otice)
  vendor/sigs.k8s.io/json/LICENSE: Apache-2.0 (1.000000) (notice)
  vendor/sigs.k8s.io/json/LICENSE: BSD-3-Clause (0.981221) (notice)
  vendor/sigs.k8s.io/randfill/LICENSE: Apache-2.0 (0.996178) (notice)
  vendor/sigs.k8s.io/structured-merge-diff/v6/LICENSE: Apache-2.0 (1.000000) (notice)
  vendor/github.com/cespare/xxhash/v2/LICENSE.txt: MIT (1.000000) (notice)
  vendor/github.com/spf13/cobra/LICENSE.txt: Apache-2.0 (0.996436) (notice)
  vendor/go.uber.org/multierr/LICENSE.txt: MIT (1.000000) (notice)
  vendor/go.yaml.in/yaml/v2/LICENSE.libyaml: MIT (1.000000) (notice)
  vendor/golang.org/x/net/PATENTS: NOASSERTION (0.000000 low-confidence) (unknown)
  vendor/golang.org/x/sys/PATENTS: NOASSERTION (0.000000 low-confidence) (unknown)
  vendor/golang.org/x/text/PATENTS: NOASSERTION (0.000000 low-confidence) (unknown)
  vendor/google.golang.org/protobuf/PATENTS: NOASSERTION (0.000000 low-confidence) (unknown)
  vendor/k8s.io/apimachinery/third_party/forked/golang/PATENTS: NOASSERTION (0.000000 low-confidence) (unknown)
  vendor/k8s.io/utils/internal/third_party/forked/golang/PATENTS: NOASSERTION (0.000000 low-confidence) (unknown)
checking gathered license information against the configuration
detected license differences:
  vendor/github.com/beorn7/perks/LICENSE: MIT not found
  vendor/github.com/blang/semver/v4/LICENSE: MIT not found
  vendor/github.com/davecgh/go-spew/LICENSE: ISC not found
  vendor/github.com/emicklei/go-restful/v3/LICENSE: MIT not found
  vendor/github.com/fxamacker/cbor/v2/LICENSE: MIT not found
  vendor/github.com/google/go-cmp/LICENSE: BSD-3-Clause not found
  vendor/github.com/google/uuid/LICENSE: BSD-3-Clause not found
  vendor/github.com/json-iterator/go/LICENSE: MIT not found
  vendor/github.com/munnerz/goautoneg/LICENSE: BSD-3-Clause not found
  vendor/github.com/pmezard/go-difflib/LICENSE: BSD-3-Clause not found
  vendor/github.com/prometheus/client_golang/internal/github.com/golang/gddo/LICENSE: BSD-3-Clause not found
  vendor/github.com/spf13/pflag/LICENSE: BSD-3-Clause not found
  vendor/github.com/x448/float16/LICENSE: MIT not found
  vendor/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc/LICENSE: BSD-3-Clause not found
  vendor/go.opentelemetry.io/otel/LICENSE: BSD-3-Clause not found
  vendor/go.opentelemetry.io/otel/metric/LICENSE: BSD-3-Clause not found
  vendor/go.opentelemetry.io/otel/trace/LICENSE: BSD-3-Clause not found
  vendor/go.uber.org/automaxprocs/LICENSE: MIT not found
  vendor/go.uber.org/zap/LICENSE: MIT not found
  vendor/go.yaml.in/yaml/v3/LICENSE: MIT not found
  vendor/golang.org/x/net/LICENSE: BSD-3-Clause not found
  vendor/golang.org/x/sys/LICENSE: BSD-3-Clause not found
  vendor/golang.org/x/text/LICENSE: BSD-3-Clause not found
  vendor/google.golang.org/protobuf/LICENSE: BSD-3-Clause not found
  vendor/gopkg.in/inf.v0/LICENSE: BSD-3-Clause not found
  vendor/k8s.io/apimachinery/third_party/forked/golang/LICENSE: BSD-3-Clause not found
  vendor/k8s.io/kube-openapi/pkg/internal/third_party/go-json-experiment/json/LICENSE: BSD-3-Clause not found
  vendor/k8s.io/utils/internal/third_party/forked/golang/LICENSE: BSD-3-Clause not found
  vendor/sigs.k8s.io/json/LICENSE: BSD-3-Clause not found
  vendor/github.com/cespare/xxhash/v2/LICENSE.txt: MIT not found
  vendor/go.uber.org/multierr/LICENSE.txt: MIT not found
