Bug 16469 - AB-INT: sbom-cve-check-update-cvelist-native: Failed to fetch
Summary: AB-INT: sbom-cve-check-update-cvelist-native: Failed to fetch
Status: NEW
Alias: None
Product: OE-Core
Classification: Build System, Metadata & Runtime
Component: core (show other bugs)
Version: unspecified
Hardware: x86 Multiple
: Undecided normal
Target Milestone: 0.0.0
Assignee: Unassigned
QA Contact:
URL:
Whiteboard: AB-INT
Depends on:
Blocks:
 
Reported: 2026-10-27 08:55 UTC by Mathieu Dubois-Briand
Modified: 2026-10-27 08:59 UTC (History)
2 users (show)

See Also:
OS type for building Yocto: ---
Type of Regression: ---
Verified:
Documentation change: No (bug/feature does not impact docs)


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Mathieu Dubois-Briand 2026-10-27 08:55:05 UTC
We got some new fetch failure on the autobuilder:

> WARNING: sbom-cve-check-update-cvelist-native-2026-09-12-r0 do_fetch: Failed to fetch URL git://github.com/CVEProject/cvelistV5.git;branch=main;protocol=https;destsuffix=;tag=2026-09-12_baseline, attempting MIRRORS if available
> ERROR: sbom-cve-check-update-cvelist-native-2026-09-12-r0 do_fetch: Fetcher failure: Fetch command ['git', '-c', 'gc.autoDetach=false', '-c', 'core.pager=cat', '-c', 'safe.bareRepository=all', '-c', 'clone.defaultRemoteName=origin', 'fetch', '-f', '--update-head-ok', '--progress', 'mirror'] failed with exit code 128, output:
> fatal: You are attempting to fetch 71fa191d627c2c9e43383827e3dee92eb25e2052, which is in the commit graph file but not in the object database.
> This is probably due to repo corruption.
> If you are attempting to repair this repo corruption by refetching the missing object, use 'git fetch --refetch' with the missing object.
> 
> ERROR: sbom-cve-check-update-cvelist-native-2026-09-12-r0 do_fetch: Bitbake Fetcher Error: FetchError('Unable to fetch URL from any source.', 'git://github.com/CVEProject/cvelistV5.git;branch=main;protocol=https;destsuffix=;tag=2026-09-12_baseline')
> ERROR: Logfile of failure stored in: /srv/pokybuild/yocto-worker/qemuarm64-armhost/build/build/tmp/work/aarch64-linux/sbom-cve-check-update-cvelist-native/2026-09-12/temp/log.do_fetch.1714959
> NOTE: recipe sbom-cve-check-update-cvelist-native-2026-09-12-r0: task do_fetch: Failed

On a local copy of the git, I confirm 71fa191d627c2c9e43383827e3dee92eb25e2052 is present.
Comment 1 Mathieu Dubois-Briand 2026-10-27 08:55:38 UTC
qemuarm64-armhost stream10-vk-arm1 master completed at 2026-10-25 01:48:19+00:00
https://autobuilder.yoctoproject.org/valkyrie/#/builders/8/builds/4928/steps/15/logs/stdio

qemuarm64-armhost stream10-vk-arm1 mathieu/master-next completed at 2026-10-24 18:54:40+00:00
https://autobuilder.yoctoproject.org/valkyrie/#/builders/8/builds/4927/steps/15/logs/stdio