CCI report: 5172a998-8821-4a41-82b6-a7236b385d71

Request message

{
  "request": "trigger",
  "version": 1,
  "event_type": "patch",
  "repository": {
    "id": "rad:z3gqcJUoA1n9HaHKufZs5FCSGazv5",
    "name": "heartwood",
    "description": "Radicle Heartwood Protocol & Stack",
    "private": false,
    "default_branch": "master",
    "delegates": [
      "did:key:z6MksFqXN3Yhqk8pTJdUGLwATkRfQvwZXPqR2qMEhbS9wzpT",
      "did:key:z6MkireRatUThvd3qzfKht1S44wpm4FEWSSa4PRMTSQZ3voM",
      "did:key:z6MkkPvBfjP4bQmco5Dm7UGsX2ruDBieEHi8n9DVJWX5sTEz"
    ]
  },
  "action": "Created",
  "patch": {
    "id": "5c67946e52b3c53736c1a9e383cf0e9c93d79191",
    "author": {
      "id": "did:key:z6MkkPvBfjP4bQmco5Dm7UGsX2ruDBieEHi8n9DVJWX5sTEz",
      "alias": null
    },
    "title": "Warn about private repository vulnerability",
    "state": {
      "status": "open",
      "conflicts": []
    },
    "before": "0e5a56f25f51d07290613a9363bd8c0c9fc8e0be",
    "after": "3129de3b95e18391932368b100b25c13f4102e46",
    "commits": [
      "3129de3b95e18391932368b100b25c13f4102e46"
    ],
    "target": "0e5a56f25f51d07290613a9363bd8c0c9fc8e0be",
    "labels": [],
    "assignees": [],
    "revisions": [
      {
        "id": "5c67946e52b3c53736c1a9e383cf0e9c93d79191",
        "author": {
          "id": "did:key:z6MkkPvBfjP4bQmco5Dm7UGsX2ruDBieEHi8n9DVJWX5sTEz",
          "alias": null
        },
        "description": "All released versions of Radicle are affected by vulnerabilities [1] in the\nnetwork protocol: traffic is unencrypted and the Node IDs of peers are\nnot authenticated. A network observer can read the contents of private\nrepositories, and an impersonating peer can fetch them. No fix has been\nreleased yet.\n\n[1]: https://radicle.dev/2026/09/23/disclosure-of-vulnerability-in-network-protocol\n\nSince users may rely on private repositories being confidential, `rad\ninit` now warns about this before the interactive \"Visibility\" prompt,\nso the warning comes before the choice is made. The warning is printed\nagain in the epilogue whenever the created repository is private. This\nalso covers `--private`, which skips the prompt.\n\nUpdate the `rad-init-private` and `rad-init-private-no-seed` examples\nto match the new output.",
        "base": "0e5a56f25f51d07290613a9363bd8c0c9fc8e0be",
        "oid": "8a00734709e5e51638b3e000183352dda623f792",
        "timestamp": 1790960069
      },
      {
        "id": "0b3261a28fea268a7e4012327da0da6ae798ec02",
        "author": {
          "id": "did:key:z6MkkPvBfjP4bQmco5Dm7UGsX2ruDBieEHi8n9DVJWX5sTEz",
          "alias": null
        },
        "description": "Reword warning.",
        "base": "0e5a56f25f51d07290613a9363bd8c0c9fc8e0be",
        "oid": "3129de3b95e18391932368b100b25c13f4102e46",
        "timestamp": 1791211456
      }
    ]
  }
}

Send response

{
  "response": "triggered",
  "run_id": {
    "id": "5172a998-8821-4a41-82b6-a7236b385d71"
  },
  "info_url": "https://cci.rad.levitte.org//5172a998-8821-4a41-82b6-a7236b385d71.html"
}

Checkout the source (in /opt/radcis/ci.rad.levitte.org/cci/state/5172a998-8821-4a41-82b6-a7236b385d71/w)

Started at: 2026-10-05 16:45:14.935860+02:00

Commands:

Read the repo configuration (.radicle/native.yaml in /opt/radcis/ci.rad.levitte.org/cci/state/5172a998-8821-4a41-82b6-a7236b385d71/w)

shell: 'export RUSTDOCFLAGS=''-D warnings''


  cargo --version

  rustc --version


  cargo fmt --check

  cargo clippy --all-targets --workspace -- --deny warnings

  cargo build --all-targets --workspace

  cargo doc --workspace --no-deps --all-features

  cargo test --workspace --no-fail-fast

  '

Run the script

Commands:

Send result

{
  "response": "finished",
  "result": "failure"
}