  vendor/go.yaml.in/yaml/v2/LICENSE.libyaml: MIT not found
detected license differences, please check the configuration
following license files could not be confidently assessed:
  vendor/golang.org/x/net/PATENTS: NOASSERTION (0.000000) (unknown)
  vendor/golang.org/x/sys/PATENTS: NOASSERTION (0.000000) (unknown)
  vendor/golang.org/x/text/PATENTS: NOASSERTION (0.000000) (unknown)
  vendor/google.golang.org/protobuf/PATENTS: NOASSERTION (0.000000) (unknown)
  vendor/k8s.io/apimachinery/third_party/forked/golang/PATENTS: NOASSERTION (0.000000) (unknown)
  vendor/k8s.io/utils/internal/third_party/forked/golang/PATENTS: NOASSERTION (0.000000) (unknown)
could not identify some licenses, please check the configuration
license information check complete
generating enhanced Syft SBOMs merged with melange metadata
created base melange SBOMs with build metadata
scanning package directory with Syft to enhance SBOM
generating SBOM from unpacked directory
starting Syft cataloging
completed Syft cataloging
finished Syft SBOM generation
successfully merged Syft scan results with melange SBOM
scanning package directory with Syft to enhance SBOM
generating SBOM from unpacked directory
starting Syft cataloging
completed Syft cataloging
finished Syft SBOM generation
successfully merged Syft scan results with melange SBOM
enhanced all SBOMs with Syft scan results
generating package kubernetes-csi-node-driver-registrar-2.16-2.16.0-r0
scanning for ld.so.conf.d files...
scanning for shared object dependencies...
2026/02/16 07:36:59 INFO completed enhanced Syft SBOM generation with merged metadata
scanning for commands...
  found command usr/bin/csi-node-driver-registrar
scanning for -doc package...
scanning for pkg-config data...
scanning for python modules...
scanning for ruby gems...
scanning for shbang deps...
scanning for kernel dependencies...
  provides:
    cmd:csi-node-driver-registrar=2.16.0-r0
    kubernetes-csi-node-driver-registrar=2.16.0-r0
  installed-size: 21275300
  data.tar.gz digest: 8cf47d5a117dd6fc9b713f172886c19731a3eecd1f891aa804f8957dd8a09d3b
wrote packages/x86_64/kubernetes-csi-node-driver-registrar-2.16-2.16.0-r0.apk
generating package kubernetes-csi-node-driver-registrar-2.16-compat-2.16.0-r0
scanning for ld.so.conf.d files...
scanning for shared object dependencies...
scanning for commands...
scanning for -doc package...
scanning for pkg-config data...
scanning for python modules...
scanning for ruby gems...
scanning for shbang deps...
scanning for kernel dependencies...
  provides:
    kubernetes-csi-node-driver-registrar-compat=2.16.0-r0
  installed-size: 41395
  data.tar.gz digest: f2b7f35ba12046412faf68870adaddb215d985fecbb87654d0241e67096becfd
wrote packages/x86_64/kubernetes-csi-node-driver-registrar-2.16-compat-2.16.0-r0.apk
cleaning Workspace by removing 26 file/directories in /home/build
generating apk index from packages in packages/x86_64
processing package packages/x86_64/kubernetes-csi-node-driver-registrar-2.16-compat-2.16.0-r0.apk
processing package packages/x86_64/kubernetes-csi-node-driver-registrar-2.16-2.16.0-r0.apk
updating index at packages/x86_64/APKINDEX.tar.gz with new packages: [kubernetes-csi-node-driver-registrar-2.16-2.16.0-r0 kubernetes-csi-node-driver-registrar-2.16-compat-2.16.0-r0]
qemu: sending shutdown signal
build completed successfully
running malcontent scan...
