From c8d0c3536be8d11709175823ef783afec626a1b9 Mon Sep 17 00:00:00 2001 From: Brad Lugo Date: Tue, 30 Jun 2026 18:24:12 -0700 Subject: [PATCH 1/2] fix(ci): use apollo-ci image for generate-db-dump --- .github/workflows/ci.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index a7e696444..18956d991 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -199,6 +199,8 @@ jobs: github.event_name != 'pull_request' || contains(github.event.pull_request.labels.*.name, 'generate-dumps-on-pr') runs-on: ubuntu-latest + container: + image: quay.io/stackrox-io/apollo-ci:scanner-test-0.4.9 needs: - generate-genesis-dump steps: From 8291ec655f2ff8a2fd87a423d081d259b504dc83 Mon Sep 17 00:00:00 2001 From: Brad Lugo Date: Tue, 30 Jun 2026 20:56:16 -0700 Subject: [PATCH 2/2] fix(ci): use CGO_ENABLED=0 for building the updater --- .github/workflows/ci.yaml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index 18956d991..3084941ad 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -53,7 +53,10 @@ jobs: - uses: ./.github/actions/handle-tagged-build - name: Build updater (amd64) - run: make build-updater + # CGO_ENABLED is set to 0 here so the other steps aren't required to have a particular version of glibc + # (or any other dynamically linked libraries). This will only affect the updater isn't included in any images, + # so this build variance should be fine. + run: CGO_ENABLED=0 make build-updater - name: Archive the build to preserve permissions run: tar -cvzf updater-build.tgz bin/updater