Allow glob literals in filenames by sgress454 · Pull Request #44547 · fleetdm/fleet

sgress454 · 2026-04-30T20:52:45Z

Related issue: Resolves #

Checklist for submitter

If some of the following don't apply, delete the relevant line.

Changes file added for user-visible changes in changes/, orbit/changes/ or ee/fleetd-chrome/changes.
See Changes files for more information.
Input data is properly validated, SELECT * is avoided, SQL injection is prevented (using placeholders for values in statements), JS inline code is prevented especially for url redirects, and untrusted data interpolated into shell scripts/commands is validated against shell metacharacters.
Timeouts are implemented and retries are limited to avoid infinite loops
If paths of existing endpoints are modified without backwards compatibility, checked the frontend/CLI for any necessary changes

Testing

Added/updated automated tests
Where appropriate, automated tests simulate multiple hosts and test for host isolation (updates to one hosts's records do not affect another)
QA'd all new/changed functionality manually

For unreleased bug fixes in a release candidate, one of:

Confirmed that the fix is not expected to adversely impact load test results
Alerted the release DRI if additional load testing is needed

Database migrations

Checked schema for all modified table for columns that will auto-update timestamps during migration.
Confirmed that updating the timestamps is acceptable, and will not cause unwanted side effects.
Ensured the correct collation is explicitly set for character columns (COLLATE utf8mb4_unicode_ci).

New Fleet configuration settings

Setting(s) is/are explicitly excluded from GitOps

If you didn't check the box above, follow this checklist for GitOps-enabled settings:

Verified that the setting is exported via fleetctl generate-gitops
Verified the setting is documented in a separate PR to the GitOps documentation
Verified that the setting is cleared on the server if it is not supplied in a YAML file (or that it is documented as being optional)
Verified that any relevant UI is disabled when GitOps mode is enabled

fleetd/orbit/Fleet Desktop

Verified compatibility with the latest released version of Fleet (see Must rule)
If the change applies to only one platform, confirmed that runtime.GOOS is used as needed to isolate changes
Verified that fleetd runs on macOS, Linux and Windows
Verified auto-update works from the released version of component to the new version (see tools/tuf/test)

coderabbitai · 2026-04-30T20:54:23Z

Important

Review skipped

Auto reviews are limited based on label configuration.

🏷️ Required labels (at least one) (1)

:ai

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

Run ID: 432785f7-8194-4320-94d5-3e595115d1b5

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch sgress454/43598-fix-gitops-glob-path-validation

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

qodo-free-for-open-source-projects · 2026-04-30T21:18:53Z

CI Feedback 🧐

A test triggered by this PR failed. Here is an AI-generated analysis of the failure:

