CP Emit failed VPP/in-house install activity

[cdcme]

Cherry-picks #45854 into 4.86 RC

[claude]

Claude Code Review

This repository is configured for manual code reviews. Comment @claude review to trigger a review and subscribe this PR to future pushes, or @claude review once for a one-time review.

_{Tip: disable this comment in your organization's Code Review settings.}

[codecov]

Codecov Report

❌ Patch coverage is 55.78035% with 153 lines in your changes missing coverage. Please review.
⚠️ Please upload report for BASE (rc-minor-fleet-v4.86.0@6888c2a). Learn more about missing BASE report.

Files with missing lines	Patch %	Lines
ee/server/service/software_installers.go	46.66%	33 Missing and 7 partials ⚠️
server/datastore/mysql/in_house_apps.go	16.21%	31 Missing ⚠️
server/service/activities.go	32.50%	21 Missing and 6 partials ⚠️
...allDetailsModal/SoftwareIpaInstallDetailsModal.tsx	33.33%	13 Missing and 1 partial ⚠️
server/datastore/mysql/vpp.go	86.66%	10 Missing and 4 partials ⚠️
server/mdm/apple/install_application.go	38.46%	8 Missing ⚠️
server/mdm/apple/vpp/api.go	46.66%	4 Missing and 4 partials ⚠️
.../VppInstallDetailsModal/VppInstallDetailsModal.tsx	71.42%	5 Missing and 1 partial ⚠️
.../DashboardPage/cards/ActivityFeed/ActivityFeed.tsx	50.00%	3 Missing ⚠️
.../hosts/details/HostDetailsPage/HostDetailsPage.tsx	0.00%	1 Missing ⚠️
... and 1 more

Additional details and impacted files

@@                    Coverage Diff                    @@
##             rc-minor-fleet-v4.86.0   #46379   +/-   ##
=========================================================
  Coverage                          ?   66.80%           
=========================================================
  Files                             ?     2749           
  Lines                             ?   220169           
  Branches                          ?    10902           
=========================================================
  Hits                              ?   147081           
  Misses                            ?    59794           
  Partials                          ?    13294           

Flag	Coverage Δ
backend	68.60% <56.56%> (?)
frontend	55.81% <51.02%> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[qodo-free-for-open-source-projects]

CI Feedback 🧐

A test triggered by this PR failed. Here is an AI-generated analysis of the failure:

Action: test-go (vuln, mysql:8.0.44) / test

Failed stage: Run Go Tests [❌]

Failed test name: TestTranslateCPEToCVE/find_vulns_on_cpes

Failure summary: The action failed during Go tests (make test-go) because a vulnerability/NVD translation unit test failed: - Failing test: TestTranslateCPEToCVE/find_vulns_on_cpes - Location: server/vulnerabilities/nvd/cve_test.go:926 - Cause: the computed CVE list for the CPE cpe:2.3:a:python:python:3.14.0:alpha1::::macos::* did not include the expected entry nvd.cve{ID:"CVE-2024-12254", resolvedInVersion:"3.14.0a3"} (assertion does not contain). This test failure caused make[1]: *** [Makefile:280: .run-go-tests] Error 1 and then make: *** [Makefile:395: test-go] Error 2, ending the job with exit code 2.

