[devantler]

🤖 Generated by the Agentic Engineer

Why

A new Go security advisory, GO-2026-6859 in the standard web server and client, is fixed in Go 1.27.4. The data product controller and its test fixtures are built with 1.27.3, so released images carry the vulnerable code and the vulnerability scan will refuse new changes.

What

Builds the controller image, its module and the test fixtures with Go 1.27.4. Behaviour is otherwise unchanged.

Fixes #600

[devantler]

🤖 Generated by the Agentic Engineer

@codex review

[chatgpt-codex-connector]

Codex Review Summary: ✅ Completed

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-11-11T04:35:52.062043Z	707ef9f	Manual request

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. 🚀

Reviewed commit: 707ef9f4a3

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[github-actions]

✅⚠️MegaLinter analysis: Success with warnings

Descriptor	Linter	Files	Fixed	Errors	Max errors	Warnings	Elapsed time
✅ ACTION	actionlint	8		0		0	0.56s
✅ ACTION	zizmor	8	0	0		0	2.78s
✅ BASH	bash-exec	76		0		0	0.86s
✅ BASH	shellcheck	76		0		0	15.48s
✅ BASH	shfmt	76	0	0		0	0.62s
✅ COPYPASTE	jscpd	yes		no		no	3.23s
✅ CSS	stylelint	4	0	0		0	6.03s
✅ DOCKERFILE	hadolint	4		0		0	0.6s
✅ EDITORCONFIG	editorconfig-checker	564		0		0	2.44s
✅ HTML	djlint	3		0		0	4.06s
✅ HTML	htmlhint	3		0		0	0.84s
✅ JSON	jsonlint	22		0		0	0.13s
✅ JSON	prettier	18	0	0		0	1.17s
✅ JSON	v8r	22		0		0	9.55s
⚠️ MARKDOWN	markdownlint	79	0	11		0	4.07s
✅ MARKDOWN	markdown-table-formatter	79	0	0		0	0.36s
✅ REPOSITORY	betterleaks	yes		no		no	1.62s
✅ REPOSITORY	checkov	yes		no		no	41.54s
✅ REPOSITORY	git_diff	yes		no		no	0.11s
✅ REPOSITORY	grype	yes		no		no	115.45s
✅ REPOSITORY	osv-scanner	yes		no		no	4.33s
✅ REPOSITORY	secretlint	yes		no		no	2.13s
✅ REPOSITORY	syft	yes		no		no	8.92s
✅ REPOSITORY	trivy	yes		no		no	24.96s
✅ REPOSITORY	trivy-sbom	yes		no		no	14.35s
✅ REPOSITORY	trufflehog	yes		no		no	5.47s
✅ SPELL	lychee	173		0		0	6.39s
✅ XML	xmllint	2	0	0		0	0.15s
✅ YAML	prettier	51	0	0		0	1.58s
✅ YAML	v8r	66		0		0	13.66s
✅ YAML	yamllint	55		0		0	1.58s

Detailed Issues

⚠️ MARKDOWN / markdownlint - 11 errors

AGENTS.md:79:401 error MD013/line-length Line length [Expected: 400; Actual: 593]
docs/adr/0025-retained-identifiers-after-the-rename.md:24:401 error MD013/line-length Line length [Expected: 400; Actual: 402]
docs/adr/0025-retained-identifiers-after-the-rename.md:26:401 error MD013/line-length Line length [Expected: 400; Actual: 402]
docs/adr/0025-retained-identifiers-after-the-rename.md:27:401 error MD013/line-length Line length [Expected: 400; Actual: 402]
docs/adr/0025-retained-identifiers-after-the-rename.md:28:401 error MD013/line-length Line length [Expected: 400; Actual: 402]
docs/adr/0025-retained-identifiers-after-the-rename.md:29:401 error MD013/line-length Line length [Expected: 400; Actual: 402]
docs/adr/0025-retained-identifiers-after-the-rename.md:31:401 error MD013/line-length Line length [Expected: 400; Actual: 402]
docs/adr/0025-retained-identifiers-after-the-rename.md:32:401 error MD013/line-length Line length [Expected: 400; Actual: 402]
docs/adr/0025-retained-identifiers-after-the-rename.md:33:401 error MD013/line-length Line length [Expected: 400; Actual: 402]
docs/adr/0025-retained-identifiers-after-the-rename.md:34:401 error MD013/line-length Line length [Expected: 400; Actual: 402]
docs/adr/0025-retained-identifiers-after-the-rename.md:35:401 error MD013/line-length Line length [Expected: 400; Actual: 402]

See detailed reports in MegaLinter artifacts

Show us your support by starring ⭐ the repository

[github-code-quality]

Code coverage overview

Languages: Go

Go / code-coverage/go

main	claude/security-go-1... 707ef9f	+/-
—	69%	—

Line coverage data for the main branch is not yet available.

View coverage of the 10 most covered files.

File	main	claude/security-go-1... 707ef9f	+/-
internal/catalog/catalog.go	—	98%	—
internal/contro...t_controller.go	—	94%	—
internal/provider/v1/arango.go	—	93%	—
internal/preflight/check.go	—	93%	—
internal/provid...r/v1/percona.go	—	92%	—
internal/registry/lineage.go	—	91%	—
internal/contro.../composition.go	—	90%	—
internal/preflight/input.go	—	88%	—
examples/api-consumer/main.go	—	80%	—
internal/registry/discovery.go	—	79%	—

ℹ️ Calculations represent line coverage. Results may change as calculations are updated.

[devantler]

🤖 Generated by the Agentic Engineer

Readiness at 707ef9f4a3e48150fa35415371de5e6bf6f293b1

• Tried as a user: locally on Go 1.27.4 the module builds, the full test suite and the provider fixture's tests pass, the toolchain test passes, and govulncheck reports no vulnerabilities (GO-2026-6859 gone). CI builds the controller image from the updated golang:1.27.4-alpine base.
• Review: Codex reviewed this exact head, no findings; 0 threads. CodeRabbit is rate limited.
• Hygiene: all checks green.