found 2 APK files to scan
scanning packages/x86_64/kubernetes-csi-node-driver-registrar-2.16-2.16.0-r0.apk -> packages/kubernetes-csi-node-driver-registrar-2.16-2.16.0-r0/mal-scan.json
running command mal [--format=json --exit-extraction=false --min-risk=critical --min-file-risk=critical --quantity-increases-risk=true --output=packages/kubernetes-csi-node-driver-registrar-2.16-2.16.0-r0/mal-scan.json scan packages/x86_64/kubernetes-csi-node-driver-registrar-2.16-2.16.0-r0.apk]
command "mal" completed successfully
scanning packages/x86_64/kubernetes-csi-node-driver-registrar-2.16-compat-2.16.0-r0.apk -> packages/kubernetes-csi-node-driver-registrar-2.16-compat-2.16.0-r0/mal-scan.json
running command mal [--format=json --exit-extraction=false --min-risk=critical --min-file-risk=critical --quantity-increases-risk=true --output=packages/kubernetes-csi-node-driver-registrar-2.16-compat-2.16.0-r0/mal-scan.json scan packages/x86_64/kubernetes-csi-node-driver-registrar-2.16-compat-2.16.0-r0.apk]
command "mal" completed successfully
malcontent scan completed successfully for 2 APKs in 10s
creating packages tarball...
running command tar [-C packages -cf packages.tar .]
command "tar" completed successfully
packages.tar sha256sum: 4f0578c8a1f022b79efef7d450f3751edd6e8ee6ede50c0082afc0b68e34538a
sha256sum "4f0578c8a1f022b79efef7d450f3751edd6e8ee6ede50c0082afc0b68e34538a" written to /dev/termination-log
Built 2 packages, hash: 4f0578c8a1f022b79efef7d450f3751edd6e8ee6ede50c0082afc0b68e34538a, size: 7731712 bytes
uploading final packages tarball...
running command curl [--silent --show-error --fail --upload-file packages.tar -H Content-Type: application/octet-stream https://storage.googleapis.com/prod-bundle-staging/wolfi/x86_64/1771227394605584463-kubernetes-csi-node-driver-registrar-2.16-2.16.0-r0.tar.gz?Expires=1771270594&GoogleAccessId=ebuild-zasv64d5x1oc4m3epw39yod%40prod-enforce-fabc.iam.gserviceaccount.com&Signature=GjjEINIbmQ6ioBOikfI2UI6UDVIK2R6Mie6Bx4O%2By7BekGKZbmCNXz33H1Hn7Jm2ijtyFl03sgq3i9WJvQRM2AmALPuurhaWd8cwt8lMzaGHg%2FXKf2NsC1Q%2BHjmAmSUoOCSqtVTXUZbf8NQE3yRjBSBhx7WMaTAJ3YyoOYvwPjKceweYnPp1NvMszSDnvfihbFo964Qjj1nA5mVt78QRuMmqooYjn0lF3tLiBq69ynCIKblUF5etpA2%2FeCeQsCJ1w9tdKPsvsB7QbVhiyWTCKBhbx9zx1JWY0GujiE7DSLkfTnOgos17W1UyOzRUgFqxFGF0EBTPpG4m0ziy854a6g%3D%3D]
command "curl" completed successfully
upload completed successfully
parsed env
using enhanced syft sbom melange runner
configuring puller identity "720909c9f5279097d847ad02a2f24ba8f59de36a/a49c7fedc33adf69"...
running command chainctl [auth login --audience apk.cgr.dev --identity 720909c9f5279097d847ad02a2f24ba8f59de36a/a49c7fedc33adf69]
Successfully exchanged token.