Relevant error logs: 1: ##[group]Runner Image Provisioner 2: Hosted Compute Agent ... 1833: �[36;1mattempt=1�[0m 1834: �[36;1m�[0m 1835: �[36;1mwhile [ $attempt -le $max_attempts ]; do�[0m 1836: �[36;1m echo "Attempt $attempt of $max_attempts"�[0m 1837: �[36;1m�[0m 1838: �[36;1m # Try to connect to MySQL�[0m 1839: �[36;1m if wait_for_mysql "mysql_test"; then�[0m 1840: �[36;1m # If MySQL is ready, try to connect to MySQL replica�[0m 1841: �[36;1m if wait_for_mysql "mysql_replica_test"; then�[0m 1842: �[36;1m # Both are ready, we're done�[0m 1843: �[36;1m echo "All MySQL connections successful"�[0m 1844: �[36;1m exit 0�[0m 1845: �[36;1m fi�[0m 1846: �[36;1m fi�[0m 1847: �[36;1m�[0m 1848: �[36;1m # If we get here, at least one connection failed�[0m 1849: �[36;1m echo "Failed to connect to MySQL on attempt $attempt"�[0m 1850: �[36;1m�[0m 1851: �[36;1m if [ $attempt -lt $max_attempts ]; then�[0m 1852: �[36;1m echo "Restarting containers and trying again..."�[0m 1853: �[36;1m restart_containers�[0m 1854: �[36;1m else�[0m 1855: �[36;1m echo "Maximum attempts reached. Failing the job."�[0m 1856: �[36;1m exit 1�[0m ... 1987: �[32m✓�[0m Is server core (0.00s) 1988: �[32m✓�[0m Matches (0.00s) 1989: �[32m✓�[0m Matches from differect arch (0.00s) 1990: �[32m✓�[0m Matches from differect products (0.00s) 1991: �[32m✓�[0m Matches operating system (0.00s) 1992: �[32m✓�[0m Matches same product but for different architecture (0.00s) 1993: �[32m✓�[0m Matches same product one with no architecture (0.00s) 1994: �[32m✓�[0m Matches same product same arch (0.00s) 1995: �[32m✓�[0m New product from OS (0.00s) 1996: �[32m✓�[0m Product has display version (0.00s) 1997: �[32m✓�[0m Security bulletin (0.00s) 1998: �[32m✓�[0m Security bulletin # merge (0.00s) 1999: �[32m✓�[0m Security bulletin # merge . products (0.00s) 2000: �[32m✓�[0m Security bulletin # merge . vendor fixes (0.00s) 2001: �[32m✓�[0m Security bulletin # merge . vulnerabilities (0.00s) 2002: �[32m✓�[0m Security bulletin # merge fails if product names don't match (0.00s) 2003: �[32m✓�[0m Security bulletin # merge with empty bulletins (0.00s) 2004: �[32m✓�[0m Security bulletin # unmarshal JSON (0.00s) 2005: �[32m✓�[0m Security bulletin # unmarshal JSON accepts new vulnerabilities key (0.00s) 2006: �[32m✓�[0m Security bulletin # unmarshal JSON accepts old misspelled vulnerabities key (0.00s) 2007: �[32m✓�[0m Security bulletin # unmarshal JSON marshal uses correct spelling (0.00s) 2008: github.com/fleetdm/fleet/v4/server/vulnerabilities/goval_dictionary: 2009: �[32m✓�[0m Database (0.00s) 2010: �[32m✓�[0m Database close releases file handle (0.04s) 2011: �[32m✓�[0m Database fixed version (0.00s) 2012: �[32m✓�[0m Database multiple packages, fixed version (0.00s) 2013: �[32m✓�[0m Database multiple packages, multiple vulnerabilities (0.00s) 2014: �[32m✓�[0m Database newer than fixed version (0.00s) 2015: �[32m✓�[0m Database non-matching architecture (0.00s) 2016: �[32m✓�[0m Database non-matching package name (0.00s) 2017: �[32m✓�[0m Database older than fixed version (0.00s) 2018: �[32m✓�[0m Database verify returns no errors (0.00s) 2019: �[32m✓�[0m Sync (0.00s) 2020: �[32m✓�[0m Sync #what to download (0.00s) 2021: �[32m✓�[0m Verify (0.00s) 2022: �[32m✓�[0m Verify verify alerts of error (0.00s) 2023: github.com/fleetdm/fleet/v4/server/vulnerabilities/msrc: ... 