CI / build-and-scan (pull_request) Successful in 1m41s
- entrypoint.sh: bound the target connectivity check with -w 2 (nc -z had no timeout at all, the only unbounded step in the startup path) - tests/entrypoint.bats: widen wait_for_log's budget from 5s to 10s Merge-triggered runs land on a colder runner (Docker cache evicted by other repos' scheduled jobs since the PR was last tested) than PR-check runs, and the first backgrounded entrypoint.sh in the suite was occasionally landing just past the old 5s window — always passed on rerun once warm.