build(deps): Bump actions/checkout from 7.0.0 to 7.0.1 #842
dependabot[bot]security-scans.yaml
on: pull_request
Dependency Review
6s
Shell Script Lint
7s
YAML Lint
8s
Python Security (Bandit)
9s
Dockerfile Lint (Hadolint)
18s
Trivy Filesystem Scan
22s
Verify Action Pinning
6s
Matrix: codeql
Annotations
6 errors and 4 warnings
|
YAML Lint:
.github/workflows/build.yaml#L154
154:11 [key-duplicates] duplication of key "build-args" in mapping
|
|
Dockerfile Lint (Hadolint):
authbridge/cmd/authbridge-proxy/Dockerfile#L35
DL3003 warning: Use WORKDIR to switch to a directory
|
|
Dockerfile Lint (Hadolint):
authbridge/cmd/authbridge-envoy/Dockerfile#L27
DL3003 warning: Use WORKDIR to switch to a directory
|
|
Dockerfile Lint (Hadolint):
authbridge/cmd/authbridge-cpex/Dockerfile#L144
DL3003 warning: Use WORKDIR to switch to a directory
|
|
Dockerfile Lint (Hadolint):
authbridge/cmd/authbridge-cpex/Dockerfile#L61
SC2015 info: Note that A && B || C is not if-then-else. C may run when A is true.
|
|
Dockerfile Lint (Hadolint):
authbridge/cmd/authbridge-cpex/Dockerfile#L61
DL4006 warning: Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check
|
|
YAML Lint:
.github/workflows/build.yaml#L120
120:151 [line-length] line too long (189 > 150 characters)
|
|
Verify Action Pinning
Found actions not pinned to SHA commits:
|
|
CodeQL Analysis (python)
1 issue was detected with this workflow: Please specify an on.push hook to analyze and see code scanning alerts from the default branch on the Security tab.
|
|
CodeQL Analysis (go)
1 issue was detected with this workflow: Please specify an on.push hook to analyze and see code scanning alerts from the default branch on the Security tab.
|