2053: �[32m✓�[0m Parser (0.20s) 2054: �[32m✓�[0m Parser map to security bulletins (0.00s) 2055: �[32m✓�[0m Parser map to security bulletins each bulletin should have the right products (0.00s) 2056: �[32m✓�[0m Parser map to security bulletins each bulletin should have the right vulnerabilities (0.00s) 2057: �[32m✓�[0m Parser map to security bulletins should have one bulletin per product (0.00s) 2058: �[32m✓�[0m Parser map to security bulletins should map the vendor fixes entries correctly (0.00s) 2059: �[32m✓�[0m Parser map to security bulletins should map the vulnerability entries correctly (0.00s) 2060: �[32m✓�[0m Parser parse XML (0.08s) 2061: �[32m✓�[0m Parser parse XML only CVEs for windows products are included (0.00s) 2062: �[32m✓�[0m Parser parse XML only windows products are included (0.00s) 2063: �[32m✓�[0m Parser parse XML scores are parsed correctly (0.00s) 2064: �[32m✓�[0m Parser parse XML should include windows server 2025 from 202 6- feb feed (0.08s) 2065: �[32m✓�[0m Parser parse XML the remediations are parsed correctly (0.00s) 2066: �[32m✓�[0m Parser parse XML the revision history is parsed correctly (0.00s) 2067: �[32m✓�[0m Parser parse feed (0.00s) 2068: �[32m✓�[0m Parser parse feed errors out if file does not exists (0.00s) 2069: �[32m✓�[0m Sync (0.00s) ... 2206: �[32m✓�[0m Extract ubuntu version future version 2 5.04 (0.00s) 2207: �[32m✓�[0m Extract ubuntu version interim release 2 3.10 (0.00s) 2208: �[32m✓�[0m Extract ubuntu version interim release 2 4.10 with patch (0.00s) 2209: �[32m✓�[0m Extract ubuntu version invalid version - single digit (0.00s) 2210: �[32m✓�[0m Extract ubuntu version ubuntu 1 6.04 with extra spaces (0.00s) 2211: �[32m✓�[0m Extract ubuntu version ubuntu 1 8.04 (0.00s) 2212: �[32m✓�[0m Extract ubuntu version ubuntu 2 0.04 LTS (0.00s) 2213: �[32m✓�[0m Extract ubuntu version ubuntu 2 2.04 LTS (0.00s) 2214: �[32m✓�[0m Extract ubuntu version ubuntu 2 4.04 no LTS suffix (0.00s) 2215: �[32m✓�[0m Extract ubuntu version version with codename suffix (0.00s) 2216: �[32m✓�[0m Extract ubuntu version very old version 1 4.04 (0.00s) 2217: �[32m✓�[0m Find latest OSV artifact for version (0.00s) 2218: �[32m✓�[0m Find latest OSV artifact for version finds latest 1 8.04 artifact (0.00s) 2219: �[32m✓�[0m Find latest OSV artifact for version finds latest 2 0.04 artifact (0.00s) 2220: �[32m✓�[0m Find latest OSV artifact for version finds latest 2 2.04 artifact (0.00s) 2221: �[32m✓�[0m Find latest OSV artifact for version returns error for non-existent version (0.00s) 2222: �[32m✓�[0m Get needed RHEL versions (0.00s) ... 2292: �[32m✓�[0m Normalize kernel version generic 6 4k kernel (0.00s) 2293: �[32m✓�[0m Normalize kernel version generic kernel (0.00s) 2294: �[32m✓�[0m Normalize kernel version kernel with only one part (0.00s) 2295: �[32m✓�[0m Normalize kernel version lowlatency kernel (0.00s) 2296: �[32m✓�[0m OSV filename (0.00s) 2297: �[32m✓�[0m OSV filename 1804 (0.00s) 2298: �[32m✓�[0m OSV filename 2004 (0.00s) 2299: �[32m✓�[0m OSV filename 2204 (0.00s) 2300: �[32m✓�[0m RHELOSV filename (0.00s) 2301: �[32m✓�[0m RHELOSV filename 10 (0.00s) 2302: �[32m✓�[0m RHELOSV filename 8 (0.00s) 2303: �[32m✓�[0m RHELOSV filename 9 (0.00s) 2304: �[32m✓�[0m Release date from assets (0.00s) 2305: �[32m✓�[0m Remove old OSV artifacts (0.00s) 2306: �[32m✓�[0m Remove old OSV artifacts date boundary race (0.00s) 2307: �[32m✓�[0m Remove old OSV artifacts preserves failed versions (0.00s) 2308: �[32m✓�[0m Remove old OSV artifacts with skipped versions (0.00s) 2309: �[32m✓�[0m Remove old RHELOSV artifacts (0.00s) 2310: �[32m✓�[0m Sync OSV checksum match (0.00s) 2311: �[32m✓�[0m Sync OSV fault tolerance (0.00s) 2312: �[32m✓�[0m Sync OSV partial failure not returned as error (0.00s) 2313: �[32m✓�[0m Version from asset name (0.00s) ... 