Action: test-go (vuln, mysql:8.0.44) / test
Failed stage: Run Go Tests [❌]
Failed test name: TestTranslateCPEToCVE
Failure summary: The action failed during Go tests in package `github.com/fleetdm/fleet/v4/server/vulnerabilities/nvd`. - Test `TestTranslateCPEToCVE` failed (see `nettest.go:84`) because it tried to download an NVD CVE feed metadata file from GitHub Releases, but the URL returned `404 Not Found`: `https://github.com/fleetdm/vulnerabilities/releases/download/cve-202604302036/nvdcve-1.1-2016.meta` - The test kept retrying the download and ultimately failed the package after hitting the overall test timeout (~1200s), causing `FAIL github.com/fleetdm/fleet/v4/server/vulnerabilities/nvd`.
Relevant error logs: 1: ##[group]Runner Image Provisioner 2: Hosted Compute Agent ... 1897: �[36;1mattempt=1�[0m 1898: �[36;1m�[0m 1899: �[36;1mwhile [ $attempt -le $max_attempts ]; do�[0m 1900: �[36;1m echo "Attempt $attempt of $max_attempts"�[0m 1901: �[36;1m�[0m 1902: �[36;1m # Try to connect to MySQL�[0m 1903: �[36;1m if wait_for_mysql "mysql_test"; then�[0m 1904: �[36;1m # If MySQL is ready, try to connect to MySQL replica�[0m 1905: �[36;1m if wait_for_mysql "mysql_replica_test"; then�[0m 1906: �[36;1m # Both are ready, we're done�[0m 1907: �[36;1m echo "All MySQL connections successful"�[0m 1908: �[36;1m exit 0�[0m 1909: �[36;1m fi�[0m 1910: �[36;1m fi�[0m 1911: �[36;1m�[0m 1912: �[36;1m # If we get here, at least one connection failed�[0m 1913: �[36;1m echo "Failed to connect to MySQL on attempt $attempt"�[0m 1914: �[36;1m�[0m 1915: �[36;1m if [ $attempt -lt $max_attempts ]; then�[0m 1916: �[36;1m echo "Restarting containers and trying again..."�[0m 1917: �[36;1m restart_containers�[0m 1918: �[36;1m else�[0m 1919: �[36;1m echo "Maximum attempts reached. Failing the job."�[0m 1920: �[36;1m exit 1�[0m ... 1992: gotestsum --format=testdox --jsonfile=/tmp/test-output.json -- -tags full,fts5,netgo -run= -v -race=false -timeout=20m -parallel 8 -coverprofile=coverage.txt -covermode=atomic -coverpkg=github.com/fleetdm/fleet/v4/... ././server/vulnerabilities/... 1993: go: downloading github.com/google/go-github/v37 v37.0.0 1994: go: downloading github.com/mattn/go-sqlite3 v1.14.22 1995: go: downloading github.com/stretchr/testify v1.11.1 1996: go: downloading golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56 1997: go: downloading github.com/facebookincubator/flog v0.0.0-20190930132826-d2511d0ce33c 1998: go: downloading github.com/doug-martin/goqu/v9 v9.18.0 1999: go: downloading github.com/pandatix/nvdapi v0.6.4 2000: go: downloading github.com/google/go-cmp v0.7.0 2001: go: downloading github.com/tj/assert v0.0.3 2002: go: downloading github.com/ulikunitz/xz v0.5.15 2003: go: downloading github.com/VividCortex/mysqlerr v0.0.0-20170204212430-6c6b55f8796f 2004: go: downloading github.com/WatchBeam/clock v0.0.0-20170901150240-b08e6b4da7ea 2005: go: downloading github.com/XSAM/otelsql v0.39.0 2006: go: downloading github.com/go-sql-driver/mysql v1.9.3 2007: go: downloading github.com/hashicorp/go-multierror v1.1.1 2008: go: downloading github.com/ngrok/sqlmw v0.0.0-20211220175533-9d16fdc47b31 ... 2068: �[32m✓�[0m Match filters (0.00s) 2069: �[32m✓�[0m Match filters match all (0.00s) 2070: �[32m✓�[0m Match filters match only name (0.00s) 2071: �[32m✓�[0m Match version (0.00s) 2072: �[32m✓�[0m Validate all (0.00s) 2073: github.com/fleetdm/fleet/v4/server/vulnerabilities/goval_dictionary: 2074: �[32m✓�[0m Database (0.00s) 2075: �[32m✓�[0m Database close releases file handle (0.02s) 2076: �[32m✓�[0m Database fixed version (0.00s) 2077: �[32m✓�[0m Database multiple packages, fixed version (0.00s) 2078: �[32m✓�[0m Database multiple packages, multiple vulnerabilities (0.00s) 2079: �[32m✓�[0m Database newer than fixed version (0.00s) 2080: �[32m✓�[0m Database non-matching architecture (0.00s) 2081: �[32m✓�[0m Database non-matching package name (0.00s) 2082: �[32m✓�[0m Database older than fixed version (0.00s) 2083: �[32m✓�[0m Database verify returns no errors (0.00s) 2084: �[32m✓�[0m Sync (0.00s) 2085: �[32m✓�[0m Sync #what to download (0.00s) 2086: �[32m✓�[0m Verify (0.00s) 2087: �[32m✓�[0m Verify verify alerts of error (0.00s) 2088: github.com/fleetdm/fleet/v4/server/vulnerabilities/msrc/parsed: ... 2106: �[32m✓�[0m Is server core (0.00s) 2107: �[32m✓�[0m Matches (0.00s) 2108: �[32m✓�[0m Matches from differect arch (0.00s) 2109: �[32m✓�[0m Matches from differect products (0.00s) 2110: �[32m✓�[0m Matches operating system (0.00s) 2111: �[32m✓�[0m Matches same product but for different architecture (0.00s) 2112: �[32m✓�[0m Matches same product one with no architecture (0.00s) 2113: �[32m✓�[0m Matches same product same arch (0.00s) 2114: �[32m✓�[0m New product from OS (0.00s) 2115: �[32m✓�[0m Product has display version (0.00s) 2116: �[32m✓�[0m Security bulletin (0.00s) 2117: �[32m✓�[0m Security bulletin # merge (0.00s) 2118: �[32m✓�[0m Security bulletin # merge . products (0.00s) 2119: �[32m✓�[0m Security bulletin # merge . vendor fixes (0.00s) 2120: �[32m✓�[0m Security bulletin # merge . vulnerabilities (0.00s) 2121: �[32m✓�[0m Security bulletin # merge fails if product names don't match (0.00s) 2122: �[32m✓�[0m Security bulletin # merge with empty bulletins (0.00s) ... 2169: �[32m✓�[0m Parser (0.26s) 2170: �[32m✓�[0m Parser map to security bulletins (0.01s) 2171: �[32m✓�[0m Parser map to security bulletins each bulletin should have the right products (0.00s) 2172: �[32m✓�[0m Parser map to security bulletins each bulletin should have the right vulnerabilities (0.00s) 2173: �[32m✓�[0m Parser map to security bulletins should have one bulletin per product (0.00s) 2174: �[32m✓�[0m Parser map to security bulletins should map the vendor fixes entries correctly (0.00s) 2175: �[32m✓�[0m Parser map to security bulletins should map the vulnerability entries correctly (0.00s) 2176: �[32m✓�[0m Parser parse XML (0.10s) 2177: �[32m✓�[0m Parser parse XML only CVEs for windows products are included (0.00s) 2178: �[32m✓�[0m Parser parse XML only windows products are included (0.00s) 2179: �[32m✓�[0m Parser parse XML scores are parsed correctly (0.00s) 2180: �[32m✓�[0m Parser parse XML should include windows server 2025 from 202 6- feb feed (0.10s) 2181: �[32m✓�[0m Parser parse XML the remediations are parsed correctly (0.00s) 2182: �[32m✓�[0m Parser parse XML the revision history is parsed correctly (0.00s) 2183: �[32m✓�[0m Parser parse feed (0.00s) 2184: �[32m✓�[0m Parser parse feed errors out if file does not exists (0.00s) 2185: �[32m✓�[0m Sync (0.00s) ... 2193: �[32m✓�[0m Sync #bulletins delta win OS provided with remote bulletins (0.00s) 2194: �[32m✓�[0m Sync #bulletins delta win OS provided with remote bulletins missing some local bulletin (0.00s) 2195: �[32m✓�[0m Sync #bulletins delta win OS provided with remote bulletins no local bulletins (0.00s) 2196: �[32m✓�[0m Sync #bulletins delta win OS provided with remote bulletins out of date local bulletin (0.00s) 2197: �[32m✓�[0m Sync #bulletins delta win OS provided with remote bulletins up to date local bulletins (0.00s) 2198: �[32m✓�[0m Sync #bulletins delta win OS provided without remote bulletins (0.00s) 2199: �[32m✓�[0m Sync #sync (0.00s) 2200: github.com/fleetdm/fleet/v4/server/vulnerabilities/macoffice: 2201: �[32m✓�[0m Analyzer (0.00s) 2202: �[32m✓�[0m Analyzer analyze (0.00s) 2203: �[32m✓�[0m Analyzer analyze when no release notes on path (0.00s) 2204: �[32m✓�[0m Analyzer analyze when using wrong path (0.00s) 2205: �[32m✓�[0m Analyzer collect vulnerabilities (0.00s) 2206: �[32m✓�[0m Analyzer collect vulnerabilities no release notes (0.00s) 2207: �[32m✓�[0m Analyzer get stored vulnerabilities (0.00s) 2208: �[32m✓�[0m Analyzer get stored vulnerabilities on error (0.00s) 2209: �[32m✓�[0m Analyzer latest release notes (0.00s) 2210: �[32m✓�[0m Analyzer latest release notes returns release notes in order (0.00s) 2211: �[32m✓�[0m Analyzer latest release notes when the JSON file is invalid (0.00s) 2212: �[32m✓�[0m Analyzer latest release notes when vuln path does not exists (0.00s) 2213: �[32m✓�[0m Analyzer latest release notes when vuln path exists (0.00s) 2214: �[32m✓�[0m Analyzer update vulns in DB (0.00s) 2215: �[32m✓�[0m Analyzer update vulns in DB on error when deleting vulns (0.00s) 2216: �[32m✓�[0m Analyzer update vulns in DB on error when inserting vulns (0.00s) 2217: �[32m✓�[0m Build number (0.00s) ... 2223: �[32m✓�[0m Integrations parse release HTML (0.37s) 2224: �[32m✓�[0m Integrations parse release HTML should parse dates (0.00s) 2225: �[32m✓�[0m Integrations parse release HTML should parse release versions (0.01s) 2226: �[32m✓�[0m Integrations parse release HTML should parse security updates (0.01s) 2227: �[32m✓�[0m Integrations sync (0.71s) 2228: �[32m✓�[0m Release note (0.00s) 2229: �[32m✓�[0m Release note # cmp version (0.00s) 2230: �[32m✓�[0m Release note # cmp version when release version is newer than (0.00s) 2231: �[32m✓�[0m Release note # cmp version when release version is older than (0.00s) 2232: �[32m✓�[0m Release note # cmp version when the same (0.00s) 2233: �[32m✓�[0m Release note # collect vulnerabilities (0.00s) 2234: �[32m✓�[0m Release note # office product from bundle id (0.00s) 2235: �[32m✓�[0m Short version format (0.00s) 2236: �[32m✓�[0m Sync (0.00s) 2237: �[32m✓�[0m Sync #sync (0.00s) 2238: �[32m✓�[0m Sync #sync on FS error (0.00s) 2239: �[32m✓�[0m Sync #sync on GH error (0.00s) 2240: �[32m✓�[0m Sync #sync on error when deleting (0.00s) 2241: �[32m✓�[0m Sync #sync on error when downloading GH asset (0.00s) 2242: �[32m✓�[0m Sync #sync removes multiple out of date copies (0.00s) ... 