[#414548] p11 EPERM cosign.git=3.0.6-alt1

[Girar awaiter (admsasha)]

https://git.altlinux.org/tasks/414548/logs/events.1.1.log
https://packages.altlinux.org/tasks/414548

subtask  name    aarch64  i586  x86_64
   #100  cosign     4:57  3:27    3:12

2026-Apr-08 10:12:45 :: task #414548 for p11 started by admsasha:
2026-Apr-08 10:12:45 :: message: fix_CVE-2026-39395
#100 build 3.0.6-alt1 from /gears/c/cosign.git fetched at 2026-Apr-08 10:07:13 from sisyphus
2026-Apr-08 10:12:46 :: [x86_64] #100 cosign.git 3.0.6-alt1: build start
2026-Apr-08 10:12:46 :: [i586] #100 cosign.git 3.0.6-alt1: build start
2026-Apr-08 10:12:46 :: [aarch64] #100 cosign.git 3.0.6-alt1: build start
2026-Apr-08 10:15:58 :: [x86_64] #100 cosign.git 3.0.6-alt1: build OK
2026-Apr-08 10:16:13 :: [i586] #100 cosign.git 3.0.6-alt1: build OK
2026-Apr-08 10:17:43 :: [aarch64] #100 cosign.git 3.0.6-alt1: build OK
2026-Apr-08 10:17:52 :: 100: build check OK
2026-Apr-08 10:17:53 :: build check OK
2026-Apr-08 10:17:59 :: #100: cosign.git 3.0.6-alt1: version check OK
2026-Apr-08 10:17:59 :: build version check OK
2026-Apr-08 10:18:19 :: noarch check OK
2026-Apr-08 10:18:21 :: plan: src +1 -1 =20220, aarch64 +2 -2 =36099, i586 +2 -2 =34853, x86_64 +2 -2 =37075
#100 cosign 3.0.4-alt1 -> 3.0.6-alt1
 Wed Apr 08 2026 Alexander Danilov <admsasha at altlinux> 3.0.6-alt1
 - New version 3.0.6 (Fixes: CVE-2026-39395).
 Wed Feb 25 2026 Ivan Pepelyaev <fl0pp5 at altlinux> 3.0.5-alt1
 - New version 3.0.5 (Fixes: CVE-2026-24122).
2026-Apr-08 10:18:21 :: cosign: fixes vulnerabilities: CVE-2026-39395 CVE-2026-24122
2026-Apr-08 10:19:18 :: patched apt indices
2026-Apr-08 10:19:28 :: created next repo
2026-Apr-08 10:19:40 :: duplicate provides check OK
2026-Apr-08 10:20:23 :: dependencies check OK
2026-Apr-08 10:20:59 :: [x86_64 i586 aarch64] ELF symbols check OK
2026-Apr-08 10:21:14 :: [i586] #100 cosign: install check OK
2026-Apr-08 10:21:15 :: [x86_64] #100 cosign: install check OK
2026-Apr-08 10:21:23 :: [aarch64] #100 cosign: install check OK
2026-Apr-08 10:21:25 :: [i586] #100 cosign-debuginfo: install check OK
2026-Apr-08 10:21:26 :: [x86_64] #100 cosign-debuginfo: install check OK
2026-Apr-08 10:21:40 :: [aarch64] #100 cosign-debuginfo: install check OK
2026-Apr-08 10:22:01 :: [x86_64-i586] generated apt indices
2026-Apr-08 10:22:01 :: [x86_64-i586] created next repo
2026-Apr-08 10:22:15 :: [x86_64-i586] dependencies check OK
2026-Apr-08 10:22:16 :: gears inheritance check OK
2026-Apr-08 10:22:16 :: srpm inheritance check OK
girar-check-perms: access to cosign DENIED for admsasha: project `cosign' is not listed in the acl file for repository `p11', and the policy for such projects in `p11' is to deny
check-subtask-perms: #100: cosign: needs approvals from members of @maint and @tester groups
2026-Apr-08 10:22:17 :: acl check FAILED
2026-Apr-08 10:22:32 :: created contents_index files
2026-Apr-08 10:22:46 :: created hash files: aarch64 i586 src x86_64
2026-Apr-08 10:22:51 :: task #414548 for p11 EPERM