2346: �[32m✓�[0m CVE use existing sync cve-2. 0 .xml.gz (0.01s) 2347: �[32m✓�[0m CVE use existing sync cve-2. 0 .xml.zip (0.01s) 2348: �[33m∅�[0m End to end (0.00s) 2349: �[32m✓�[0m Response not OK (0.00s) 2350: github.com/fleetdm/fleet/v4/server/vulnerabilities/oval/input: 2351: github.com/fleetdm/fleet/v4/server/vulnerabilities/oval/parsed: 2352: �[32m✓�[0m Dpkg info test eval no host list (0.00s) 2353: �[32m✓�[0m Dpkg info test eval no host list # eval (0.00s) 2354: �[32m✓�[0m Dpkg info test eval no host list # eval test matches n objects (0.00s) 2355: �[32m✓�[0m Dpkg info test eval no host list # eval test matches n states (0.00s) 2356: �[32m✓�[0m Dpkg info test eval no host list # eval with no packages (0.00s) 2357: �[32m✓�[0m Eval (0.00s) 2358: �[32m✓�[0m Eval alt pattern match (0.00s) 2359: �[32m✓�[0m Eval equal (0.00s) 2360: �[32m✓�[0m Eval greater than (0.00s) 2361: �[32m✓�[0m Eval higher version fails pattern match (0.00s) 2362: �[32m✓�[0m Eval kernel (0.00s) 2363: �[32m✓�[0m Eval less than (0.00s) 2364: �[32m✓�[0m Eval lower version fails pattern match (0.00s) 2365: �[32m✓�[0m Eval suffix doesn't match (0.00s) ... 2377: �[32m✓�[0m Object info state # eval OS version name (0.00s) 2378: �[32m✓�[0m Object info state # eval OS version version (0.00s) 2379: �[32m✓�[0m Object info state # eval software (0.00s) 2380: �[32m✓�[0m Object info state # eval software arch (0.00s) 2381: �[32m✓�[0m Object info state # eval software evr (0.00s) 2382: �[32m✓�[0m Object info state # eval software name (0.00s) 2383: �[32m✓�[0m Object info state # eval software release (0.00s) 2384: �[32m✓�[0m Object info state # eval software signature key id (0.00s) 2385: �[32m✓�[0m Object info state # eval software version (0.00s) 2386: �[32m✓�[0m Object match type (0.00s) 2387: �[32m✓�[0m Object match type # eval (0.00s) 2388: �[32m✓�[0m Object match type new object match type (0.00s) 2389: �[32m✓�[0m Object state evr string (0.00s) 2390: �[32m✓�[0m Object state evr string # eval (0.00s) 2391: �[32m✓�[0m Object state evr string # eval evaluates an evr string (0.00s) 2392: �[32m✓�[0m Object state evr string # eval it errors out if operation can not be computed (0.00s) 2393: �[32m✓�[0m Object state simple value (0.00s) 2394: �[32m✓�[0m Object state simple value # eval (0.00s) 2395: �[32m✓�[0m Object state simple value # eval compares simple data types (0.00s) 2396: �[32m✓�[0m Object state simple value # eval compares simple data types booleans (0.00s) 2397: �[32m✓�[0m Object state simple value # eval compares simple data types floats (0.00s) 2398: �[32m✓�[0m Object state simple value # eval compares simple data types ints (0.00s) 2399: �[32m✓�[0m Object state simple value # eval compares simple data types strings (0.00s) 2400: �[32m✓�[0m Object state simple value # eval it errors out if complex type used (0.00s) 2401: �[32m✓�[0m Object state simple value #unpack (0.00s) 2402: �[32m✓�[0m Object state simple value new object state simple value (0.00s) 2403: �[32m✓�[0m Object state string (0.00s) 2404: �[32m✓�[0m Object state string # eval (0.00s) 2405: �[32m✓�[0m Object state string # eval it errors out if operation can not be computed (0.00s) 2406: �[32m✓�[0m Object state string # eval it errors out if regexp can not be parsed (0.00s) 2407: �[32m✓�[0m Object state string # eval it evaluates string values (0.00s) ... 