2401: �[32m✓�[0m Extract ubuntu version future version 2 5.04 (0.00s) 2402: �[32m✓�[0m Extract ubuntu version interim release 2 3.10 (0.00s) 2403: �[32m✓�[0m Extract ubuntu version interim release 2 4.10 with patch (0.00s) 2404: �[32m✓�[0m Extract ubuntu version invalid version - single digit (0.00s) 2405: �[32m✓�[0m Extract ubuntu version ubuntu 1 6.04 with extra spaces (0.00s) 2406: �[32m✓�[0m Extract ubuntu version ubuntu 1 8.04 (0.00s) 2407: �[32m✓�[0m Extract ubuntu version ubuntu 2 0.04 LTS (0.00s) 2408: �[32m✓�[0m Extract ubuntu version ubuntu 2 2.04 LTS (0.00s) 2409: �[32m✓�[0m Extract ubuntu version ubuntu 2 4.04 no LTS suffix (0.00s) 2410: �[32m✓�[0m Extract ubuntu version version with codename suffix (0.00s) 2411: �[32m✓�[0m Extract ubuntu version very old version 1 4.04 (0.00s) 2412: �[32m✓�[0m Find latest OSV artifact for version (0.00s) 2413: �[32m✓�[0m Find latest OSV artifact for version finds latest 1 8.04 artifact (0.00s) 2414: �[32m✓�[0m Find latest OSV artifact for version finds latest 2 0.04 artifact (0.00s) 2415: �[32m✓�[0m Find latest OSV artifact for version finds latest 2 2.04 artifact (0.00s) 2416: �[32m✓�[0m Find latest OSV artifact for version returns error for non-existent version (0.00s) 2417: �[32m✓�[0m Get needed RHEL versions (0.00s) ... 2487: �[32m✓�[0m Normalize kernel version generic 6 4k kernel (0.00s) 2488: �[32m✓�[0m Normalize kernel version generic kernel (0.00s) 2489: �[32m✓�[0m Normalize kernel version kernel with only one part (0.00s) 2490: �[32m✓�[0m Normalize kernel version lowlatency kernel (0.00s) 2491: �[32m✓�[0m OSV filename (0.00s) 2492: �[32m✓�[0m OSV filename 1804 (0.00s) 2493: �[32m✓�[0m OSV filename 2004 (0.00s) 2494: �[32m✓�[0m OSV filename 2204 (0.00s) 2495: �[32m✓�[0m RHELOSV filename (0.00s) 2496: �[32m✓�[0m RHELOSV filename 10 (0.00s) 2497: �[32m✓�[0m RHELOSV filename 8 (0.00s) 2498: �[32m✓�[0m RHELOSV filename 9 (0.00s) 2499: �[32m✓�[0m Release date from assets (0.00s) 2500: �[32m✓�[0m Remove old OSV artifacts (0.00s) 2501: �[32m✓�[0m Remove old OSV artifacts date boundary race (0.00s) 2502: �[32m✓�[0m Remove old OSV artifacts preserves failed versions (0.00s) 2503: �[32m✓�[0m Remove old OSV artifacts with skipped versions (0.00s) 2504: �[32m✓�[0m Remove old RHELOSV artifacts (0.00s) 2505: �[32m✓�[0m Sync OSV checksum match (0.00s) 2506: �[32m✓�[0m Sync OSV fault tolerance (0.00s) 2507: �[32m✓�[0m Sync OSV partial failure not returned as error (0.00s) 2508: �[32m✓�[0m Version from asset name (0.00s) ... 2518: �[32m✓�[0m Fetch vuln check download URL (0.00s) 2519: �[32m✓�[0m Fetch vuln check download URL with retries (0.02s) 2520: �[32m✓�[0m Store CVEs legacy format (18.33s) 2521: �[32m✓�[0m Store CVEs legacy format 2023 (18.33s) 2522: github.com/fleetdm/fleet/v4/server/vulnerabilities/oval/input: 2523: github.com/fleetdm/fleet/v4/server/vulnerabilities/oval/parsed: 2524: �[32m✓�[0m Dpkg info test eval no host list (0.00s) 2525: �[32m✓�[0m Dpkg info test eval no host list # eval (0.00s) 2526: �[32m✓�[0m Dpkg info test eval no host list # eval test matches n objects (0.00s) 2527: �[32m✓�[0m Dpkg info test eval no host list # eval test matches n states (0.00s) 2528: �[32m✓�[0m Dpkg info test eval no host list # eval with no packages (0.00s) 2529: �[32m✓�[0m Eval (0.00s) 2530: �[32m✓�[0m Eval alt pattern match (0.00s) 2531: �[32m✓�[0m Eval equal (0.00s) 2532: �[32m✓�[0m Eval greater than (0.00s) 2533: �[32m✓�[0m Eval higher version fails pattern match (0.00s) 2534: �[32m✓�[0m Eval kernel (0.00s) 2535: �[32m✓�[0m Eval less than (0.00s) 2536: �[32m✓�[0m Eval lower version fails pattern match (0.00s) 2537: �[32m✓�[0m Eval suffix doesn't match (0.00s) ... 2549: �[32m✓�[0m Object info state # eval OS version name (0.00s) 2550: �[32m✓�[0m Object info state # eval OS version version (0.00s) 2551: �[32m✓�[0m Object info state # eval software (0.00s) 2552: �[32m✓�[0m Object info state # eval software arch (0.00s) 2553: �[32m✓�[0m Object info state # eval software evr (0.00s) 2554: �[32m✓�[0m Object info state # eval software name (0.00s) 2555: �[32m✓�[0m Object info state # eval software release (0.00s) 2556: �[32m✓�[0m Object info state # eval software signature key id (0.00s) 2557: �[32m✓�[0m Object info state # eval software version (0.00s) 2558: �[32m✓�[0m Object match type (0.00s) 2559: �[32m✓�[0m Object match type # eval (0.00s) 2560: �[32m✓�[0m Object match type new object match type (0.00s) 2561: �[32m✓�[0m Object state evr string (0.00s) 2562: �[32m✓�[0m Object state evr string # eval (0.00s) 2563: �[32m✓�[0m Object state evr string # eval evaluates an evr string (0.00s) 2564: �[32m✓�[0m Object state evr string # eval it errors out if operation can not be computed (0.00s) 2565: �[32m✓�[0m Object state simple value (0.00s) 2566: �[32m✓�[0m Object state simple value # eval (0.00s) 2567: �[32m✓�[0m Object state simple value # eval compares simple data types (0.00s) 2568: �[32m✓�[0m Object state simple value # eval compares simple data types booleans (0.00s) 2569: �[32m✓�[0m Object state simple value # eval compares simple data types floats (0.00s) 2570: �[32m✓�[0m Object state simple value # eval compares simple data types ints (0.00s) 2571: �[32m✓�[0m Object state simple value # eval compares simple data types strings (0.00s) 2572: �[32m✓�[0m Object state simple value # eval it errors out if complex type used (0.00s) 2573: �[32m✓�[0m Object state simple value #unpack (0.00s) 2574: �[32m✓�[0m Object state simple value new object state simple value (0.00s) 2575: �[32m✓�[0m Object state string (0.00s) 2576: �[32m✓�[0m Object state string # eval (0.00s) 2577: �[32m✓�[0m Object state string # eval it errors out if operation can not be computed (0.00s) 2578: �[32m✓�[0m Object state string # eval it errors out if regexp can not be parsed (0.00s) 2579: �[32m✓�[0m Object state string # eval it evaluates string values (0.00s) ... 2610: �[32m✓�[0m Vulns delta existing differ from found (0.00s) 2611: �[32m✓�[0m Vulns delta existing match found (0.00s) 2612: �[32m✓�[0m Vulns delta no existing vulnerabilities (0.00s) 2613: �[32m✓�[0m Vulns delta nothing found but vulns exist (0.00s) 2614: github.com/fleetdm/fleet/v4/server/vulnerabilities/oval: 2615: �[32m✓�[0m Oval analyzer (0.00s) 2616: �[32m✓�[0m Oval analyzer #load (0.00s) 2617: �[32m✓�[0m Oval analyzer #load invalid vuln path (0.00s) 2618: �[32m✓�[0m Oval analyzer analyzing RHEL software (12.72s) 2619: �[32m✓�[0m Oval analyzer analyzing ubuntu software (9.74s) 2620: �[32m✓�[0m Oval download definitions matching host info (0.00s) 2621: �[32m✓�[0m Oval download definitions platform not found (0.00s) 2622: �[32m✓�[0m Oval mapper (0.00s) 2623: �[32m✓�[0m Oval mapper #extract id (0.00s) 2624: �[32m✓�[0m Oval mapper #map criteria (0.00s) 2625: �[32m✓�[0m Oval mapper #map criteria errors out if id can not be parsed on any criterion (0.00s) 2626: �[32m✓�[0m Oval mapper #map criteria errors out if no criteriums or nested criterias (0.00s) 2627: �[32m✓�[0m Oval mapper #map criteria maps criteriums (0.00s) 2628: �[32m✓�[0m Oval mapper #map criteria maps nested criterias (0.00s) 2629: �[32m✓�[0m Oval mapper #map definition (0.00s) 2630: �[32m✓�[0m Oval mapper #map definition errors out if no vulnerabilities (0.00s) 2631: �[32m✓�[0m Oval mapper #map dpkg info state (0.00s) 2632: �[32m✓�[0m Oval mapper #map dpkg info state errors out if one of non-supported state information is provided (0.00s) 2633: �[32m✓�[0m Oval mapper #map dpkg info test (0.00s) 2634: �[32m✓�[0m Oval mapper #map dpkg info test errors out if id can not be parsed (0.00s) 2635: �[32m✓�[0m Oval mapper #map dpkg info test maps a dpkg info test XML (0.00s) 2636: �[32m✓�[0m Oval mapper #map package info test object (0.00s) 2637: �[32m✓�[0m Oval mapper #map package info test object name defined in var ref (0.00s) 2638: �[32m✓�[0m Oval mapper #map package info test object name defined inline (0.00s) 2639: �[32m✓�[0m Oval mapper #map package info test object name not defined inline nor using a variable ref (0.00s) 2640: �[32m✓�[0m Oval mapper #map rpm info state (0.00s) 2641: �[32m✓�[0m Oval mapper #map rpm info state errors out if not supported state is provided (0.00s) 2642: �[32m✓�[0m Oval mapper #map rpm info state maps a rpm info state XML (0.00s) 2643: �[32m✓�[0m Oval mapper #map rpm info state maps the operator, if any (0.00s) 2644: �[32m✓�[0m Oval mapper #map rpm info test (0.00s) 2645: �[32m✓�[0m Oval mapper #map rpm info test errors out if id can not be parsed (0.00s) 2646: �[32m✓�[0m Oval mapper #map rpm info test maps a rpm info test XML (0.00s) 2647: �[32m✓�[0m Oval mapper #map rpm verify file object (0.00s) 2648: �[32m✓�[0m Oval mapper #map rpm verify file object errors out if invalid children provided (0.00s) 2649: �[32m✓�[0m Oval mapper #map rpm verify file object maps to a filepath (0.00s) 2650: �[32m✓�[0m Oval mapper #map rpm verify file state (0.00s) 2651: �[32m✓�[0m Oval mapper #map rpm verify file state errors out if not supported state is provided (0.00s) 2652: �[32m✓�[0m Oval mapper #map rpm verify file state maps a rpm verify file state XML (0.00s) ... 