Skip to content

Drop unnecessary capabilities after BPF initialization - #3450

Open
robbycochran wants to merge 6 commits into
masterfrom
rc-harden-caps
Open

Drop unnecessary capabilities after BPF initialization#3450
robbycochran wants to merge 6 commits into
masterfrom
rc-harden-caps

Fix worker thread cap drops failing due to lost CAP_SETPCAP

47fe2e9
Select commit
Loading
Failed to load commit list.
Red Hat Konflux / Red Hat Konflux / collector-on-push failed Jun 12, 2026 in 2h 0m 2s

Failed

Red Hat Konflux/collector-on-push has failed.

Details


Task Statuses:

StatusDurationName
🟢 Succeeded 8 minutes

clone-repository

🟢 Succeeded 5 seconds

init

🟢 Succeeded 16 seconds

post-metric-start

🟢 Succeeded 1 minute

determine-image-tag

🟢 Succeeded 1 minute

determine-image-expiration

🟢 Succeeded 12 minutes

prefetch-dependencies

🟢 Succeeded 35 minutes

build-images

🟢 Succeeded 33 minutes

build-images

🟢 Succeeded 21 minutes

build-images

🟢 Succeeded 26 minutes

build-images

🟢 Succeeded 21 seconds

build-image-index

🟢 Succeeded 8 minutes

build-source-image

🟢 Succeeded 25 seconds

clair-scan

🟢 Succeeded 26 seconds

clair-scan

🟢 Succeeded 24 seconds

clair-scan

🟢 Succeeded 27 seconds

clair-scan

🟢 Succeeded 17 seconds

deprecated-base-image-check

🟢 Succeeded 1 minute

ecosystem-cert-preflight-checks

🟢 Succeeded 1 minute

ecosystem-cert-preflight-checks

🟢 Succeeded 1 minute

ecosystem-cert-preflight-checks

🟢 Succeeded 25 seconds

clamav-scan

🟢 Succeeded 26 seconds

clamav-scan

🟢 Succeeded 25 seconds

clamav-scan

🟢 Succeeded 24 seconds

clamav-scan

🟢 Succeeded 1 minute

ecosystem-cert-preflight-checks

🟢 Succeeded 1 minute

push-dockerfile

🟢 Succeeded 37 seconds

rpms-signature-scan

🟢 Succeeded 5 minutes

sast-shell-check

🔴 Failed 1 hour

sast-snyk-check

🟢 Succeeded 7 minutes

sast-unicode-check


Failure snippet:

task sast-snyk-check has the status "TaskRunCancelled":
TaskRun "collector-on-push-ph46g-sast-snyk-check" was cancelled. TaskRun cancelled as the PipelineRun it belongs to has timed out.