2437: �[32m✓�[0m Vulns delta (0.00s) 2438: �[32m✓�[0m Vulns delta existing differ from found (0.00s) 2439: �[32m✓�[0m Vulns delta existing match found (0.00s) 2440: �[32m✓�[0m Vulns delta no existing vulnerabilities (0.00s) 2441: �[32m✓�[0m Vulns delta nothing found but vulns exist (0.00s) 2442: github.com/fleetdm/fleet/v4/server/vulnerabilities/nvd/tools/providers/lib/rate: 2443: github.com/fleetdm/fleet/v4/server/vulnerabilities/nvd/tools/providers/lib/client: 2444: github.com/fleetdm/fleet/v4/server/vulnerabilities/macoffice: 2445: �[32m✓�[0m Analyzer (0.00s) 2446: �[32m✓�[0m Analyzer analyze (0.00s) 2447: �[32m✓�[0m Analyzer analyze when no release notes on path (0.00s) 2448: �[32m✓�[0m Analyzer analyze when using wrong path (0.00s) 2449: �[32m✓�[0m Analyzer collect vulnerabilities (0.00s) 2450: �[32m✓�[0m Analyzer collect vulnerabilities no release notes (0.00s) 2451: �[32m✓�[0m Analyzer get stored vulnerabilities (0.00s) 2452: �[32m✓�[0m Analyzer get stored vulnerabilities on error (0.00s) 2453: �[32m✓�[0m Analyzer latest release notes (0.00s) 2454: �[32m✓�[0m Analyzer latest release notes returns release notes in order (0.00s) 2455: �[32m✓�[0m Analyzer latest release notes when the JSON file is invalid (0.00s) 2456: �[32m✓�[0m Analyzer latest release notes when vuln path does not exists (0.00s) 2457: �[32m✓�[0m Analyzer latest release notes when vuln path exists (0.00s) 2458: �[32m✓�[0m Analyzer update vulns in DB (0.00s) 2459: �[32m✓�[0m Analyzer update vulns in DB on error when deleting vulns (0.00s) 2460: �[32m✓�[0m Analyzer update vulns in DB on error when inserting vulns (0.00s) 2461: �[32m✓�[0m Build number (0.00s) ... 2467: �[32m✓�[0m Integrations parse release HTML (0.14s) 2468: �[32m✓�[0m Integrations parse release HTML should parse dates (0.00s) 2469: �[32m✓�[0m Integrations parse release HTML should parse release versions (0.00s) 2470: �[32m✓�[0m Integrations parse release HTML should parse security updates (0.00s) 2471: �[32m✓�[0m Integrations sync (0.63s) 2472: �[32m✓�[0m Release note (0.00s) 2473: �[32m✓�[0m Release note # cmp version (0.00s) 2474: �[32m✓�[0m Release note # cmp version when release version is newer than (0.00s) 2475: �[32m✓�[0m Release note # cmp version when release version is older than (0.00s) 2476: �[32m✓�[0m Release note # cmp version when the same (0.00s) 2477: �[32m✓�[0m Release note # collect vulnerabilities (0.00s) 2478: �[32m✓�[0m Release note # office product from bundle id (0.00s) 2479: �[32m✓�[0m Short version format (0.00s) 2480: �[32m✓�[0m Sync (0.00s) 2481: �[32m✓�[0m Sync #sync (0.00s) 2482: �[32m✓�[0m Sync #sync on FS error (0.00s) 2483: �[32m✓�[0m Sync #sync on GH error (0.00s) 2484: �[32m✓�[0m Sync #sync on error when deleting (0.00s) 2485: �[32m✓�[0m Sync #sync on error when downloading GH asset (0.00s) 2486: �[32m✓�[0m Sync #sync removes multiple out of date copies (0.00s) ... 2488: �[32m✓�[0m Sync #sync when local copy is out of date (0.00s) 2489: �[32m✓�[0m Sync #sync when nothing published on GH (0.00s) 2490: �[32m✓�[0m Sync #sync when there are no local files (0.00s) 2491: �[32m✓�[0m Sync #sync when there are no remote rel notes (0.00s) 2492: github.com/fleetdm/fleet/v4/server/vulnerabilities/oval: 2493: �[32m✓�[0m Oval analyzer (0.00s) 2494: �[32m✓�[0m Oval analyzer #load (0.00s) 2495: �[32m✓�[0m Oval analyzer #load invalid vuln path (0.00s) 2496: �[32m✓�[0m Oval analyzer analyzing RHEL software (12.34s) 2497: �[32m✓�[0m Oval analyzer analyzing ubuntu software (7.80s) 2498: �[32m✓�[0m Oval download definitions