2716: �[32m✓�[0m Integration check version unknown version returns no vulnerabilities (0.00s) 2717: �[32m✓�[0m Integration check version version not in bulletin returns empty (0.00s) 2718: �[32m✓�[0m Parse office version (0.00s) 2719: �[32m✓�[0m Parse office version invalid version - no prefix (0.00s) 2720: �[32m✓�[0m Parse office version invalid version - too few parts (0.00s) 2721: �[32m✓�[0m Parse office version invalid version - wrong prefix (0.00s) 2722: �[32m✓�[0m Parse office version valid version (0.00s) 2723: �[32m✓�[0m Parse security markdown (0.00s) 2724: �[32m✓�[0m Parse security markdown keeps minimum build suffix for same version (0.00s) 2725: �[32m✓�[0m Parse security markdown parses LTSC versions (0.00s) 2726: �[32m✓�[0m Parse security markdown parses multiple releases (0.00s) 2727: �[32m✓�[0m Parse security markdown parses single release with multiple versions (0.00s) 2728: �[32m✓�[0m Parse security markdown skips releases without CVEs (0.00s) 2729: �[32m✓�[0m Parse security markdown skips retail versions (0.00s) 2730: �[32m✓�[0m Sync bulletin (0.00s) 2731: �[32m✓�[0m Sync bulletin on FS error (0.00s) 2732: �[32m✓�[0m Sync bulletin on GH error (0.00s) 2733: �[32m✓�[0m Sync bulletin on error when deleting (0.00s) 2734: �[32m✓�[0m Sync bulletin on error when downloading GH asset (0.00s) 2735: �[32m✓�[0m Sync bulletin removes multiple out of date copies (0.00s) ... 2751: �[32m✓�[0m FS client (0.00s) 2752: �[32m✓�[0m FS client #MSRC bulletins (0.00s) 2753: �[32m✓�[0m FS client #MSRC bulletins directory does not exists (0.00s) 2754: �[32m✓�[0m FS client #MSRC bulletins returns a list of file matching the MSRC file prefix (0.00s) 2755: �[32m✓�[0m FS client delete (0.00s) 2756: �[32m✓�[0m FS client delete file does not exists (0.00s) 2757: �[32m✓�[0m FS client mac office release notes (0.00s) 2758: �[32m✓�[0m FS client mac office release notes directory does not exists (0.00s) 2759: �[32m✓�[0m FS client mac office release notes returns a list of file matching the mac office file prefix (0.00s) 2760: �[32m✓�[0m FS client mac office release notes when files contain the wrong date format (0.00s) 2761: �[32m✓�[0m Integrations github client (274.40s) 2762: �[32m✓�[0m Integrations github client # download (274.40s) 2763: �[32m✓�[0m Integrations github client # download with invalid URL (274.39s) 2764: �[32m✓�[0m Integrations github client #MSRC bulletins (0.00s) 2765: �[32m✓�[0m Integrations github client mac office release notes (0.00s) 2766: �[32m✓�[0m Integrations github client mac office release notes on error (0.00s) 2767: �[32m✓�[0m Integrations github client mac office release notes with HTTP error code (0.00s) 2768: �[32m✓�[0m Integrations github client mac office release notes with a single release note asset (0.00s) ... 2892: �[32m✓�[0m Syncs CVE from URL (0.00s) 2893: �[32m✓�[0m Translate (0.00s) 2894: �[32m✓�[0m Translate match on bundle identifier (0.00s) 2895: �[32m✓�[0m Translate match on name and source (0.00s) 2896: �[32m✓�[0m Translate match with regex (0.00s) 2897: �[32m✓�[0m Translate match with regex not matching (0.00s) 2898: �[32m✓�[0m Translate no match (0.00s) 2899: �[32m✓�[0m Translate software to CPE (0.03s) 2900: �[32m✓�[0m Translate software to CPE ignore empty version (0.03s) 2901: �[32m✓�[0m Variations (0.00s) 2902: === �[33mSkipped�[0m 2903: === �[33mSKIP�[0m: server/vulnerabilities/nvd/tools/providers/nvd TestEndToEnd (0.00s) 2904: e2e_test.go:45: e2e tests not enabled 2905: === �[33mSKIP�[0m: server/vulnerabilities/vulntest TestGenerateVulnFixtures (0.00s) 2906: gen_fixture_test.go:123: set GENERATE_FIXTURES=1 to run this test 2907: === �[31mFailed�[0m 2908: === �[31mFAIL�[0m: server/vulnerabilities/nvd (0.00s) ... 3075: /opt/hostedtoolcache/go/1.26.2/x64/src/io/io.go:354 3076: net/http.http2readFrameHeader({0x350849f96584, 0x9, 0x3508000001ad?}, {0x139e3a0?, 0x35084a2b46c0?}) 3077: /opt/hostedtoolcache/go/1.26.2/x64/src/net/http/h2_bundle.go:1805 +0x65 3078: net/http.(http2Framer).ReadFrameHeader(0x350849f96540) 3079: /opt/hostedtoolcache/go/1.26.2/x64/src/net/http/h2_bundle.go:2071 +0x6b 3080: net/http.(http2Framer).ReadFrame(0x350849f96540) 3081: /opt/hostedtoolcache/go/1.26.2/x64/src/net/http/h2_bundle.go:2130 +0x18 3082: net/http.(http2clientConnReadLoop).run(0x350851933fa8) 3083: /opt/hostedtoolcache/go/1.26.2/x64/src/net/http/h2_bundle.go:9550 +0xca 3084: net/http.(http2ClientConn).readLoop(0x350851cac380) 3085: /opt/hostedtoolcache/go/1.26.2/x64/src/net/http/h2_bundle.go:9419 +0x52 3086: created by net/http.(*http2Transport).newClientConn in goroutine 6900 3087: /opt/hostedtoolcache/go/1.26.2/x64/src/net/http/h2_bundle.go:8171 +0xda5 3088: FAIL github.com/fleetdm/fleet/v4/server/vulnerabilities/nvd 1200.097s 3089: === �[31mFAIL�[0m: server/vulnerabilities/nvd TestTranslateCPEToCVE (unknown) 3090: nettest.go:84: TestTranslateCPEToCVE: retrying error: download nvd cve feed: download nvd cve feed: 1 synchronisation error: 3091: unexpected http response from "https://github.com/fleetdm/vulnerabilities/releases/download/cve-202604302036/nvdcve-1.1-2016.meta" ("404 Not Found"): "\n\n\n\n\n\n\n\n<!DOCTYPE html>\n<html\n lang=\"en\"\n \n data-color-mode=\"auto\" data-light-theme=\"light\" data-dark-theme=\"dark\"\n data-a11y-animated-images=\"system\" data-a11y-link-underlines=\"true\"\n \n >\n\n\n\n\n <head>\n <meta charset=\"utf-8\">\n <link rel=\"dns-prefetch\" href=\"https://github.githubassets.com\">\n <link rel=\"dns-prefetch\" href=\"https://avatars.githubusercontent.com\">\n <link rel=\"dns-prefetch\" href=\"https://github-cloud.s3.amazonaws.com\">\n <link rel=\"dns-prefetch\" href=\"https://user-images.githubusercontent.com/\">\n <link rel=\"preconnect\" href=\"https://github.githubassets.com\" crossorigin>\n <link rel=\"preconnect\" href=\"https://avatars.githubusercontent.com\">\n\n <link crossorigin=\"anonymous\" rel=\"preload\" as=\"script\" href=\"https://github.githubassets.com/assets/global-banner-disable-7f8c9b12bd1db3c7.js\" />\n\n <link rel=\"preload\" href=\"https://github.githubassets.com/assets/MonaSansVF-wdth-wght-opsz-902d64c7ad02.woff2\" as=\"font\" type=\"font/woff2\" crossorigin>\n\n\n <link crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" href=\"https://github.githubassets.com/assets/light-2ff56e1b36116ee2.css\" /><link crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" href=\"https://github.githubassets.com/assets/light_high_contrast-f7f95d7633592089.css\" /><link crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" href=\"https://github.githubassets.com/assets/dark-2d1fe43dbc9adf1f.css\" /><link crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" href=\"https://github.githubassets.com/assets/dark_high_contrast-d530ee188d165539.css\" /><link data-color-theme=\"light\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light-2ff56e1b36116ee2.css\" /><link data-color-theme=\"light_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_high_contrast-f7f95d7633592089.css\" /><link data-color-theme=\"light_colorblind\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_colorblind-e4bbc49fc7b82570.css\" /><link data-color-theme=\"light_colorblind_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_colorblind_high_contrast-cc3f126b45166b83.css\" /><link data-color-theme=\"light_tritanopia\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_tritanopia-652ca611ea4e33fe.css\" /><link data-color-theme=\"light_tritanopia_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_tritanopia_high_contrast-9e82d635cb6c3f49.css\" /><link data-color-theme=\"dark\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark-2d1fe43dbc9adf1f.css\" /><link data-color-theme=\"dark_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_high_contrast-d530ee188d165539.css\" /><link data-color-theme=\"dark_colorblind\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_colorblind-3ad0ec21150df75b.css\" /><link data-color-theme=\"dark_colorblind_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_colorblind_high_contrast-5691ff467f71a3f6.css\" /><link data-color-theme=\"dark_tritanopia\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_tritanopia-abee7710893cd168.css\" /><link data-color-theme=\"dark_tritanopia_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_tritanopia_high_contrast-eafcf6cd46158360.css\" /><link data-color-theme=\"dark_dimmed\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_dimmed-c7974682a1a84c8d.css\" /><link data-color-theme=\"dark_dimmed_high_contrast\" crossorigin=\"anonymo" 3092: nettest.go:84: TestTranslateCPEToCVE: retrying error: download nvd cve feed: download nvd cve feed: 1 synchronisation error: 3093: unexpected http response from "https://github.com/fleetdm/vulnerabilities/releases/download/cve-202604302036/nvdcve-1.1-2016.meta" ("404 Not Found"): "\n\n\n\n\n\n\n\n<!DOCTYPE html>\n<html\n lang=\"en\"\n \n data-color-mode=\"auto\" data-light-theme=\"light\" data-dark-theme=\"dark\"\n data-a11y-animated-images=\"system\" data-a11y-link-underlines=\"true\"\n \n >\n\n\n\n\n <head>\n <meta charset=\"utf-8\">\n <link rel=\"dns-prefetch\" href=\"https://github.githubassets.com\">\n <link rel=\"dns-prefetch\" href=\"https://avatars.githubusercontent.com\">\n <link rel=\"dns-prefetch\" href=\"https://github-cloud.s3.amazonaws.com\">\n <link rel=\"dns-prefetch\" href=\"https://user-images.githubusercontent.com/\">\n <link rel=\"preconnect\" href=\"https://github.githubassets.com\" crossorigin>\n <link rel=\"preconnect\" href=\"https://avatars.githubusercontent.com\">\n\n <link crossorigin=\"anonymous\" rel=\"preload\" as=\"script\" href=\"https://github.githubassets.com/assets/global-banner-disable-7f8c9b12bd1db3c7.js\" />\n\n <link rel=\"preload\" href=\"https://github.githubassets.com/assets/MonaSansVF-wdth-wght-opsz-902d64c7ad02.woff2\" as=\"font\" type=\"font/woff2\" crossorigin>\n\n\n <link crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" href=\"https://github.githubassets.com/assets/light-2ff56e1b36116ee2.css\" /><link crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" href=\"https://github.githubassets.com/assets/light_high_contrast-f7f95d7633592089.css\" /><link crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" href=\"https://github.githubassets.com/assets/dark-2d1fe43dbc9adf1f.css\" /><link crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" href=\"https://github.githubassets.com/assets/dark_high_contrast-d530ee188d165539.css\" /><link data-color-theme=\"light\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light-2ff56e1b36116ee2.css\" /><link data-color-theme=\"light_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_high_contrast-f7f95d7633592089.css\" /><link data-color-theme=\"light_colorblind\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_colorblind-e4bbc49fc7b82570.css\" /><link data-color-theme=\"light_colorblind_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_colorblind_high_contrast-cc3f126b45166b83.css\" /><link data-color-theme=\"light_tritanopia\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_tritanopia-652ca611ea4e33fe.css\" /><link data-color-theme=\"light_tritanopia_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_tritanopia_high_contrast-9e82d635cb6c3f49.css\" /><link data-color-theme=\"dark\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark-2d1fe43dbc9adf1f.css\" /><link data-color-theme=\"dark_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_high_contrast-d530ee188d165539.css\" /><link data-color-theme=\"dark_colorblind\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_colorblind-3ad0ec21150df75b.css\" /><link data-color-theme=\"dark_colorblind_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_colorblind_high_contrast-5691ff467f71a3f6.css\" /><link data-color-theme=\"dark_tritanopia\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_tritanopia-abee7710893cd168.css\" /><link data-color-theme=\"dark_tritanopia_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_tritanopia_high_contrast-eafcf6cd46158360.css\" /><link data-color-theme=\"dark_dimmed\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_dimmed-c7974682a1a84c8d.css\" /><link data-color-theme=\"dark_dimmed_high_contrast\" crossorigin=\"anonymo" 3094: nettest.go:84: TestTranslateCPEToCVE: retrying error: download nvd cve feed: download nvd cve feed: 1 synchronisation error: 3095: unexpected http response from "https://github.com/fleetdm/vulnerabilities/releases/download/cve-202604302036/nvdcve-1.1-2016.meta" ("404 Not Found"): "\n\n\n\n\n\n\n\n<!DOCTYPE html>\n<html\n lang=\"en\"\n \n data-color-mode=\"auto\" data-light-theme=\"light\" data-dark-theme=\"dark\"\n data-a11y-animated-images=\"system\" data-a11y-link-underlines=\"true\"\n \n >\n\n\n\n\n <head>\n <meta charset=\"utf-8\">\n <link rel=\"dns-prefetch\" href=\"https://github.githubassets.com\">\n <link rel=\"dns-prefetch\" href=\"https://avatars.githubusercontent.com\">\n <link rel=\"dns-prefetch\" href=\"https://github-cloud.s3.amazonaws.com\">\n <link rel=\"dns-prefetch\" href=\"https://user-images.githubusercontent.com/\">\n <link rel=\"preconnect\" href=\"https://github.githubassets.com\" crossorigin>\n <link rel=\"preconnect\" href=\"https://avatars.githubusercontent.com\">\n\n <link crossorigin=\"anonymous\" rel=\"preload\" as=\"script\" href=\"https://github.githubassets.com/assets/global-banner-disable-7f8c9b12bd1db3c7.js\" />\n\n <link rel=\"preload\" href=\"https://github.githubassets.com/assets/MonaSansVF-wdth-wght-opsz-902d64c7ad02.woff2\" as=\"font\" type=\"font/woff2\" crossorigin>\n\n\n <link crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" href=\"https://github.githubassets.com/assets/light-2ff56e1b36116ee2.css\" /><link crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" href=\"https://github.githubassets.com/assets/light_high_contrast-f7f95d7633592089.css\" /><link crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" href=\"https://github.githubassets.com/assets/dark-2d1fe43dbc9adf1f.css\" /><link crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" href=\"https://github.githubassets.com/assets/dark_high_contrast-d530ee188d165539.css\" /><link data-color-theme=\"light\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light-2ff56e1b36116ee2.css\" /><link data-color-theme=\"light_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_high_contrast-f7f95d7633592089.css\" /><link data-color-theme=\"light_colorblind\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_colorblind-e4bbc49fc7b82570.css\" /><link data-color-theme=\"light_colorblind_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_colorblind_high_contrast-cc3f126b45166b83.css\" /><link data-color-theme=\"light_tritanopia\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_tritanopia-652ca611ea4e33fe.css\" /><link data-color-theme=\"light_tritanopia_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_tritanopia_high_contrast-9e82d635cb6c3f49.css\" /><link data-color-theme=\"dark\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark-2d1fe43dbc9adf1f.css\" /><link data-color-theme=\"dark_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_high_contrast-d530ee188d165539.css\" /><link data-color-theme=\"dark_colorblind\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_colorblind-3ad0ec21150df75b.css\" /><link data-color-theme=\"dark_colorblind_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_colorblind_high_contrast-5691ff467f71a3f6.css\" /><link data-color-theme=\"dark_tritanopia\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_tritanopia-abee7710893cd168.css\" /><link data-color-theme=\"dark_tritanopia_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_tritanopia_high_contrast-eafcf6cd46158360.css\" /><link data-color-theme=\"dark_dimmed\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_dimmed-c7974682a1a84c8d.css\" /><link data-color-theme=\"dark_dimmed_high_contrast\" crossorigin=\"anonymo" 3096: nettest.go:84: TestTranslateCPEToCVE: retrying error: download nvd cve feed: download nvd cve feed: 1 synchronisation error: 3097: unexpected http response from "https://github.com/fleetdm/vulnerabilities/releases/download/cve-202604302036/nvdcve-1.1-2016.meta" ("404 Not Found"): "\n\n\n\n\n\n\n\n<!DOCTYPE html>\n<html\n lang=\"en\"\n \n data-color-mode=\"auto\" data-light-theme=\"light\" data-dark-theme=\"dark\"\n data-a11y-animated-images=\"system\" data-a11y-link-underlines=\"true\"\n \n >\n\n\n\n\n <head>\n <meta charset=\"utf-8\">\n <link rel=\"dns-prefetch\" href=\"https://github.githubassets.com\">\n <link rel=\"dns-prefetch\" href=\"https://avatars.githubusercontent.com\">\n <link rel=\"dns-prefetch\" href=\"https://github-cloud.s3.amazonaws.com\">\n <link rel=\"dns-prefetch\" href=\"https://user-images.githubusercontent.com/\">\n <link rel=\"preconnect\" href=\"https://github.githubassets.com\" crossorigin>\n <link rel=\"preconnect\" href=\"https://avatars.githubusercontent.com\">\n\n <link crossorigin=\"anonymous\" rel=\"preload\" as=\"script\" href=\"https://github.githubassets.com/assets/global-banner-disable-7f8c9b12bd1db3c7.js\" />\n\n <link rel=\"preload\" href=\"https://github.githubassets.com/assets/MonaSansVF-wdth-wght-opsz-902d64c7ad02.woff2\" as=\"font\" type=\"font/woff2\" crossorigin>\n\n\n <link crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" href=\"https://github.githubassets.com/assets/light-2ff56e1b36116ee2.css\" /><link crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" href=\"https://github.githubassets.com/assets/light_high_contrast-f7f95d7633592089.css\" /><link crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" href=\"https://github.githubassets.com/assets/dark-2d1fe43dbc9adf1f.css\" /><link crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" href=\"https://github.githubassets.com/assets/dark_high_contrast-d530ee188d165539.css\" /><link data-color-theme=\"light\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light-2ff56e1b36116ee2.css\" /><link data-color-theme=\"light_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_high_contrast-f7f95d7633592089.css\" /><link data-color-theme=\"light_colorblind\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_colorblind-e4bbc49fc7b82570.css\" /><link data-color-theme=\"light_colorblind_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_colorblind_high_contrast-cc3f126b45166b83.css\" /><link data-color-theme=\"light_tritanopia\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_tritanopia-652ca611ea4e33fe.css\" /><link data-color-theme=\"light_tritanopia_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_tritanopia_high_contrast-9e82d635cb6c3f49.css\" /><link data-color-theme=\"dark\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark-2d1fe43dbc9adf1f.css\" /><link