Bug 16469

Summary: AB-INT: sbom-cve-check-update-cvelist-native: Failed to fetch
Product: [Build System, Metadata & Runtime] OE-Core Reporter: Mathieu Dubois-Briand <mathieu.dubois-briand>
Component: coreAssignee: Unassigned <unassigned>
Status: NEW --- QA Contact:
Severity: normal    
Priority: Undecided CC: meta.mr.watcher, meta.watcher
Version: unspecified   
Target Milestone: 0.0.0   
Hardware: x86   
OS: Multiple   
Whiteboard: AB-INT
OS type for building Yocto: --- Type of Regression: ---
Verified: Documentation change: No (bug/feature does not impact docs)

Description Mathieu Dubois-Briand 2026-10-27 08:55:05 UTC
We got some new fetch failure on the autobuilder:

> WARNING: sbom-cve-check-update-cvelist-native-2026-09-12-r0 do_fetch: Failed to fetch URL git://github.com/CVEProject/cvelistV5.git;branch=main;protocol=https;destsuffix=;tag=2026-09-12_baseline, attempting MIRRORS if available
> ERROR: sbom-cve-check-update-cvelist-native-2026-09-12-r0 do_fetch: Fetcher failure: Fetch command ['git', '-c', 'gc.autoDetach=false', '-c', 'core.pager=cat', '-c', 'safe.bareRepository=all', '-c', 'clone.defaultRemoteName=origin', 'fetch', '-f', '--update-head-ok', '--progress', 'mirror'] failed with exit code 128, output:
> fatal: You are attempting to fetch 71fa191d627c2c9e43383827e3dee92eb25e2052, which is in the commit graph file but not in the object database.
> This is probably due to repo corruption.
> If you are attempting to repair this repo corruption by refetching the missing object, use 'git fetch --refetch' with the missing object.
> 
> ERROR: sbom-cve-check-update-cvelist-native-2026-09-12-r0 do_fetch: Bitbake Fetcher Error: FetchError('Unable to fetch URL from any source.', 'git://github.com/CVEProject/cvelistV5.git;branch=main;protocol=https;destsuffix=;tag=2026-09-12_baseline')
> ERROR: Logfile of failure stored in: /srv/pokybuild/yocto-worker/qemuarm64-armhost/build/build/tmp/work/aarch64-linux/sbom-cve-check-update-cvelist-native/2026-09-12/temp/log.do_fetch.1714959
> NOTE: recipe sbom-cve-check-update-cvelist-native-2026-09-12-r0: task do_fetch: Failed

On a local copy of the git, I confirm 71fa191d627c2c9e43383827e3dee92eb25e2052 is present.
Comment 1 Mathieu Dubois-Briand 2026-10-27 08:55:38 UTC
qemuarm64-armhost stream10-vk-arm1 master completed at 2026-10-25 01:48:19+00:00
https://autobuilder.yoctoproject.org/valkyrie/#/builders/8/builds/4928/steps/15/logs/stdio

qemuarm64-armhost stream10-vk-arm1 mathieu/master-next completed at 2026-10-24 18:54:40+00:00
https://autobuilder.yoctoproject.org/valkyrie/#/builders/8/builds/4927/steps/15/logs/stdio