matching host info (0.00s) 2499: �[32m✓�[0m Oval download definitions platform not found (0.00s) 2500: �[32m✓�[0m Oval mapper (0.00s) 2501: �[32m✓�[0m Oval mapper #extract id (0.00s) 2502: �[32m✓�[0m Oval mapper #map criteria (0.00s) 2503: �[32m✓�[0m Oval mapper #map criteria errors out if id can not be parsed on any criterion (0.00s) 2504: �[32m✓�[0m Oval mapper #map criteria errors out if no criteriums or nested criterias (0.00s) 2505: �[32m✓�[0m Oval mapper #map criteria maps criteriums (0.00s) 2506: �[32m✓�[0m Oval mapper #map criteria maps nested criterias (0.00s) 2507: �[32m✓�[0m Oval mapper #map definition (0.00s) 2508: �[32m✓�[0m Oval mapper #map definition errors out if no vulnerabilities (0.00s) 2509: �[32m✓�[0m Oval mapper #map dpkg info state (0.00s) 2510: �[32m✓�[0m Oval mapper #map dpkg info state errors out if one of non-supported state information is provided (0.00s) 2511: �[32m✓�[0m Oval mapper #map dpkg info test (0.00s) 2512: �[32m✓�[0m Oval mapper #map dpkg info test errors out if id can not be parsed (0.00s) 2513: �[32m✓�[0m Oval mapper #map dpkg info test maps a dpkg info test XML (0.00s) 2514: �[32m✓�[0m Oval mapper #map package info test object (0.00s) 2515: �[32m✓�[0m Oval mapper #map package info test object name defined in var ref (0.00s) 2516: �[32m✓�[0m Oval mapper #map package info test object name defined inline (0.00s) 2517: �[32m✓�[0m Oval mapper #map package info test object name not defined inline nor using a variable ref (0.00s) 2518: �[32m✓�[0m Oval mapper #map rpm info state (0.00s) 2519: �[32m✓�[0m Oval mapper #map rpm info state errors out if not supported state is provided (0.00s) 2520: �[32m✓�[0m Oval mapper #map rpm info state maps a rpm info state XML (0.00s) 2521: �[32m✓�[0m Oval mapper #map rpm info state maps the operator, if any (0.00s) 2522: �[32m✓�[0m Oval mapper #map rpm info test (0.00s) 2523: �[32m✓�[0m Oval mapper #map rpm info test errors out if id can not be parsed (0.00s) 2524: �[32m✓�[0m Oval mapper #map rpm info test maps a rpm info test XML (0.00s) 2525: �[32m✓�[0m Oval mapper #map rpm verify file object (0.00s) 2526: �[32m✓�[0m Oval mapper #map rpm verify file object errors out if invalid children provided (0.00s) 2527: �[32m✓�[0m Oval mapper #map rpm verify file object maps to a filepath (0.00s) 2528: �[32m✓�[0m Oval mapper #map rpm verify file state (0.00s) 2529: �[32m✓�[0m Oval mapper #map rpm verify file state errors out if not supported state is provided (0.00s) 2530: �[32m✓�[0m Oval mapper #map rpm verify file state maps a rpm verify file state XML (0.00s) ... 2609: �[32m✓�[0m Integration check version unknown version returns no vulnerabilities (0.00s) 2610: �[32m✓�[0m Integration check version version not in bulletin returns empty (0.00s) 2611: �[32m✓�[0m Parse office version (0.00s) 2612: �[32m✓�[0m Parse office version invalid version - no prefix (0.00s) 2613: �[32m✓�[0m Parse office version invalid version - too few parts (0.00s) 2614: �[32m✓�[0m Parse office version invalid version - wrong prefix (0.00s) 2615: �[32m✓�[0m Parse office version valid version (0.00s) 2616: �[32m✓�[0m Parse security markdown (0.00s) 2617: �[32m✓�[0m Parse security markdown keeps minimum build suffix for same version (0.00s) 2618: �[32m✓�[0m Parse security markdown parses LTSC versions (0.00s) 2619: �[32m✓�[0m Parse security markdown parses multiple releases (0.00s) 2620: �[32m✓�[0m Parse security markdown parses single release with multiple versions (0.00s) 2621: �[32m✓�[0m Parse security markdown skips releases without CVEs (0.00s) 2622: �[32m✓�[0m Parse security markdown skips retail versions (0.00s) 2623: �[32m✓�[0m Sync bulletin (0.00s) 2624: �[32m✓�[0m Sync bulletin on FS error (0.00s) 2625: �[32m✓�[0m Sync bulletin on GH error (0.00s) 2626: �[32m✓�[0m Sync bulletin on error when deleting (0.00s) 2627: �[32m✓�[0m Sync bulletin on error when downloading GH asset (0.00s) 2628: �[32m✓�[0m Sync bulletin removes multiple out of date copies (0.00s) ... 