mcp-searxng: security scan hung for 6 hours, image never published #387
Description
The ghcr.io/stacklok/dockyard/npx/mcp-searxng:0.8.0 image was never published after PR #383
merged. The "Run MCP Security Scan" step hung for ~6 hours (16:30 to 22:35 UTC) before being
killed by the job timeout.
Failed run: https://github.com/stacklok/dockyard/actions/runs/21783187683/job/62850395173
The subsequent push (brightdata update, run 21793482090) completed its security scan successfully,
so the scan infrastructure itself is working. The hang appears specific to mcp-searxng.
The spec includes mock_env for SEARXNG_URL pointing to http://example.com. It's possible the
scan is attempting a real connection to this URL and blocking on the response.