Valid! Id: 720909c9f5279097d847ad02a2f24ba8f59de36a/a49c7fedc33adf69
Updates are available for chainctl (current version: 0.2.197; latest: 0.2.206). To install, please run:
    $ chainctl update
command "chainctl" completed successfully
puller identity configured successfully
puller identity configured successfully
running tests...
running command /usr/bin/dind [dockerd] in background
command "/usr/bin/dind" started successfully
running command bash [-c 
  # Retry up to 60 seconds to wait for docker to start.
  worked=false
  for i in $(seq 60); do
    if docker info >/dev/null 2>&1; then
	  worked=true
	  break
    fi
    echo "docker healthcheck failed, docker is not ready, retrying... ($i/60 seconds so far)..."
    sleep 1
  done

  if [ "$worked" = "false" ]; then
    echo "Failed to start docker after 60 seconds"
    exit 1
  fi
]

6.0-r0
2026/02/16 07:37:33 INFO completed enhanced Syft SBOM generation with merged metadata
scanning for ld.so.conf.d files...
scanning for shared object dependencies...
scanning for commands...
  found command usr/bin/csi-node-driver-registrar
scanning for -doc package...
scanning for pkg-config data...
scanning for python modules...
scanning for ruby gems...
scanning for shbang deps...
scanning for kernel dependencies...
  provides:
    cmd:csi-node-driver-registrar=2.16.0-r0
    kubernetes-csi-node-driver-registrar=2.16.0-r0
  installed-size: 20230934
  data.tar.gz digest: 194681388e1069666987f75ec396f254110b68c9b08c31db25cce0e46dd2268d
wrote packages/aarch64/kubernetes-csi-node-driver-registrar-2.16-2.16.0-r0.apk
generating package kubernetes-csi-node-driver-registrar-2.16-compat-2.16.0-r0
scanning for ld.so.conf.d files...
scanning for shared object dependencies...
scanning for commands...
scanning for -doc package...
scanning for pkg-config data...
scanning for python modules...
scanning for ruby gems...
scanning for shbang deps...
scanning for kernel dependencies...
  provides:
    kubernetes-csi-node-driver-registrar-compat=2.16.0-r0
  installed-size: 41397
  data.tar.gz digest: e01ca5d5f6499c23cccae61ab7985d02d101ffe5963da5f99c864d02062d9a8b
wrote packages/aarch64/kubernetes-csi-node-driver-registrar-2.16-compat-2.16.0-r0.apk
cleaning Workspace by removing 28 file/directories in /home/build
generating apk index from packages in packages/aarch64
processing package packages/aarch64/kubernetes-csi-node-driver-registrar-2.16-compat-2.16.0-r0.apk
processing package packages/aarch64/kubernetes-csi-node-driver-registrar-2.16-2.16.0-r0.apk
updating index at packages/aarch64/APKINDEX.tar.gz with new packages: [kubernetes-csi-node-driver-registrar-2.16-2.16.0-r0 kubernetes-csi-node-driver-registrar-2.16-compat-2.16.0-r0]
build completed successfully
running malcontent scan...
found 2 APK files to scan
scanning packages/aarch64/kubernetes-csi-node-driver-registrar-2.16-2.16.0-r0.apk -> packages/kubernetes-csi-node-driver-registrar-2.16-2.16.0-r0/mal-scan.json
running command mal [--format=json --exit-extraction=false --min-risk=critical --min-file-risk=critical --quantity-increases-risk=true --output=packages/kubernetes-csi-node-driver-registrar-2.16-2.16.0-r0/mal-scan.json scan packages/aarch64/kubernetes-csi-node-driver-registrar-2.16-2.16.0-r0.apk]
command "mal" completed successfully
scanning packages/aarch64/kubernetes-csi-node-driver-registrar-2.16-compat-2.16.0-r0.apk -> packages/kubernetes-csi-node-driver-registrar-2.16-compat-2.16.0-r0/mal-scan.json
running command mal [--format=json --exit-extraction=false --min-risk=critical --min-file-risk=critical --quantity-increases-risk=true --output=packages/kubernetes-csi-node-driver-registrar-2.16-compat-2.16.0-r0/mal-scan.json scan packages/aarch64/kubernetes-csi-node-driver-registrar-2.16-compat-2.16.0-r0.apk]
command "mal" completed successfully
malcontent scan completed successfully for 2 APKs in 7s
creating packages tarball...