2755: �[32m✓�[0m FS client (0.01s) 2756: �[32m✓�[0m FS client #MSRC bulletins (0.00s) 2757: �[32m✓�[0m FS client #MSRC bulletins directory does not exists (0.00s) 2758: �[32m✓�[0m FS client #MSRC bulletins returns a list of file matching the MSRC file prefix (0.00s) 2759: �[32m✓�[0m FS client delete (0.00s) 2760: �[32m✓�[0m FS client delete file does not exists (0.00s) 2761: �[32m✓�[0m FS client mac office release notes (0.00s) 2762: �[32m✓�[0m FS client mac office release notes directory does not exists (0.00s) 2763: �[32m✓�[0m FS client mac office release notes returns a list of file matching the mac office file prefix (0.00s) 2764: �[32m✓�[0m FS client mac office release notes when files contain the wrong date format (0.00s) 2765: �[32m✓�[0m Integrations github client (267.84s) 2766: �[32m✓�[0m Integrations github client # download (267.84s) 2767: �[32m✓�[0m Integrations github client # download with invalid URL (267.82s) 2768: �[32m✓�[0m Integrations github client #MSRC bulletins (0.00s) 2769: �[32m✓�[0m Integrations github client mac office release notes (0.00s) 2770: �[32m✓�[0m Integrations github client mac office release notes on error (0.00s) 2771: �[32m✓�[0m Integrations github client mac office release notes with HTTP error code (0.00s) 2772: �[32m✓�[0m Integrations github client mac office release notes with a single release note asset (0.00s) ... 2779: �[32m✓�[0m Security bulletin name # before when b is empty (0.00s) 2780: �[32m✓�[0m Security bulletin name # product name (0.00s) 2781: �[32m✓�[0m Security bulletin name #date (0.00s) 2782: �[32m✓�[0m Security bulletin name MSRC file name (0.00s) 2783: �[32m✓�[0m Security bulletin name date not included in filename (0.00s) 2784: �[32m✓�[0m Security bulletin name mac office rel notes file name (0.00s) 2785: �[32m✓�[0m Security bulletin name product name not included in filename (0.00s) 2786: �[32m✓�[0m Security bulletin name string (0.00s) 2787: �[32m✓�[0m Security bulletin name validates timestamp on filename at construction time (0.00s) 2788: �[32m✓�[0m Security bulletin name win office file name (0.00s) 2789: === �[33mSkipped�[0m 2790: === �[33mSKIP�[0m: server/vulnerabilities/nvd/tools/providers/nvd TestEndToEnd (0.00s) 2791: e2e_test.go:45: e2e tests not enabled 2792: === �[33mSKIP�[0m: server/vulnerabilities/vulntest TestGenerateVulnFixtures (0.00s) 2793: gen_fixture_test.go:123: set GENERATE_FIXTURES=1 to run this test 2794: === �[31mFailed�[0m 2795: === �[31mFAIL�[0m: server/vulnerabilities/nvd TestTranslateCPEToCVE/find_vulns_on_cpes (31.48s) 2796: cve_test.go:926: 2797: Error Trace: /home/runner/work/fleet/fleet/server/vulnerabilities/nvd/cve_test.go:926 2798: Error: []nvd.cve{nvd.cve{ID:"CVE-2025-12084", resolvedInVersion:"3.14.2"}, nvd.cve{ID:"CVE-2026-4519", resolvedInVersion:"3.14.4"}, nvd.cve{ID:"CVE-2025-13837", resolvedInVersion:"3.14.1"}, nvd.cve{ID:"CVE-2025-6075", resolvedInVersion:"3.14.1"}, nvd.cve{ID:"CVE-2025-12781", resolvedInVersion:"3.14.1"}, nvd.cve{ID:"CVE-2024-9287", resolvedInVersion:""}, nvd.cve{ID:"CVE-2025-6069", resolvedInVersion:"3.14.0b3"}} does