20251002.x
• renovate/quay.io-ptcpdump-develop-20251115.x
• socket-filter-backend
• support-arm32
• support-clone-process
• support-relative-tcp-seq
• support-tun-interface
• tttt
• unknown-event
• update-deps
• upgrade-docker-dep

Build # 37632153983

Build Type

push

github

Committed by web-flow

Commit Message

chore(deps): update docker base images to latest (#408)

* chore(deps): update docker base images to latest

- Dockerfile: quay.io/ptcpdump/develop to 20261003.144200, busybox:latest digest
- .github/build.Dockerfile: golang:1.27.1-bookworm digest

* add `-scan symbol` when run govulncheck

* ci: run govulncheck module and symbol scans separately

govulncheck's -scan flag stores a single value, so '-scan module -scan symbol'
only ran the symbol scan. Split them into separate invocations (with ./... for
the source-mode symbol scan) and fail the job only when both scans fail.

* fix(deps): migrate containerd to v2 to fix govulncheck

govulncheck reports reachable vulnerabilities in
github.com/containerd/containerd v1.7.36 (GO-2026-5622, GO-2026-5338,
GO-2026-5064) and github.com/klauspost/compress v1.16.7 (GO-2026-5841).
The containerd advisories are only fixed on the v2 line, so migrate the
containerd metadata integration to github.com/containerd/containerd/v2
and let the required transitive dependency updates (including
klauspost/compress v1.20.0) come along.

A source module scan now reports no vulnerabilities.

* ci: install libpcap build deps for govulncheck source scan

The source-mode symbol scan needs to compile the cgo packages
(gopacket/pcap, elibpcap), which requires libpcap headers on the runner.
Without them the scan fails with 'pcap.h: No such file or directory'.

* Skip e2e tests for go tls keylog

Skipped e2e tests for go tls keylog in CircleCI config.

Coverage Stats

4 of 4 new or added lines in 1 file covered. (100.0%)

1 existing line in 1 file now uncovered.

4412 of 6157 relevant lines covered (71.66%)

0.72 hits per line