data-color-theme=\"dark_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_high_contrast-d530ee188d165539.css\" /><link data-color-theme=\"dark_colorblind\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_colorblind-3ad0ec21150df75b.css\" /><link data-color-theme=\"dark_colorblind_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_colorblind_high_contrast-5691ff467f71a3f6.css\" /><link data-color-theme=\"dark_tritanopia\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_tritanopia-abee7710893cd168.css\" /><link data-color-theme=\"dark_tritanopia_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_tritanopia_high_contrast-eafcf6cd46158360.css\" /><link data-color-theme=\"dark_dimmed\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_dimmed-c7974682a1a84c8d.css\" /><link data-color-theme=\"dark_dimmed_high_contrast\" crossorigin=\"anonymo" 3098: nettest.go:84: TestTranslateCPEToCVE: retrying error: download nvd cve feed: download nvd cve feed: 1 synchronisation error: 3099: unexpected http response from "https://github.com/fleetdm/vulnerabilities/releases/download/cve-202604302036/nvdcve-1.1-2016.meta" ("404 Not Found"): "\n\n\n\n\n\n\n\n<!DOCTYPE html>\n<html\n lang=\"en\"\n \n data-color-mode=\"auto\" data-light-theme=\"light\" data-dark-theme=\"dark\"\n data-a11y-animated-images=\"system\" data-a11y-link-underlines=\"true\"\n \n >\n\n\n\n\n <head>\n <meta charset=\"utf-8\">\n <link rel=\"dns-prefetch\" href=\"https://github.githubassets.com\">\n <link rel=\"dns-prefetch\" href=\"https://avatars.githubusercontent.com\">\n <link rel=\"dns-prefetch\" href=\"https://github-cloud.s3.amazonaws.com\">\n <link rel=\"dns-prefetch\" href=\"https://user-images.githubusercontent.com/\">\n <link rel=\"preconnect\" href=\"https://github.githubassets.com\" crossorigin>\n <link rel=\"preconnect\" href=\"https://avatars.githubusercontent.com\">\n\n <link crossorigin=\"anonymous\" rel=\"preload\" as=\"script\" href=\"https://github.githubassets.com/assets/global-banner-disable-7f8c9b12bd1db3c7.js\" />\n\n <link rel=\"preload\" href=\"https://github.githubassets.com/assets/MonaSansVF-wdth-wght-opsz-902d64c7ad02.woff2\" as=\"font\" type=\"font/woff2\" crossorigin>\n\n\n <link crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" href=\"https://github.githubassets.com/assets/light-2ff56e1b36116ee2.css\" /><link crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" href=\"https://github.githubassets.com/assets/light_high_contrast-f7f95d7633592089.css\" /><link crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" href=\"https://github.githubassets.com/assets/dark-2d1fe43dbc9adf1f.css\" /><link crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" href=\"https://github.githubassets.com/assets/dark_high_contrast-d530ee188d165539.css\" /><link data-color-theme=\"light\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light-2ff56e1b36116ee2.css\" /><link data-color-theme=\"light_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_high_contrast-f7f95d7633592089.css\" /><link data-color-theme=\"light_colorblind\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_colorblind-e4bbc49fc7b82570.css\" /><link data-color-theme=\"light_colorblind_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_colorblind_high_contrast-cc3f126b45166b83.css\" /><link data-color-theme=\"light_tritanopia\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_tritanopia-652ca611ea4e33fe.css\" /><link data-color-theme=\"light_tritanopia_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_tritanopia_high_contrast-9e82d635cb6c3f49.css\" /><link data-color-theme=\"dark\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark-2d1fe43dbc9adf1f.css\" /><link data-color-theme=\"dark_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_high_contrast-d530ee188d165539.css\" /><link data-color-theme=\"dark_colorblind\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_colorblind-3ad0ec21150df75b.css\" /><link data-color-theme=\"dark_colorblind_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_colorblind_high_contrast-5691ff467f71a3f6.css\" /><link data-color-theme=\"dark_tritanopia\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_tritanopia-abee7710893cd168.css\" /><link data-color-theme=\"dark_tritanopia_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_tritanopia_high_contrast-eafcf6cd46158360.css\" /><link data-color-theme=\"dark_dimmed\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_dimmed-c7974682a1a84c8d.css\" /><link data-color-theme=\"dark_dimmed_high_contrast\" crossorigin=\"anonymo" 3100: nettest.go:84: TestTranslateCPEToCVE: retrying error: download nvd cve feed: download nvd cve feed: 1 synchronisation error: 3101: unexpected http response from "https://github.com/fleetdm/vulnerabilities/releases/download/cve-202604302036/nvdcve-1.1-2016.meta" ("404 Not Found"): "\n\n\n\n\n\n\n\n<!DOCTYPE html>\n<html\n lang=\"en\"\n \n data-color-mode=\"auto\" data-light-theme=\"light\" data-dark-theme=\"dark\"\n data-a11y-animated-images=\"system\" data-a11y-link-underlines=\"true\"\n \n >\n\n\n\n\n <head>\n <meta charset=\"utf-8\">\n <link rel=\"dns-prefetch\" href=\"https://github.githubassets.com\">\n <link rel=\"dns-prefetch\" href=\"https://avatars.githubusercontent.com\">\n <link rel=\"dns-prefetch\" href=\"https://github-cloud.s3.amazonaws.com\">\n <link rel=\"dns-prefetch\" href=\"https://user-images.githubusercontent.com/\">\n <link rel=\"preconnect\" href=\"https://github.githubassets.com\" crossorigin>\n <link rel=\"preconnect\" href=\"https://avatars.githubusercontent.com\">\n\n <link crossorigin=\"anonymous\" rel=\"preload\" as=\"script\" href=\"https://github.githubassets.com/assets/global-banner-disable-7f8c9b12bd1db3c7.js\" />\n\n <link rel=\"preload\" href=\"https://github.githubassets.com/assets/MonaSansVF-wdth-wght-opsz-902d64c7ad02.woff2\" as=\"font\" type=\"font/woff2\" crossorigin>\n\n\n <link crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" href=\"https://github.githubassets.com/assets/light-2ff56e1b36116ee2.css\" /><link crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" href=\"https://github.githubassets.com/assets/light_high_contrast-f7f95d7633592089.css\" /><link crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" href=\"https://github.githubassets.com/assets/dark-2d1fe43dbc9adf1f.css\" /><link crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" href=\"https://github.githubassets.com/assets/dark_high_contrast-d530ee188d165539.css\" /><link data-color-theme=\"light\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light-2ff56e1b36116ee2.css\" /><link data-color-theme=\"light_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_high_contrast-f7f95d7633592089.css\" /><link data-color-theme=\"light_colorblind\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_colorblind-e4bbc49fc7b82570.css\" /><link data-color-theme=\"light_colorblind_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_colorblind_high_contrast-cc3f126b45166b83.css\" /><link data-color-theme=\"light_tritanopia\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_tritanopia-652ca611ea4e33fe.css\" /><link data-color-theme=\"light_tritanopia_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_tritanopia_high_contrast-9e82d635cb6c3f49.css\" /><link data-color-theme=\"dark\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark-2d1fe43dbc9adf1f.css\" /><link data-color-theme=\"dark_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_high_contrast-d530ee188d165539.css\" /><link data-color-theme=\"dark_colorblind\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_colorblind-3ad0ec21150df75b.css\" /><link data-color-theme=\"dark_colorblind_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_colorblind_high_contrast-5691ff467f71a3f6.css\" /><link data-color-theme=\"dark_tritanopia\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_tritanopia-abee7710893cd168.css\" /><link data-color-theme=\"dark_tritanopia_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_tritanopia_high_contrast-eafcf6cd46158360.css\" /><link data-color-theme=\"dark_dimmed\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_dimmed-c7974682a1a84c8d.css\" /><link data-color-theme=\"dark_dimmed_high_contrast\" crossorigin=\"anonymo" 3102: nettest.go:84: TestTranslateCPEToCVE: retrying error: download nvd cve feed: download nvd cve feed: 1 synchronisation error: 3103: unexpected http response from "https://github.com/fleetdm/vulnerabilities/releases/download/cve-202604302036/nvdcve-1.1-2016.meta" ("404 Not Found"): "\n\n\n\n\n\n\n\n<!DOCTYPE html>\n<html\n lang=\"en\"\n \n data-color-mode=\"auto\" data-light-theme=\"light\" data-dark-theme=\"dark\"\n data-a11y-animated-images=\"system\" data-a11y-link-underlines=\"true\"\n \n >\n\n\n\n\n <head>\n <meta charset=\"utf-8\">\n <link rel=\"dns-prefetch\" href=\"https://github.githubassets.com\">\n <link rel=\"dns-prefetch\" href=\"https://avatars.githubusercontent.com\">\n <link rel=\"dns-prefetch\" href=\"https://github-cloud.s3.amazonaws.com\">\n <link rel=\"dns-prefetch\" href=\"https://user-images.githubusercontent.com/\">\n <link rel=\"preconnect\" href=\"https://github.githubassets.com\" crossorigin>\n <link rel=\"preconnect\" href=\"https://avatars.githubusercontent.com\">\n\n <link