running command tar [-C packages -cf packages.tar .]
command "tar" completed successfully
packages.tar sha256sum: 2d6707b89738b6b5be38a9dda76e690e5d6c2ead78a8d0896bb0c6a521ed09e8
sha256sum "2d6707b89738b6b5be38a9dda76e690e5d6c2ead78a8d0896bb0c6a521ed09e8" written to /dev/termination-log
Built 2 packages, hash: 2d6707b89738b6b5be38a9dda76e690e5d6c2ead78a8d0896bb0c6a521ed09e8, size: 7035392 bytes
uploading final packages tarball...
running command curl [--silent --show-error --fail --upload-file packages.tar -H Content-Type: application/octet-stream https://storage.googleapis.com/prod-bundle-staging/wolfi/aarch64/1771227394605540283-kubernetes-csi-node-driver-registrar-2.16-2.16.0-r0.tar.gz?Expires=1771270594&GoogleAccessId=ebuild-zasv64d5x1oc4m3epw39yod%40prod-enforce-fabc.iam.gserviceaccount.com&Signature=GdJGUr35TjBALLaVxRj425NcBf64BBNpsdPSRnD0SFC9Xazm29Um%2FbC1Jn6871%2BW9kE%2F9TQCDWtoRJBbG9v4pZrYklihVu5IJH7LheE3bJgOa%2FeVNPK8IWA9IYmRrJWtUrSJVYV6IYxgToQLPd7AU8x4JRybVPw77LB5hC18IOFPLQGPcjXmyfIb5QpISrHus%2Fomk9cF%2BKdqHNU7574WmPDkPXeDUibXG8Q%2B17PoHIMQ7hNutXI67X4zATdWAjV3%2FkJApMi50jkKn8vzf%2BT6mRtyW3KmSHPvAldlDujphY64HJR1nO8pucekLi5DiBY446LQEU2%2Fhf4UuFk4d5YaLQ%3D%3D]
command "curl" completed successfully
upload completed successfully
parsed env
using enhanced syft sbom melange runner
configuring puller identity "720909c9f5279097d847ad02a2f24ba8f59de36a/a49c7fedc33adf69"...
running command chainctl [auth login --audience apk.cgr.dev --identity 720909c9f5279097d847ad02a2f24ba8f59de36a/a49c7fedc33adf69]
Successfully exchanged token.
Valid! Id: 720909c9f5279097d847ad02a2f24ba8f59de36a/a49c7fedc33adf69
Updates are available for chainctl (current version: 0.2.197; latest: 0.2.206). To install, please run:
    $ chainctl update
command "chainctl" completed successfully
puller identity configured successfully
puller identity configured successfully
running tests...
running command /usr/bin/dind [dockerd] in background
command "/usr/bin/dind" started successfully
running command bash [-c 
  # Retry up to 60 seconds to wait for docker to start.
  worked=false
  for i in $(seq 60); do
    if docker info >/dev/null 2>&1; then
	  worked=true
	  break
    fi
    echo "docker healthcheck failed, docker is not ready, retrying... ($i/60 seconds so far)..."
