בחירת ריפו ודפדוף #8743
amirbironci.yml
on: pull_request
🔍 Code Quality & Security
3m 8s
Dockerfile lint (hadolint)
14s
Secrets scan (gitleaks)
15s
SAST (Semgrep)
17s
YAML lint
9s
Link checker (lychee)
8s
Alembic migrations check
31s
Matrix: unit-tests
Annotations
10 errors and 2 warnings
|
YAML lint
Process completed with exit code 1.
|
|
Dockerfile lint (hadolint):
Dockerfile#L80
SC1091 info: Not following: File not included in mock.
|
|
Dockerfile lint (hadolint):
Dockerfile#L80
DL3008 warning: Pin versions in apt get install. Instead of `apt-get install <package>` use `apt-get install <package>=<version>`
|
|
Dockerfile lint (hadolint):
Dockerfile#L57
DL3042 warning: Avoid use of cache directory with pip. Use `pip install --no-cache-dir <package>`
|
|
Dockerfile lint (hadolint):
Dockerfile#L54
DL4006 warning: Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check
|
|
Dockerfile lint (hadolint):
Dockerfile#L50
DL3042 warning: Avoid use of cache directory with pip. Use `pip install --no-cache-dir <package>`
|
|
Dockerfile lint (hadolint):
Dockerfile#L27
SC1091 info: Not following: File not included in mock.
|
|
Dockerfile lint (hadolint):
Dockerfile#L27
DL3008 warning: Pin versions in apt get install. Instead of `apt-get install <package>` use `apt-get install <package>=<version>`
|
|
Dockerfile lint (hadolint):
Dockerfile#L14
DL3002 warning: Last USER should not be root
|
|
Secrets scan (gitleaks)
🛑 GITHUB_TOKEN is now required to scan pull requests. You can use the automatically created token as shown in the [README](https://github.com/gitleaks/gitleaks-action#usage-example). For more info about the recent breaking update, see [here](https://github.com/gitleaks/gitleaks-action#-announcement).
|
|
Secrets scan (gitleaks)
Unexpected input(s) 'args', valid inputs are ['']
|
|
SAST (Semgrep)
Unexpected input(s) 'generateSarif', valid inputs are ['entryPoint', 'args', 'config', 'publishToken']
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
dependency-audit
Expired
|
3.63 KB |
sha256:f1f702f236a719125b4ec5a961c86c6338b3916a78db23d998ecf5f8faa7f843
|
|
|
unit-durations-3.11-21392455795
Expired
|
350 KB |
sha256:e445e4d453c5242a840ce7096b4f6b37d623d83229179b9a7c2cf3bfbfbeab04
|
|
|
unit-durations-3.12-21392455795
Expired
|
350 KB |
sha256:ea3605f03c70210ccd396dff5bfe31529a7eab7bc5b58fa72a76038fc55828c7
|
|