crossorigin=\"anonymous\" rel=\"preload\" as=\"script\" href=\"https://github.githubassets.com/assets/global-banner-disable-7f8c9b12bd1db3c7.js\" />\n\n <link rel=\"preload\" href=\"https://github.githubassets.com/assets/MonaSansVF-wdth-wght-opsz-902d64c7ad02.woff2\" as=\"font\" type=\"font/woff2\" crossorigin>\n\n\n <link crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" href=\"https://github.githubassets.com/assets/light-2ff56e1b36116ee2.css\" /><link crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" href=\"https://github.githubassets.com/assets/light_high_contrast-f7f95d7633592089.css\" /><link crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" href=\"https://github.githubassets.com/assets/dark-2d1fe43dbc9adf1f.css\" /><link crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" href=\"https://github.githubassets.com/assets/dark_high_contrast-d530ee188d165539.css\" /><link data-color-theme=\"light\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light-2ff56e1b36116ee2.css\" /><link data-color-theme=\"light_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_high_contrast-f7f95d7633592089.css\" /><link data-color-theme=\"light_colorblind\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_colorblind-e4bbc49fc7b82570.css\" /><link data-color-theme=\"light_colorblind_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_colorblind_high_contrast-cc3f126b45166b83.css\" /><link data-color-theme=\"light_tritanopia\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_tritanopia-652ca611ea4e33fe.css\" /><link data-color-theme=\"light_tritanopia_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_tritanopia_high_contrast-9e82d635cb6c3f49.css\" /><link data-color-theme=\"dark\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark-2d1fe43dbc9adf1f.css\" /><link data-color-theme=\"dark_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_high_contrast-d530ee188d165539.css\" /><link data-color-theme=\"dark_colorblind\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_colorblind-3ad0ec21150df75b.css\" /><link data-color-theme=\"dark_colorblind_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_colorblind_high_contrast-5691ff467f71a3f6.css\" /><link data-color-theme=\"dark_tritanopia\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_tritanopia-abee7710893cd168.css\" /><link data-color-theme=\"dark_tritanopia_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_tritanopia_high_contrast-eafcf6cd46158360.css\" /><link data-color-theme=\"dark_dimmed\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_dimmed-c7974682a1a84c8d.css\" /><link data-color-theme=\"dark_dimmed_high_contrast\" crossorigin=\"anonymo" 3104: nettest.go:84: TestTranslateCPEToCVE: retrying error: download nvd cve feed: download nvd cve feed: 1 synchronisation error: 3105: unexpected http response from "https://github.com/fleetdm/vulnerabilities/releases/download/cve-202604302036/nvdcve-1.1-2016.meta" ("404 Not Found"): "\n\n\n\n\n\n\n\n<!DOCTYPE html>\n<html\n lang=\"en\"\n \n data-color-mode=\"auto\" data-light-theme=\"light\" data-dark-theme=\"dark\"\n data-a11y-animated-images=\"system\" data-a11y-link-underlines=\"true\"\n \n >\n\n\n\n\n <head>\n <meta charset=\"utf-8\">\n <link rel=\"dns-prefetch\" href=\"https://github.githubassets.com\">\n <link rel=\"dns-prefetch\" href=\"https://avatars.githubusercontent.com\">\n <link rel=\"dns-prefetch\" href=\"https://github-cloud.s3.amazonaws.com\">\n <link rel=\"dns-prefetch\" href=\"https://user-images.githubusercontent.com/\">\n <link rel=\"preconnect\" href=\"https://github.githubassets.com\" crossorigin>\n <link rel=\"preconnect\" href=\"https://avatars.githubusercontent.com\">\n\n <link crossorigin=\"anonymous\" rel=\"preload\" as=\"script\" href=\"https://github.githubassets.com/assets/global-banner-disable-7f8c9b12bd1db3c7.js\" />\n\n <link rel=\"preload\" href=\"https://github.githubassets.com/assets/MonaSansVF-wdth-wght-opsz-902d64c7ad02.woff2\" as=\"font\" type=\"font/woff2\" crossorigin>\n\n\n <link crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" href=\"https://github.githubassets.com/assets/light-2ff56e1b36116ee2.css\" /><link crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" href=\"https://github.githubassets.com/assets/light_high_contrast-f7f95d7633592089.css\" /><link crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" href=\"https://github.githubassets.com/assets/dark-2d1fe43dbc9adf1f.css\" /><link crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" href=\"https://github.githubassets.com/assets/dark_high_contrast-d530ee188d165539.css\" /><link data-color-theme=\"light\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light-2ff56e1b36116ee2.css\" /><link data-color-theme=\"light_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_high_contrast-f7f95d7633592089.css\" /><link data-color-theme=\"light_colorblind\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_colorblind-e4bbc49fc7b82570.css\" /><link data-color-theme=\"light_colorblind_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_colorblind_high_contrast-cc3f126b45166b83.css\" /><link data-color-theme=\"light_tritanopia\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_tritanopia-652ca611ea4e33fe.css\" /><link data-color-theme=\"light_tritanopia_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_tritanopia_high_contrast-9e82d635cb6c3f49.css\" /><link data-color-theme=\"dark\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark-2d1fe43dbc9adf1f.css\" /><link data-color-theme=\"dark_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_high_contrast-d530ee188d165539.css\" /><link data-color-theme=\"dark_colorblind\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_colorblind-3ad0ec21150df75b.css\" /><link data-color-theme=\"dark_colorblind_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_colorblind_high_contrast-5691ff467f71a3f6.css\" /><link data-color-theme=\"dark_tritanopia\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_tritanopia-abee7710893cd168.css\" /><link data-color-theme=\"dark_tritanopia_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_tritanopia_high_contrast-eafcf6cd46158360.css\" /><link data-color-theme=\"dark_dimmed\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark_dimmed-c7974682a1a84c8d.css\" /><link data-color-theme=\"dark_dimmed_high_contrast\" crossorigin=\"anonymo" 3106: nettest.go:84: TestTranslateCPEToCVE: retrying error: download nvd cve feed: download nvd cve feed: 1 synchronisation error: 3107: unexpected http response from "https://github.com/fleetdm/vulnerabilities/releases/download/cve-202604302036/nvdcve-1.1-2016.meta" ("404 Not Found"): "\n\n\n\n\n\n\n\n<!DOCTYPE html>\n<html\n lang=\"en\"\n \n data-color-mode=\"auto\" data-light-theme=\"light\" data-dark-theme=\"dark\"\n data-a11y-animated-images=\"system\" data-a11y-link-underlines=\"true\"\n \n >\n\n\n\n\n <head>\n <meta charset=\"utf-8\">\n <link rel=\"dns-prefetch\" href=\"https://github.githubassets.com\">\n <link rel=\"dns-prefetch\" href=\"https://avatars.githubusercontent.com\">\n <link rel=\"dns-prefetch\" href=\"https://github-cloud.s3.amazonaws.com\">\n <link rel=\"dns-prefetch\" href=\"https://user-images.githubusercontent.com/\">\n <link rel=\"preconnect\" href=\"https://github.githubassets.com\" crossorigin>\n <link rel=\"preconnect\" href=\"https://avatars.githubusercontent.com\">\n\n <link crossorigin=\"anonymous\" rel=\"preload\" as=\"script\" href=\"https://github.githubassets.com/assets/global-banner-disable-7f8c9b12bd1db3c7.js\" />\n\n <link rel=\"preload\" href=\"https://github.githubassets.com/assets/MonaSansVF-wdth-wght-opsz-902d64c7ad02.woff2\" as=\"font\" type=\"font/woff2\" crossorigin>\n\n\n <link crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" href=\"https://github.githubassets.com/assets/light-2ff56e1b36116ee2.css\" /><link crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" href=\"https://github.githubassets.com/assets/light_high_contrast-f7f95d7633592089.css\" /><link crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" href=\"https://github.githubassets.com/assets/dark-2d1fe43dbc9adf1f.css\" /><link crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" href=\"https://github.githubassets.com/assets/dark_high_contrast-d530ee188d165539.css\" /><link data-color-theme=\"light\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light-2ff56e1b36116ee2.css\" /><link data-color-theme=\"light_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_high_contrast-f7f95d7633592089.css\" /><link data-color-theme=\"light_colorblind\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_colorblind-e4bbc49fc7b82570.css\" /><link data-color-theme=\"light_colorblind_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_colorblind_high_contrast-cc3f126b45166b83.css\" /><link data-color-theme=\"light_tritanopia\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_tritanopia-652ca611ea4e33fe.css\" /><link data-color-theme=\"light_tritanopia_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/light_tritanopia_high_contrast-9e82d635cb6c3f49.css\" /><link data-color-theme=\"dark\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://github.githubassets.com/assets/dark-2d1fe43dbc9adf1f.css\" /><link data-color-theme=\"dark_high_contrast\" crossorigin=\"anonymous\" media=\"all\" rel=\"stylesheet\" data-href=\"https://gith...