    sleep 1
  done

  if [ "$worked" = "false" ]; then
    echo "Failed to start docker after 60 seconds"
    exit 1
  fi
]
command "bash" completed successfully
melange devel with runner docker is testing:
image configuration:
  contents:
    build repositories: []
    runtime repositories: []
    repositories: []
    keyring:      []
    packages:     [kubernetes-csi-node-driver-registrar-2.16]
  accounts:
    runas:  
    users:
      - uid=1000(build) gid=1000
    groups:
      - gid=1000(build) members=[build]
installing kubernetes-csi-node-driver-registrar-2.16 (2.16.0-r0)
installing wolfi-keys (1-r13)
installing wolfi-baselayout (20230201-r26)
installing ca-certificates-bundle (20251003-r3)
installing libgcc (15.2.0-r9)
installing glibc-locale-posix (2.43-r1)
installing glibc (2.43-r1)
installing ld-linux (2.43-r1)
installing zlib (1.3.1.2-r3)
installing libcrypto3 (3.6.1-r1)
installing libssl3 (3.6.1-r1)
installing apk-tools (2.14.10-r10)
installing libxcrypt (4.5.2-r2)
installing libcrypt1 (2.43-r1)
installing busybox (1.37.0-r54)
installing wolfi-base (1-r7)
layer digest: sha256:cce9fbba4061398775dc7f9b0faa517ef59ff2f6964f98fe3aa77979fbf0646d
layer diffID: sha256:95adbe1562376613f80cd0a9fb329b3efdf8cb7015db4e5d872591dbf356efa1
saving OCI image locally: apko.local/cache:0aa93a43b0e7c040227b25a30f673d1157dc96d6dd633ca369f7918582a2bb3f
tagging local image apko.local/cache:0aa93a43b0e7c040227b25a30f673d1157dc96d6dd633ca369f7918582a2bb3f as index.docker.io/library/melange:latest
populating workspace /tmp/melange-workspace-2055638333 from kubernetes-csi-node-driver-registrar-2.16
running the main test pipeline
csi-node-driver-registrar v2.16.0
Usage of csi-node-driver-registrar:
  -automaxprocs
    	automatically set GOMAXPROCS to match Linux container CPU quota
  -connection-timeout duration
    	The --connection-timeout flag is deprecated
  -csi-address string
    	Path of the CSI driver socket that the node-driver-registrar will connect to. (default "/run/csi/socket")
  -enable-pprof
    	enable pprof profiling
  -health-port --health-port
    	(deprecated) TCP port for healthz requests. Set to 0 to disable the healthz server. Only one of --health-port and `--http-endpoint` can be set.
  -http-endpoint :8080
    	The TCP network address where the HTTP server for diagnostics, including pprof and the health check indicating whether the registration socket exists, will listen (example: :8080). The default is empty string, which means the server is disabled. Only one of `--health-port` and `--http-endpoint` can be set.
  -kubelet-registration-path string
    	Path of the CSI driver socket on the Kubernetes host machine.
  -log-flush-frequency duration
    	Maximum number of seconds between log flushes (default 5s)
  -log-json-info-buffer-size value
    	[Alpha] In JSON format with split output streams, the info messages can be buffered for a while to increase performance. The default value of zero bytes disables buffering. The size can be specified as number of bytes (512), multiples of 1000 (1K), multiples of 1024 (2Ki), or powers of those (3M, 4G, 5Mi, 6Gi). Enable the LoggingAlphaOptions feature gate to use this.
  -log-json-split-stream
    	[Alpha] In JSON format, write error messages to stderr and info messages to stdout. The default is to write a single stream to stdout. Enable the LoggingAlphaOptions feature gate to use this.
  -log-text-info-buffer-size value
    	[Alpha] In text format with split output streams, the info messages can be buffered for a while to increase performance. The default value of zero bytes disables buffering. The size can be specified as number of bytes (512), multiples of 1000 (1K), multiples of 1024 (2Ki), or powers of those (3M, 4G, 5Mi, 6Gi). Enable the LoggingAlphaOptions feature gate to use this.
  -log-text-split-stream
    	[Alpha] In text format, write error messages to stderr and info messages to stdout. The default is to write a single stream to stdout. Enable the LoggingAlphaOptions feature gate to use this.
  -logging-format string
    	Sets the log format. Permitted formats: "json" (gated by LoggingBetaOptions), "text". (default "text")
  -mode string
    	DEPRECATED. If this is set to kubelet-registration-probe, the driver will exit successfully without registering with CSI. If set to any other value node-driver-registrar will do the kubelet plugin registration. This flag will be removed in a future major release because the mode kubelet-registration-probe is no longer needed.
  -plugin-registration-path string
    	Path to Kubernetes plugin registration directory. (default "/registration")
  -timeout duration
    	Timeout for waiting for communication with driver (default 1s)
  -v value
    	number for the log level verbosity
  -version
    	Show version.
  -vmodule value
    	comma-separated list of pattern=N settings for file-filtered logging (only works for text log format)