not contain nvd.cve{ID:"CVE-2024-12254", resolvedInVersion:"3.14.0a3"} 2799: Test: TestTranslateCPEToCVE/find_vulns_on_cpes 2800: Messages: cpe:2.3:a:python:python:3.14.0:alpha1:*:*:*:macos:*:* does not contain CVE nvd.cve{ID:"CVE-2024-12254", resolvedInVersion:"3.14.0a3"} 2801: --- FAIL: TestTranslateCPEToCVE/find_vulns_on_cpes (31.48s) 2802: === �[31mFAIL�[0m: server/vulnerabilities/nvd TestTranslateCPEToCVE (8.30s) 2803: DONE 824 tests, 2 skipped, 2 failures in 269.200s 2804: make[1]: *** [Makefile:280: .run-go-tests] Error 1 2805: make[1]: Leaving directory '/home/runner/work/fleet/fleet' 2806: make: *** [Makefile:395: test-go] Error 2 2807: ##[error]Process completed with exit code 2. 2808: ##[group]Run actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a 2809: with: 2810: name: vuln-mysql8.0.44-coverage 2811: path: ./coverage.txt 2812: if-no-files-found: error 2813: compression-level: 6 ... 2825: With the provided path, there will be 1 file uploaded 2826: Artifact name is valid! 2827: Root directory input is valid! 2828: Beginning upload of artifact content to blob storage 2829: Uploaded bytes 1954743 2830: Finished uploading artifact content to blob storage! 2831: SHA256 hash of uploaded artifact zip is f12cadaf52b1016c97f6039aadec57eb8b92f290377dcc6501fe8460a5b719f7 2832: Finalizing artifact upload 2833: Artifact vuln-mysql8.0.44-coverage.zip successfully finalized. Artifact ID 7275123768 2834: Artifact vuln-mysql8.0.44-coverage has been successfully uploaded! Final size is 1954743 bytes. Artifact ID is 7275123768 2835: Artifact download URL: https://github.com/fleetdm/fleet/actions/runs/26596121318/artifacts/7275123768 2836: ##[group]Run c1grep() { grep "$@" || test $? = 1; } 2837: �[36;1mc1grep() { grep "$@" || test $? = 1; }�[0m 2838: �[36;1mc1grep -oP 'FAIL: .*$' /tmp/gotest.log > /tmp/summary.txt�[0m 2839: �[36;1mc1grep 'test timed out after' /tmp/gotest.log >> /tmp/summary.txt�[0m 2840: �[36;1mc1grep 'fatal error:' /tmp/gotest.log >> /tmp/summary.txt�[0m 2841: �[36;1mc1grep -A 10 'panic: runtime error: ' /tmp/gotest.log >> /tmp/summary.txt�[0m 2842: �[36;1mc1grep ' FAIL\t' /tmp/gotest.log >> /tmp/summary.txt�[0m 2843: �[36;1mGO_FAIL_SUMMARY=$(head -n 5 /tmp/summary.txt | sed ':a;N;$!ba;s/\n/\\n/g')�[0m 2844: �[36;1mecho "GO_FAIL_SUMMARY=$GO_FAIL_SUMMARY"�[0m 2845: �[36;1mif [[ -z "$GO_FAIL_SUMMARY" ]]; then�[0m 2846: �[36;1m GO_FAIL_SUMMARY="unknown, please check the build URL"�[0m 2847: �[36;1mfi�[0m 2848: �[36;1mGO_FAIL_SUMMARY=$GO_FAIL_SUMMARY envsubst < .github/workflows/config/slack_payload_template.json > ./payload.json�[0m 2849: shell: /usr/bin/bash --noprofile --norc -e -o pipefail {0} 2850: env: 2851: RACE_ENABLED: false 2852: GO_TEST_TIMEOUT: 20m 2853: DOCKER_COMMAND: docker compose -f docker-compose.yml -f docker-compose-redis-cluster.yml up -d mysql_test mysql_replica_test redis redis-cluster-1 redis-cluster-2 redis-cluster-3 redis-cluster-4 redis-cluster-5 redis-cluster-6 redis-cluster-setup s3 saml_idp mailhog mailpit smtp4dev_test 2854: RUN_TESTS_ARG: 2855: CI_TEST_PKG: vuln 2856: NEED_DOCKER: 1 2857: ARTIFACT_PREFIX: vuln-mysql8.0.44 2858: GOTOOLCHAIN: local 2859: ##[endgroup] 2860: GO_FAIL_SUMMARY=FAIL: TestTranslateCPEToCVE/find_vulns_on_cpes (31.48s) 2861: ##[group]Run actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a 2862: with: 2863: name: vuln-mysql8.0.44-test-log 2864: path: /tmp/gotest.log 2865: if-no-files-found: error 2866: compression-level: 6