codecov · 2026-04-30T21:33:31Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 66.70%. Comparing base (e477605) to head (9cf3de3).
⚠️ Report is 14 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main   #44547      +/-   ##
==========================================
- Coverage   66.75%   66.70%   -0.06%     
==========================================
  Files        2636     2637       +1     
  Lines      211725   212187     +462     
  Branches     9400     9400              
==========================================
+ Hits       141332   141534     +202     
- Misses      57550    57828     +278     
+ Partials    12843    12825      -18

Flag	Coverage Δ
backend	`68.46% <100.00%> (-0.07%)`	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

fix glob literals in filenames

9cf3de3

sgress454 temporarily deployed to Docker Hub April 30, 2026 20:52 — with GitHub Actions Inactive

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Allow glob literals in filenames#44547

Allow glob literals in filenames#44547
sgress454 wants to merge 1 commit intomainfrom
sgress454/43598-fix-gitops-glob-path-validation

sgress454 commented Apr 30, 2026

Uh oh!

coderabbitai Bot commented Apr 30, 2026

Review skipped

Uh oh!

qodo-free-for-open-source-projects Bot commented Apr 30, 2026

Uh oh!

codecov Bot commented Apr 30, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

sgress454 commented Apr 30, 2026

Checklist for submitter

Testing

Database migrations

New Fleet configuration settings

fleetd/orbit/Fleet Desktop

Uh oh!

coderabbitai Bot commented Apr 30, 2026

Review skipped

Uh oh!

qodo-free-for-open-source-projects Bot commented Apr 30, 2026

CI Feedback 🧐

Uh oh!

codecov Bot commented Apr 30, 2026

Codecov Report

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant