nordisk/ci-status

CI status: ci

Written by the dwarves forge (dwarves serve, its [ci] table) at 2026-11-01 22:52 UTC. Each pipeline runs on a new head of its branch (polled, last poll 2026-11-01 22:49:55.802378907) or on its cron, one run at a time.

Why red

• gunnar-ci 5672ebad: run explorer-run_pipeline-1793564876511 failed: 0/1 steps passed — cargo xtask ci --quick exited 1: test every_default_build_links_only_the_approved_outbound_clients ... FAILED | thread 'every_default_build_links_only_the_approved_outbound_clients' (7566) panicked at crates/gunnar-recipe/tests/airgap_default_builds.rs:196:5: | a default build is not an airgap build: | error: cannot update the lo
• holger-ci cd14cdee: run explorer-run_pipeline-1793566889754 failed: 0/1 steps passed — cargo xtask ci --quick exited 101: error: cannot update the lock file /home/rickard/tgt/ci/src/holger/estate/Cargo.lock because --locked was passed to prevent this
• dwarves-ci 6ddce5b8: run explorer-run_pipeline-1793569991086 failed: 0/1 steps passed — cargo xtask ci --quick exited 101: error: linking with clang failed: exit status: 1 | error: could not compile getrandom (build script) due to 1 previous error | error: linking with clang failed: exit status: 1 | error: could not compile libc (build script) due to 1 previous error
• dwarves-holger 472a1eb7: run explorer-run_pipeline-1793535620610 failed: 0/1 steps passed — cargo xtask ci --quick --only build:holger exited 101: error: linking with clang failed: exit status: 1 | error: could not compile getrandom (build script) due to 1 previous error | error: linking with clang failed: exit status: 1 | error: could not compile libc (build script) due to 1 previous error
• gunnar-ui-ci 10f359b6: lockcheck: STALE /home/rickard/tgt/ci/src/gunnar-ui/Cargo.lock: the lock differs from the committed one (a cargo run in this checkout rewrote it, so the committed lock is stale) | fix: cd /home/rickard/tgt/ci/src/gunnar-ui && cargo metadata --format-version 1 >/dev/null && git add Cargo.lock (commit the lock cargo resolves) | STALE /home/rickard/tgt/ci/src/gunnar-ui/Cargo.lock: the lock differs fr
• holger-ui-ci 2c7765fb: lockcheck: STALE /home/rickard/tgt/ci/src/holger-ui/browser-tests/Cargo.lock: error: cannot update the lock file /home/rickard/tgt/ci/src/holger-ui/browser-tests/Cargo.lock because --locked was passed to prevent this | fix: cargo xtask ci lockfollow (runs: cd /home/rickard/tgt/ci/src/holger-ui/browser-tests && cargo update -p estate-front@0.3.3 -p monetize-embed@0.3.0 -p monetize-estate-side@0.3.0
• edda-ci 1c537a38: test: a_classical_only_sshd_is_still_reached_on_curve25519, the_client_negotiates_mlkem768x25519_sha256_with_stock_sshd | thread 'a_classical_only_sshd_is_still_reached_on_curve25519' (75751) panicked at crates/nornir-git/tests/openssh_kex.rs:43:5:
• monetize-full 95a34a0c: the failing step: lockcheck
• coverage-gunnar c6c50dd6: run explorer-run_pipeline-1793511319093 failed: 0/1 steps passed — cargo ci-verbs coverage exited 1: test every_default_build_links_only_the_approved_outbound_clients ... FAILED | thread 'every_default_build_links_only_the_approved_outbound_clients' (72317) panicked at crates/gunnar-recipe/tests/airgap_default_builds.rs:196:5: | a default build is not an airgap build: | error: cannot update the
• fuzz-monetize 95a34a0c: run explorer-run_pipeline-1793510378374 failed: 0/1 steps passed — cargo ci-verbs fuzz --seconds 300 exited 1: error: cannot update the lock file /home/rickard/tgt/ci/src/monetize/fuzz/Cargo.lock because --locked was passed to prevent this
• coverage-monetize 95a34a0c: run explorer-run_pipeline-1793513290207 failed: 1/2 steps passed — cargo ci-verbs coverage exited 1: test the_lake_is_bought_laid_updated_and_terminated_on_both_open_axes ... FAILED | thread 'the_lake_is_bought_laid_updated_and_terminated_on_both_open_axes' (19296) panicked at crates/lake-product/tests/the_lake_lives_its_whole_life.rs:16:5: | Running unittests src/lib.rs (/backup/ci-target/monet

scorecard-gunnar

OpenSSF Scorecard v5.6.0, local mode, on gunnar at c6c50dd6: 9.2 / 10 (the aggregate of the checks local mode runs).

Not run in local mode (they need a GitHub or GitLab API): Branch-Protection, CI-Tests, CII-Best-Practices, Code-Review, Contributors, Maintained, SBOM, Signed-Releases, Webhooks.

scorecard-holger

OpenSSF Scorecard v5.6.0, local mode, on holger at 50cbe685: 7.8 / 10 (the aggregate of the checks local mode runs).

Not run in local mode (they need a GitHub or GitLab API): Branch-Protection, CI-Tests, CII-Best-Practices, Code-Review, Contributors, Maintained, SBOM, Signed-Releases, Webhooks.

scorecard-heimdall

OpenSSF Scorecard v5.6.0, local mode, on heimdall at b8ff56c8: 4.9 / 10 (the aggregate of the checks local mode runs).

Not run in local mode (they need a GitHub or GitLab API): Branch-Protection, CI-Tests, CII-Best-Practices, Code-Review, Contributors, Maintained, SBOM, Signed-Releases, Webhooks.

fuzz-gunnar

Fuzzing (libFuzzer through cargo-fuzz's layout, stable cargo) on gunnar at c6c50dd6: 8 of 8 targets clean.

fuzz-holger

Fuzzing (libFuzzer through cargo-fuzz's layout, stable cargo) on holger at 50cbe685: 6 of 6 targets clean.

coverage-gunnar

Test coverage on gunnar at c6c50dd6: not measured: cargo llvm-cov exited exit status: 101: a test failed or it could not build; the step log says which

coverage-holger

Test coverage (cargo llvm-cov) on holger at 50cbe685: 81.6 % of lines, 75.0 % of functions, 82.5 % of regions.

fuzz-monetize

Fuzzing on monetize at 95a34a0c: not run: the fuzz build failed (exit status: 101); its errors are in the step log

coverage-monetize

Test coverage on monetize at 95a34a0c: not measured: cargo llvm-cov exited exit status: 101: a test failed or it could not build; the step log says which

scorecard-monetize

OpenSSF Scorecard v5.6.0, local mode, on monetize at 95a34a0c: 9.2 / 10 (the aggregate of the checks local mode runs).

Not run in local mode (they need a GitHub or GitLab API): Branch-Protection, CI-Tests, CII-Best-Practices, Code-Review, Contributors, Maintained, SBOM, Signed-Releases, Webhooks.

History

The files of a run (the forge's step log, the repository's own receipt.json and step logs) are in this repository under runs/<pipeline>/; clone it with git clone ssh://anonymous@git.gunnar.rs:2222/nordisk/ci-status.git.