jcoffey-dev
a69093fff7
ci / rust-licenses (agent) (pull_request) Skipped
ci / rust-licenses (search) (pull_request) Skipped
ci / go-licenses (alerting) (pull_request) Skipped
ci / go-licenses (api) (pull_request) Skipped
ci / go-licenses (deploy/operator) (pull_request) Skipped
ci / go-licenses (enterprise) (pull_request) Skipped
ci / go-licenses (hack/benchmark-fixture) (pull_request) Skipped
ci / go-licenses (hack/windows-fixture) (pull_request) Skipped
ci / go-licenses (ingest) (pull_request) Skipped
ci / go-licenses (proto) (pull_request) Skipped
ci / go-licenses (terraform) (pull_request) Skipped
ci / npm-licenses (pull_request) Skipped
github/ci (branch) GitHub Actions
ci / github (pull_request) Successful in 6m43s
ci / rust-advisories (agent) (pull_request) Skipped
ci / rust-advisories (search) (pull_request) Skipped
ci / go-vulncheck (alerting) (pull_request) Skipped
ci / go-vulncheck (api) (pull_request) Skipped
ci / go-vulncheck (deploy/operator) (pull_request) Skipped
ci / go-vulncheck (enterprise) (pull_request) Skipped
ci / go-vulncheck (hack/benchmark-fixture) (pull_request) Skipped
ci / go-vulncheck (hack/windows-fixture) (pull_request) Skipped
ci / go-vulncheck (ingest) (pull_request) Skipped
ci / go-vulncheck (proto) (pull_request) Skipped
ci / go-vulncheck (terraform) (pull_request) Skipped
ci / npm-audit (pull_request) Skipped
ci / tenant-boundary (pull_request) Skipped
ci / web-routes (pull_request) Skipped
ci / conformance-corpus (pull_request) Skipped
govulncheck started failing on main: golang.org/x/net 0.58.0 has an HTTP/2 HPACK encoder race that can crash a server (GO-2026-6617, fixed in 0.60.0), and the Go 1.26.8 toolchain in the pinned CI image has three net/http fixes pending (GO-2026-6612, GO-2026-6613, fixed in 1.26.9). - x/net 0.60.0 in every module that uses it, with the x/sys, x/text and x/term patch releases it pulls in; proto and the two fixtures move to go 1.26, which x/net 0.60.0 requires and CI already builds with. - The golang:1.26-bookworm image is re-pinned to today's digest (1.26.9) in both the Gitea and GitHub workflows. The Dockerfiles use the floating golang:1.26-alpine tag and pick up 1.26.9 on their next build. go build and govulncheck are clean in all nine modules.
hack
Local developer tooling that isn't part of any shipped component — scripts
you run against your own machine/dev stack, not code that ends up in a
container image (except dev-certs' output, which mounts into the
ingest container).
Not one of the top-level directories in the original monorepo scaffold —
added because dev-only mTLS cert generation didn't have a natural home in
/deploy (real deployment manifests), /transport, or any other existing
component. /hack is the conventional name for this in a lot of larger Go
monorepos (Kubernetes among them).
dev-certs/— generates a throwaway CA + server/client cert pair for local mTLS between the agent and ingest. See/docs/phase-0-runbook.mdfor when to run it.windows-fixture/— sends synthetic Windows Event Log-shaped records directly toingest, bypassing the real Windows agent. Tests whether the pipeline handles Windows-shaped data; doesn't test the realEvtSubscribe/ETW integration, which needs actual Windows. See/docs/phase-1-runbook.md.demo-simulator/— the public demo's synthetic world: a fictional fleet whose agents check in, report CPU/memory/disk, and ship realistically shaped logs for eight services. Backfills a window of history, then keeps generating in real time. Distinct frombenchmark-fixture/(volume, for the Phase 2 latency benchmark) andwindows-fixture/(correctness, for the Windows ingest path).check-web-routes.sh— assertsweb/nginx.conf's hand-maintained route allowlists still matchweb/src/routes.nginx.conf404s unknown paths, so it has to name the routes that have no prerendered file to match (dynamic ones, and any route withoutprerender = true). Drift here breaks production only — dev andnpm run previewnever readnginx.conf— so this runs in CI, likecheck-tenant-boundary.sh.demo-seed/— the rest of the demo deployment: its reset script, dashboards, alert rules, and the systemd unit that runsdemo-simulator.