Skip to content

Feat: Add CPEX plugin #836

Feat: Add CPEX plugin

Feat: Add CPEX plugin #836

Triggered via pull request July 18, 2026 01:36
Status Success
Total duration 1m 9s
Artifacts

security-scans.yaml

on: pull_request
Dependency Review
13s
Dependency Review
Shell Script Lint
12s
Shell Script Lint
YAML Lint
10s
YAML Lint
Python Security (Bandit)
8s
Python Security (Bandit)
Dockerfile Lint (Hadolint)
8s
Dockerfile Lint (Hadolint)
Trivy Filesystem Scan
28s
Trivy Filesystem Scan
Verify Action Pinning
3s
Verify Action Pinning
Matrix: codeql
Fit to window
Zoom out
Zoom in

Annotations

6 errors and 5 warnings
Dockerfile Lint (Hadolint): authbridge/cmd/authbridge-proxy/Dockerfile#L35
DL3003 warning: Use WORKDIR to switch to a directory
Dockerfile Lint (Hadolint): authbridge/cmd/authbridge-envoy/Dockerfile#L27
DL3003 warning: Use WORKDIR to switch to a directory
Dockerfile Lint (Hadolint): authbridge/cmd/authbridge-cpex/Dockerfile#L144
DL3003 warning: Use WORKDIR to switch to a directory
Dockerfile Lint (Hadolint): authbridge/cmd/authbridge-cpex/Dockerfile#L61
SC2015 info: Note that A && B || C is not if-then-else. C may run when A is true.
Dockerfile Lint (Hadolint): authbridge/cmd/authbridge-cpex/Dockerfile#L61
DL4006 warning: Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check
YAML Lint: .github/workflows/build.yaml#L154
154:11 [key-duplicates] duplication of key "build-args" in mapping
Verify Action Pinning
Found actions not pinned to SHA commits:
YAML Lint: .github/workflows/build.yaml#L120
120:151 [line-length] line too long (189 > 150 characters)
OpenSSF Scorecard Warning
gomod/github.com/lestrrat-go/option has an OpenSSF Scorecard of 2.8, which is less than this repository's threshold of 3.
CodeQL Analysis (python)
1 issue was detected with this workflow: Please specify an on.push hook to analyze and see code scanning alerts from the default branch on the Security tab.
CodeQL Analysis (go)
1 issue was detected with this workflow: Please specify an on.push hook to analyze and see code scanning alerts from the default branch on the Security tab.